Responsible Disclosure Program

The PrepLadder responsible disclosure program is designed to encourage security researchers to find security vulnerabilities in PrepLadder software and to recognize those who help us create a safe and secure product for our customers and partners.

If you believe you have found a security vulnerability in PrepLadder software, we encourage you to let us know as soon as possible. We will investigate the submission and if found valid, take necessary corrective measures. We request you to review our responsible disclosure policy as mentioned below along with the reporting guidelines, before you report a security issue.

The information on this page is intended for security researchers interested in reporting security vulnerabilities to PrepLadder security team. If you are a PrepLadder customer and have concerns regarding non-information security related issues or seeking information about your PrepLadder account / complaints, please reach out to customer support or write to contact@prepladder.com.

How to report an issue?

If you happen to have identified a vulnerability on any of our web or mobile app properties, we request you to follow the steps outlined below:

Rewards

Responsible disclosure & reporting guidelines

Responsibility at our end

Targets in scope

Out of Scope Targets

Eligibility

Prerequisites to qualify for Reward:

Qualifying vulnerabilities

Report a bug that could compromise the integrity of user data, circumvent the privacy protections of user data or enable access to a restricted/sensitive system within our infrastructure.

Common examples include:

Out of scope vulnerabilities

Some of the reported issues, which carry low impact, may not qualify. Although we review them on a case-by-case basis, here are some of the common low-risk issues which typically do not earn any recognition:

Changes to Program Terms

The responsible disclosure program, including its policies, is subject to change or cancellation by PrepLadder at any time, without notice. As such, PrepLadder may amend these program terms and/or its policies at any time by posting a revised version on our website. By continuing to participate in the responsible disclosure program after PrepLadder posts any such changes, you implicitly agree to comply with the updated program terms.