Report Security Issues | 42Crunch

We take security seriously.

Security is our top priority and we proactively look for ways to improve the security of our products. Our security program is transparent so you can be confident when using our products for mission-critical projects.

Report a Vulnerability

We welcome all contributions from our user community, developers, and security researchers to reinforce our product security. You could even be recognized in our security hall of fame for disclosing vulnerabilities responsibly!

We strongly encourage you to report any security vulnerabilities to our private and confidential security mailing list: security@42crunch.com first, before disclosing them in any forums, blogs, sites, social media, or other groups, should they be public or private.

If you wish to send secure messages to security@42crunch.com, you may use the following key:

User: security@42crunch.com
Fingerprint: 68B982300B911319FFBA1F50A008A656C3CBA447

Responsible Disclosure of Vulnerabilities

Based on the ethics of responsible disclosure, it is recommended to follow the process given below to report security vulnerabilities.

Coverage

Exclusions

Accepted Vulnerabilities

Everything else must NOT be attempted nor reported and do not qualify for rewards