Skip to content
Policy Acceptance Template
  • Pages
    • Welcome!
    • Live Policies
      • Acceptable Use Policy
      • Access Control Policy
      • Asset Management Policy
      • Backup Policy
      • Business Continuity and Disaster Recovery Policy
      • Change Management Policy
      • Code of Conduct
      • Data Classification and Handling Policy
      • Data Protection Policy
      • Data Retention and Deletion Policy
      • Encryption & Key Management Policy
      • Exception and Enforcement Policy
      • Incident Response Policy
      • Information Security Policy
      • Internal Security Audit Policy
      • Network Security Policy
      • Password Policy
      • Physical Security Policy
      • icon picker
        Responsible Disclosure Policy
      • Risk Management Policy
      • Secure Development Policy
      • Vendor Management Policy
      • Vulnerability Management & Patch Policy
      • Wireless Communication Policy
    • Admin
      • Policy Compliance
      • Acceptance Log
      • Live Policies Admin View
      • Policy Changelog
      • Template Policy

Responsible Disclosure Policy

Overview

Our company takes the security of our systems seriously and values the contributions of the security community. We encourage responsible reporting of any vulnerabilities that may be found in our systems to ensure the security and privacy of our users' data.
If you believe you have discovered a vulnerability, please report it to us as soon as possible. We ask that you:
Do not share or publicize the issue until we have had a chance to investigate and address it.
Provide us with a reasonable amount of time to address the issue before disclosing it publicly.
Do not exploit the vulnerability beyond the minimal amount of testing required to prove its existence.
Provide full details of the vulnerability, including steps to reproduce and any tools used.
We will investigate all legitimate reports and make every effort to quickly address any vulnerability. We will not take legal action against or terminate access to those who discover and report vulnerabilities in accordance with this policy.
Thank you for helping keep our systems and users safe.

Revision History

Date of Change
Policy
Notes
7/7/2023
Moved from SecureFrame to Coda. Minor Formatting changes.
1/31/2022
Resync policy with live version from https://hackerone.com/coda_bbp.
No results from filter

Accept

Responsible Disclosure Policy 1.1
By clicking this button I acknowledge that I have read the above policy and agree to comply with the policy
No results from filter


Revision and acceptance filter:
DO NOT CHANGE


 
Want to print your doc?
This is not the way.
Try clicking the ··· in the right corner or using a keyboard shortcut (
CtrlP
) instead.