GoodLeap

GoodLeap Security Program

GoodLeap Security appreciates the valuable contributions of the security research community, and will operate in good faith with researchers who discover, test, and submit vulnerabilities. However, we ask that you consider the following during any testing:

Research Conduct

Your research actions should not exploit any vulnerability identified by you or any existing published vulnerabilities.

Prohibited Testing Activities

Your testing should not attempt to take harmful action against the GoodLeap platform including but not limited to:

• Compromise of accounts belonging to other users
• Exfiltration of Data
• Denial of Service
• Phishing, Social Engineering, or other similar behavior targeting GoodLeap users, contractors, or employees

Publication Policy

You may not publish any works related to GoodLeap's platform unless you have been provided written permission by GoodLeap (contact [email protected]).