generated: '2026-07-18'
method: searched
probe: false
policy: []
contact:
- mailto:security@cycognito.com
note: >-
  CyCognito publishes a security contact (security@cycognito.com) for security and
  compliance matters (e.g. requesting the SOC 2 report). No formal public
  responsible-disclosure policy or bug-bounty program (HackerOne/Bugcrowd/Intigriti)
  was found. No /.well-known/security.txt is served (the platform host returns a
  soft-404 SPA shell; www returns 404).
evidence:
- source: https://www.cycognito.com/news/press-releases/cycognito-achieves-soc-2-type-ii-and-iso-27001-security-certifications.php
  kind: security-contact
  detail: security@cycognito.com published as the security/SOC 2 report contact