generated: '2026-07-19'
method: searched
probe: true
source: https://everledger.io/.well-known/security.txt
policy:
- https://everledger.io/.well-known/security.txt
contact:
- security@everledger.io
acknowledgements: https://www.everledger.io/.well-known/security-acknowledgements.txt
bug_bounty: false
summary: >-
  Everledger publishes a vulnerability disclosure policy (NCSC-aligned) at its
  .well-known/security.txt. Reports go to security@everledger.io; the team
  responds within 3 working days and aims to triage within 6. No monetary
  rewards are offered. Remediation targets: HIGH within 1 week, MEDIUM within 2
  weeks, LOW within 1 month. Valid researchers may be listed on the
  security-acknowledgements page.
evidence:
- source: https://everledger.io/.well-known/security.txt
  kind: security.txt
  keywords:
  - vulnerability disclosure policy
  - security@everledger.io
- source: https://everledger.io/vulnerability-disclosure-policy/
  kind: disclosure page
  keywords:
  - vulnerability
  - security@