F-Secure

We want to hear about any security vulnerabilities in our products and services. In order to reward security researchers, we offer monetary rewards for eligible security vulnerability reports that are disclosed to us in a coordinated way. However, there are certain rules that need to be followed to ensure that your security research does not cause security risk to other users or their data, and to decrease the likelihood that your research would be flagged as a malicious intrusion attempt by our monitoring. We also want to be clear about certain aspects relating to acceptance of reports and payment of rewards in order to avoid any surprises.

A "security vulnerability" is defined as an issue that causes a breach of confidentiality, integrity, or availability of the service or data, or applies to personal data (privately identifiable information) being stored or processed in a way that is not compliant with the current Finnish data protection legislation.

Policy: https://www.f-secure.com/en/business/programs/vulnerability-reward-program

Security advisories: https://www.f-secure.com/en/business/programs/vulnerability-reward-program

Hall of Fame: https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame