generated: '2026-08-26'
method: probed
source: >-
  /.well-known/security.txt probes on www.nasuni.com, docs.nasuni.com, docs.api.nasuni.com,
  am1.portal.api.nasuni.com, eu1.portal.api.nasuni.com and gfa-telemetry-us1.api.nasuni.com;
  plus direct probes of likely disclosure pages on www.nasuni.com.
name: Nasuni vulnerability disclosure
published: false
security_txt: false
bug_bounty: false
disclosure_page: false
note: >-
  No coordinated vulnerability disclosure surface was found. No security.txt on any host, no
  /security, /product-security, /security-response or /report-vulnerability page on www.nasuni.com,
  and no HackerOne, Bugcrowd or Intigriti program. The Vanta trust center at trust.nasuni.com is
  the only security-facing public surface and it is JS-rendered, so if a disclosure policy is
  published inside it, it is not machine-discoverable. NO `Security` pointer is emitted in apis.yml
  — that would assert a disclosure program Nasuni does not publicly serve.
probes:
- url: https://www.nasuni.com/.well-known/security.txt
  status: 404
- url: https://docs.nasuni.com/.well-known/security.txt
  status: 404
- url: https://docs.api.nasuni.com/.well-known/security.txt
  status: 404
- url: https://am1.portal.api.nasuni.com/.well-known/security.txt
  status: 404
- url: https://www.nasuni.com/security/
  status: 404
- url: https://www.nasuni.com/product-security/
  status: 404
- url: https://www.nasuni.com/security-response/
  status: 404
- url: https://www.nasuni.com/report-vulnerability/
  status: 404
- url: https://www.nasuni.com/legal/vulnerability-disclosure/
  status: 404