generated: '2026-08-02'
method: searched
probe: true
source: https://www.tricentis.com/trust/vulnerability-disclosure-policy
evidence:
- source: https://www.tricentis.com/trust/security
  kind: security page
  keywords:
  - vulnerability
  - security research
  - disclosure
- source: https://www.tricentis.com/trust/vulnerability-disclosure-policy
  kind: disclosure policy
  contact: vdp@tricentis.com
- source: https://security.tricentis.com/
  kind: trust center
policy:
- https://www.tricentis.com/trust/vulnerability-disclosure-policy
contact:
- vdp@tricentis.com
program:
  name: Tricentis Vulnerability Disclosure Policy
  type: vulnerability disclosure policy
  bug_bounty: false
  platform: null
  note: Tricentis runs its own coordinated disclosure programme rather than a HackerOne/Bugcrowd/Intigriti
    bounty. The policy states Tricentis "welcomes feedback from security researchers and our customers"
    and that submitting a report constitutes agreement to the policy guidelines.
security_txt:
  published: false
  probed:
  - https://www.tricentis.com/.well-known/security.txt
  - https://www.tricentis.com/security.txt
  status: 404
  note: No RFC 9116 security.txt is served, despite a published disclosure policy and a dedicated
    vdp@ mailbox.