Reporting a vulnerability to us
Email security@appscan.sh. What to include, what we will do, and what not to do.
We would rather hear it from you than read about it later. Send what you found and how to reproduce it to security@appscan.sh. We confirm receipt, keep you updated while we fix it, and credit you if you want the credit.
Please do not
- Run denial-of-service tests against the platform.
- Access, modify or delete data belonging to another customer.
- Use social engineering against our team or our vendors.
- Publish before we have had a reasonable chance to fix it.
Questions
Do you pay bounties?
Not a formal programme yet. We do say thank you properly, and we credit you publicly if you want that.
Something here wrong, missing or out of date? Tell us and we will fix the page.