generated: '2026-08-01'
method: searched
source: https://www.immuta.com/trust/
probe: true
program:
  name: Immuta Vulnerability Disclosure Program
  platform: Bugcrowd
  type: vulnerability-disclosure
  managed: true
policy:
- https://www.immuta.com/trust/
report_url: https://bugcrowd.com/61d7ba4d-be53-4704-9a73-761d6f108df9/external/report
contact: []
security_txt: false
notes: 'The Immuta trust page carries a "Vulnerability Disclosure Program" section
  whose "Immuta''s Vulnerability Disclosure Policy" panel embeds the Bugcrowd external
  disclosure widget (script src https://bugcrowd.com/61d7ba4d-be53-4704-9a73-761d6f108df9/external/script,
  data-bugcrowd-program pointing at the external report form). The program is Bugcrowd-hosted
  rather than published as a standalone policy page, and Immuta serves no /.well-known/security.txt
  on any of its hosts (all probed 404 — see well-known/immuta-well-known.yml), so an
  automated security.txt probe misses this program entirely.'
evidence:
- source: https://www.immuta.com/trust/
  kind: embedded-bugcrowd-widget
  http_status: 200
  fetched: '2026-08-01'
  excerpt: 'Vulnerability Disclosure Program / Immuta''s Vulnerability Disclosure Policy'
- source: https://bugcrowd.com/61d7ba4d-be53-4704-9a73-761d6f108df9/external/report
  kind: bugcrowd-external-report-form
  fetched: '2026-08-01'