generated: '2026-07-23'
method: searched
source: https://www.cnb.com/privacy-security.html
probe: true
summary: >-
  City National Bank publishes a "Responsible Disclosure" section on its
  Privacy & Security page. As a wholly owned subsidiary of Royal Bank of
  Canada (RBC), it directs security researchers to report potential
  vulnerabilities in any RBC-owned product or system through the RBC
  Responsible Disclosure process. No City-National-specific bug bounty
  (HackerOne/Bugcrowd/Intigriti) or standalone security.txt was found.
policy:
- https://www.cnb.com/privacy-security.html
- https://www.rbc.com/cyber-security/responsible-disclosures/index.html
contact: []
security_txt: false
bug_bounty: false
evidence:
- source: https://www.cnb.com/privacy-security.html
  kind: responsible-disclosure-page
  note: >-
    "Responsible Disclosure" heading; text encourages reporting potential
    vulnerabilities and links to the RBC Responsible Disclosure website.
- source: https://www.rbc.com/cyber-security/responsible-disclosures/index.html
  kind: parent-disclosure-program
  status: 200
  note: RBC group Responsible Disclosure program that CNB defers to.