generated: '2026-08-27'
method: probed
source: live probes of Sitetracker hosts and the major bug-bounty platforms
note: >-
  No public vulnerability disclosure program found. Sitetracker serves no
  security.txt, publishes no /security or /responsible-disclosure page, and has
  no listing on HackerOne or Bugcrowd. A disclosure policy may well exist inside
  the Drata trust center at trust.sitetracker.com, but that host answers our
  probe with a Cloudflare bot challenge, so it could not be confirmed. Because
  nothing was verified, no `Security` pointer is emitted — this file records the
  absence, it does not assert a program.
program_found: false
security_txt:
  present: false
  probes:
  - url: https://www.sitetracker.com/.well-known/security.txt
    status: 404
  - url: https://help.sitetracker.com/.well-known/security.txt
    status: 200
    note: Salesforce login HTML shell, not a security.txt
  - url: https://community.sitetracker.com/.well-known/security.txt
    status: 200
    note: Salesforce login HTML shell, not a security.txt
  - url: https://trust.sitetracker.com/.well-known/security.txt
    status: 403
    note: Cloudflare bot challenge — inconclusive
disclosure_pages:
- url: https://www.sitetracker.com/security/
  status: 404
- url: https://www.sitetracker.com/responsible-disclosure/
  status: 404
- url: https://www.sitetracker.com/vulnerability-disclosure/
  status: 404
- url: https://www.sitetracker.com/security-policy/
  status: 404
bug_bounty:
- platform: HackerOne
  url: https://hackerone.com/sitetracker
  status: 404
- platform: Bugcrowd
  url: https://bugcrowd.com/sitetracker
  status: 404