generated: '2026-08-01'
method: probed
probe: true
source: live probe of security.txt and disclosure pages on Nerdio hosts
result: none
notes: >-
  No vulnerability disclosure program, responsible-disclosure policy, bug bounty or
  published security contact was found for Nerdio. Recorded as probe evidence only —
  no Security or VulnerabilityDisclosure pointer is wired in apis.yml, because
  nothing was found. This file exists so a later round can upgrade it rather than
  re-run the same probe blind.
policy: []
contact: []
bug_bounty:
  hackerone: not found
  bugcrowd: not found
  intigriti: not found
probes:
- {url: 'https://getnerdio.com/.well-known/security.txt', status: 404}
- {url: 'https://nmm-distributor-api.nerdio.net/.well-known/security.txt', status: 404}
- {url: 'https://nmehelp.getnerdio.com/.well-known/security.txt', status: 404}
- {url: 'https://nmmhelp.getnerdio.com/.well-known/security.txt', status: 404}
- {url: 'https://getnerdio.com/security/', status: 403, note: 'getnerdio.com returns 403 to non-browser clients on content paths; no /security/ page appears in the site sitemap'}
- {url: 'https://getnerdio.com/nerdio-trust-center/', status: 200, note: 'Trust Center page carries no security contact and no disclosure policy — see security/nerdio-trust-center.yml'}
related:
  trust_center: security/nerdio-trust-center.yml
  domain_security: security/nerdio-domain-security.yml
  product_hardening_guidance: https://nmehelp.getnerdio.com/hc/en-us/articles/26124315691149-Harden-Nerdio-Manager