generated: '2026-09-19'
method: searched
probe: true
source: well-known/forcedream-ai-security.txt
policy:
  - https://forcedream.com/trust
contact:
  - mailto:security@forcedream.com
security_txt:
  file: well-known/forcedream-ai-security.txt
  served_on: [forcedream.ai, api.forcedream.ai, www.forcedream.com, forcedream.com]
  fields: {Contact: 'mailto:security@forcedream.com', Preferred-Languages: en, Canonical: 'https://forcedream.com/.well-known/security.txt', Policy: 'https://forcedream.com/trust', Expires: absent}
  rfc9116_gap: No Expires field (required by RFC 9116).
program:
  type: security.txt contact + trust centre
  bug_bounty: none found
  bug_bounty_checked: [HackerOne, Bugcrowd, Intigriti (web search 2026-09-19, no ForceDream programme), /security (404 on both domains), /.well-known/security.txt Policy line]
  safe_harbor: not stated
  response_commitment: '"Security or compliance questions? Our trust team responds within one business day." (trust centre, trust@forcedream.ai)'
  terms_clause: '"3.1 Credential security ... Notify support@forcedream.com immediately on suspected compromise." (Terms)'
evidence:
  - source: well-known/forcedream-ai-security.txt
    kind: security.txt (previously harvested)
  - source: https://www.forcedream.com/trust
    kind: Policy target named by security.txt; live 200 on 2026-09-19
  - source: https://www.forcedream.com/developers/security
    kind: Developer security page (WORM chain, key hashing, fail-closed modules) — architecture, not a disclosure policy
notes:
  - The Policy URL resolves to the Trust Centre overview rather than a dedicated vulnerability-disclosure or responsible-disclosure page; the disclosure channel is the mailbox.