Coordinated disclosure
Help us protect PeopleScore customers.
We welcome good-faith reports about security weaknesses. This page describes the safe reporting channel; it is not a bug bounty promise or authorization to access customer data.
Report securely
The monitored disclosure channel is not published in this environment. Do not send sensitive findings through sales or demo forms.
Include the affected surface, reproducible steps, impact, timestamps and a safe way to contact you. Do not include credentials or personal data unless specifically requested over an approved encrypted channel.
Our handling commitment
We triage reports, restrict evidence to the response team, coordinate remediation and communicate material status when a verified contact is available. Timelines depend on severity and safe customer protection.
Good-faith boundaries
- Use only accounts, tenants and data you own or were explicitly authorized to test.
- Stop immediately if you encounter another person's data; do not retain, alter or redistribute it.
- Do not perform denial of service, social engineering, physical attacks, malware deployment, destructive actions or provider/payment attacks.
- Do not publicly disclose an unresolved issue before a coordinated remediation window is agreed.