Phenom People
Phenom Applied AI is an AI platform that helps organizations hire faster, develop employees, and retain talent longer with automation and intelligence.
External Program
Submit bugs directly to this organization
Phenom People
Phenom Applied AI is an AI platform that helps organizations hire faster, develop employees, and retain talent longer with automation and intelligence.
External Program
Submit bugs directly to this organization
Phenom welcomes feedback from security researchers and the general public to help improve Phenom security. If you believe you discovered a vulnerability, privacy issue, exposed data, or other security issues in any of Phenom's assets, Phenom would like to hear from you. This Policy outlines the process for reporting vulnerabilities to Phenom, what Phenom expects and what you can expect from Phenom.
This Policy applies to any digital assets owned, operated, or maintained by Phenom.
Assets or other equipment not owned by parties participating in this Policy.
Vulnerabilities discovered or suspected in out-of-scope systems should be reported to the appropriate vendor or applicable authority.
Phenom sincerely appreciates and values those who take the time and effort to report security vulnerabilities according to this Policy. However, Phenom does not offer monetary rewards for vulnerability disclosures.
Once the vulnerability has been fixed, as a way of recognition and acknowledgement, the reporter will be listed at their own discretion, unless they wish to remain anonymous, in the Phenom Hall of Fame.
When working with Phenom, you can expect Phenom to:
By participating in Phenom's Vulnerability Disclosure Program in good faith, we ask that you:
Please report security issues via our Vulnerability Reporting Form or by email to [email protected], providing all relevant information. The more details you provide, the easier it will be for Phenom to triage and fix the issue. If you wish to protect the contents of your submission, you may use the following Phenom PGP key.
When conducting vulnerability research in accordance with this Policy, Phenom consider such research to be:
Phenom commits to comply with all applicable laws. If any legal action is initiated by a third party against you and you have complied with this Policy, Phenom will take steps to make it known that your actions were conducted in compliance with this Policy.
If at any time you have concerns or are uncertain whether your security research is consistent with this Policy, please submit a report through one of Phenom Official Channels before going any further.
Note that Safe Harbor applies only to legal claims under the control of the organization participating in this Policy, and that the Policy does not bind independent third parties.