generated: '2026-07-17'
method: searched
probe: true
source: https://www.twilio.com/en-us/security/vulnerability-disclosure-program
description: >-
  Twilio runs both a public Vulnerability Disclosure Program (open to customers
  and researchers) and a long-running Bug Bounty Program (10+ years) operated
  through HackerOne, with Bugcrowd used for triage and a Safe Harbor commitment.
  Researchers are asked to practice coordinated/responsible disclosure.
policy:
  - https://www.twilio.com/en-us/security/vulnerability-disclosure-program
  - https://www.twilio.com/docs/usage/security/reporting-vulnerabilities
bug_bounty:
  - platform: HackerOne
    url: https://hackerone.com/twilio
  - platform: Bugcrowd
    url: https://bugcrowd.com/engagements/twilio/crowdstream
safe_harbor: true
disclosure: coordinated / responsible disclosure
security_overview: https://www.twilio.com/en-us/legal/security-overview
evidence:
  - {source: https://www.twilio.com/en-us/security/vulnerability-disclosure-program, kind: disclosure-page}
  - {source: https://hackerone.com/twilio, kind: bug-bounty}
  - {source: https://www.twilio.com/docs/usage/security/reporting-vulnerabilities, kind: docs-reporting}