generated: '2026-07-18'
method: searched
source: https://codspeed.io/docs/security
policy:
  - https://codspeed.io/docs/security
contact:
  - support@codspeed.io
bug_bounty: none
notes: >-
  No RFC 9116 /.well-known/security.txt and no formal bug-bounty program
  (HackerOne/Bugcrowd/Intigriti) were found. CodSpeed publishes a security
  policy page documenting its practices, GitHub permission model, and a security
  contact. Reported vulnerabilities can be sent to support@codspeed.io.
evidence:
  - source: https://codspeed.io/docs/security
    kind: security-policy-page
  - source: https://trust.codspeed.io
    kind: trust-center