generated: '2026-08-26'
method: probed
source: live probes of scalecomputing.com hosts
program:
  published: false
  security_txt: false
  bug_bounty: false
  platform: null
  policy_url: null
  contact: null
  note: >-
    No RFC 9116 security.txt is served on any Scale Computing host, no disclosure policy page was found,
    and no bug-bounty listing exists on HackerOne, Bugcrowd or Intigriti. The only published contact is
    the general info@scalecomputing.com / 877-722-5359 on the contact page. Recorded as absent — this is
    a real gap in the provider's posture, not a probe failure.
evidence:
- url: https://www.scalecomputing.com/.well-known/security.txt
  status: 200
  finding: soft-404 — Craft CMS catch-all returns the 87,613-byte "404 | Scale Computing" page, not a security.txt
- url: https://api.scalecomputing.com/.well-known/security.txt
  status: 404
- url: https://fleet.scalecomputing.com/.well-known/security.txt
  status: 200
  finding: soft-404 — SPA index.html (1,306 bytes) returned for every path
- url: https://www.scalecomputing.com/security
  status: 200
  finding: product marketing page; no disclosure program, no security contact