Bug Bounty Hall of Fame
We greatly appreciate the security researchers who help keep HeapCortex products safe. While we don't currently offer financial rewards, we want to recognize your contributions.
🏆
Smith Johnson
1 bugs reported
Your name here Report a vulnerability to get recognized
Bug Bounty Policy
In Scope:
- Authentication and authorization flaws
- Cross-Site Scripting (XSS), SQL Injection, CSRF vulnerabilities
- Server-side request forgery (SSRF)
- Sensitive data exposure
- Business logic flaws with security impact
Out of Scope:
- Denial of Service (DoS/DDoS) attacks
- Social engineering or phishing
- Physical security attacks
- Third-party services or libraries (report upstream)
- Issues without clear security impact
-
Currently, we do not offer financial rewards (bounties) for reported vulnerabilities. However, we are
happy to recognize your contribution by adding your name and profile to our Hall of Fame on this page,
subject to your permission.
- Do not access, modify, or delete other users' data
- Do not perform actions that could degrade service availability
- Provide a detailed report with steps to reproduce
- Allow reasonable time for us to address issues before disclosure
- Act in good faith and comply with all applicable laws
- Use only your own test accounts for testing
Send your vulnerability report to [email protected] with the following information:
- Description of the vulnerability and its potential impact
- Affected product/URL
- Step-by-step reproduction instructions
- Screenshots or proof-of-concept (if applicable)
- Your contact information for follow-up
We aim to acknowledge reports as early as possible.
Found a vulnerability?
Help us keep HeapCortex products secure for everyone. Responsible disclosures are always appreciated.
Report a Bug