How to report a vulnerability, what we commit to in return, and the rules of engagement.
01Reporting
E-mail privacy@mentornity.com with a description of the issue, the steps to reproduce it and its impact. Please use your own test account and do not access, change or delete other people’s data.
02Our commitment
- Acknowledge your report within 3 business days.
- Keep you informed while we investigate and fix it.
- Not pursue legal action against good-faith research that follows this policy.
- Credit you, if you wish, once the issue is resolved.
03Out of scope
- Denial-of-service and load testing.
- Social engineering of staff or customers, and physical attacks.
- Automated scanner output without a demonstrated impact.
04Contact
Questions about this policy, security questionnaires and Data Processing Agreement requests: privacy@mentornity.com.