generated: '2026-08-29'
method: searched
source: https://docs.tailor.tech/reference/security
name: Tailor security policy and vulnerability posture
description: >-
  Tailor publishes a security policy page in its developer documentation covering
  enterprise security (RBAC, endpoint protection, vendor security review, security
  education) and product security (encryption, vulnerability management). It does NOT
  publish a coordinated vulnerability disclosure channel: no security.txt is served on
  any Tailor host, and no bug bounty or researcher-facing disclosure page was found.
security_policy:
  published: true
  url: https://docs.tailor.tech/reference/security
  status: 200
  sections:
  - Role-based access control (RBAC)
  - Endpoint protection (MDM, anti-malware, 24/7/365 alert monitoring, disk encryption)
  - Vendor security (inherent and residual risk rating before approval)
  - Security education (onboarding plus annual training, threat briefings)
  - Data encryption (AES-256 at rest, TLS in transit)
  - Vulnerability management (regular vulnerability assessments, severity-based remediation)
vulnerability_disclosure:
  program: none-found
  security_txt: false
  security_txt_probes:
  - url: https://www.tailor.tech/.well-known/security.txt
    status: 404
  - url: https://api.tailor.tech/.well-known/security.txt
    status: 404
  - url: https://docs.tailor.tech/.well-known/security.txt
    status: 404
  bug_bounty: none-found
  platforms_checked:
  - HackerOne
  - Bugcrowd
  - Intigriti
  disclosure_contact: >-
    No researcher-facing security contact is published. The only published contact is
    the general support address support@tailor.tech
    (docs.tailor.tech/administration/support).
  gap: >-
    A researcher who finds a vulnerability in Tailor Platform has no published intake
    channel. Serving a /.well-known/security.txt with a Contact and Policy field is the
    single cheapest fix and is currently a 404 on every Tailor host.
x-evidence:
  fetched: '2026-08-29'
  probes:
  - url: https://docs.tailor.tech/reference/security.md
    status: 200
  - url: https://www.tailor.tech/.well-known/security.txt
    status: 404