Eventbrite
External Program
Submit bugs directly to this organization
Eventbrite
##Introduction## At Eventbrite, we deeply value the safety and security of our users. We go through great lengths to ensure that our systems are built and maintained to the highest standards, but also recognize that no computer system is without flaws. To that extent, Eventbrite wishes to recognize the contribution of public security reporters who take interest in Eventbrite security and helping further protect its user, customers, and employees by responsibly disclosing any security vulnerabilities they find through this program.
##Test Account Usage##
To test your work, please [Sign Up] (https://www.eventbrite.com/signup) for a test account and be sure to include +hackerone in your email address when signing up (e.g. [email protected])
Researchers not following the+hackerone rule will not be eligible for rewards under this program.
##Rules## You, the responsible security researcher, will only be considered eligible for this program provided you:
Eventbrite reserves the right to modify the rules of this program or deem any submission invalid at any time, for any reason, and without notification. Eventbrite may cancel this Security Research Program at anytime without notice.
##Program Scope## The scope of this security research program is limited to:
##Vulnerabilities## The Eventbrite Security Team has complete and final authority over which vulnerabilities are eligible for inclusion in the Program and any applicable rewards. Typically, Eventbrite will only reward vulnerability classes listed below:
##Known Issues## The following list of vulnerabilities have already been reported to our Security team, reviewed, and deemed out of scope for the purposes of this program. Please do not report any of the following classes of issues. Unless there are exceptional circumstances or novel attacks, these issues will be closed as Not Applicable
##Known False Positives
##Ineligible Vulnerability Classes## Eventbrite does not consider the following to be eligible vulnerabilities under this program:
##Rewards## Eventbrite currently offers Public Acknowledgement on our Eventbrite Security Wall of Fame
##Legal Indemnification ## Eventbrite will not pursue legal action against security researchers who follow the program rules outlined in this document and responsibly disclose vulnerabilities to us.