Vulnerability Disclosure Policy
We encourage and support working with the research and security practitioner community to improve our online security.
We welcome investigative work into security vulnerabilities, carried out by well-intentioned and ethical security researchers. We are committed to:
- Investigating and resolving security issues in our platform and services thoroughly
- Working in collaboration with the security community
- Responding promptly and actively
Bug Bounty
Unfortunately, it is not currently possible for us to offer a paid bug bounty programme. We will, however, make efforts to show our appreciation to security researchers who take the time and effort to investigate and report security vulnerabilities to us according to this policy wherever we can.
Reporting a Vulnerability
Please contact us directly here simon@gaggle.email.