generated: '2026-07-19'
method: searched
probe: false
source: https://alloy.app/security
policy:
  - https://alloy.app/security/responsible-disclosure
contact:
  - security@alloy.app
bug_bounty:
  program: private
  platform: null
  notes: A private bug bounty program exists; details on the Responsible Disclosure page.
security_program:
  - External penetration testing
  - Static code analysis
  - Third-party vulnerability scanning
evidence:
  - source: https://alloy.app/security
    kind: security-page
    detail: "Lists security@alloy.app, responsible disclosure page, and a private bug bounty."