Responsible Disclosure
Report security vulnerabilities, audit platform endpoints, and collaborate with the security cell. Safe harbor rules and bounty guidelines.
Submit Vulnerability Report
Please provide clear, step-by-step reproduction instructions.
Safe Harbor Rules
• Do not execute destructive attacks (DDoS, spam, automated scanning).
• Do not access, download, or leak database records of residents.
• Submit the report immediately upon discovering a security gap.
• Wait for our security team validation before public disclosures.
Bounty Tiers
UI bugs, mixed content issues, minor security configuration leaks.
IDOR vulnerability, CSRF on non-critical endpoints, minor leaks.
SQL Injection, stored XSS, privilege escalation inside partner consoles.
Remote Code Execution (RCE), complete database auth bypass, resident app compromise.
Social engineering, phishing of employees, and gate guard physical attacks are strictly out of scope and will lead to legal actions.