01How to report
Email hello@hackmoat.com with a description of the vulnerability, the steps to reproduce it and the affected system. Please report as soon as possible after discovery.
02Scope
This policy covers hackmoat.com and its subdomains, including the client portal. Systems of our clients are out of scope; report those to the client directly.
03We ask you to
Not access, change or delete data beyond what is needed to demonstrate the vulnerability. Not use denial-of-service, social engineering or physical attacks. Not share the vulnerability with others until we have fixed it. Delete any data you obtained once you have reported it.
04What we promise
We confirm receipt within three business days and keep you informed of our progress. We treat your report confidentially and do not share your details without your permission. If you follow this policy, we will not take legal action against you for your report. With your consent, we credit you once the issue is fixed.