generated: '2026-09-20'
method: searched
source: https://vinkius.com/legal/security
contact:
- mailto:security@vinkius.com
policy_published: true
policy_url: https://vinkius.com/legal/security
bug_bounty: false
safe_harbor: not stated
response_commitments:
- source: https://vinkius.com/legal/security
  stated: '"We acknowledge security reports within 24 hours"'
- source: https://github.com/vinkius-labs/ai-connect-sdk/blob/main/SECURITY.md
  stated: '"We aim to acknowledge reports within 3 business days and to provide a remediation timeline after triage."'
evidence:
- source: https://vinkius.com/legal/security
  http_status: 200
  kind: security policy page with a security reporting contact and acknowledgement time
- source: https://github.com/vinkius-labs/ai-connect-sdk/blob/main/SECURITY.md
  http_status: 200
  kind: repository SECURITY.md - private reporting address, supported versions
security_txt:
  url: https://vinkius.com/.well-known/security.txt
  http_status: 404
bug_bounty_probe:
  checked: '2026-09-20'
  method: 0-working/probe-security-programs.py
  result: No HackerOne, Bugcrowd or Intigriti program and no trust center found (vdp=none trust=none); the disclosure contact above was found by reading the legal security page, which the probe does not parse.