Vulnerability Disclosure Form

JavaScript isn't enabled in your browser, so this file can't be opened. Enable and reload.

Scout Holding Company

About our Vulnerability Disclosure Form

* We only accept vulnerability reports through this form for certain systems; these are listed in our VDP. * We also accept emails at hi@trustscout.com and can engage in back-and-forth conversation there. * We do not support PGP-encrypted emails for vulnerability reports. For particularly sensitive information, use this TLS-encrypted form. - - - - - - - - - When you choose to share your contact information with us, we commit to coordinating with you as openly and as quickly as possible. * Within 3 business days, we will acknowledge that your report has been received. * To the best of our ability, we will confirm the existence of the vulnerability to you and be as transparent as possible about what steps we are taking during the remediation process, including on issues or challenges that may delay resolution. * We will maintain an open dialogue to discuss issues.

1. Share the hostname/URL where the vulnerability is
*

2. Describe the vulnerability and its potential impact.

3. Give a detailed description of the steps needed to reproduce the vulnerability (links to proof of concept scripts or screenshots are helpful).

4.(Optional) Is there anything else we should know?

5.(Optional) You may share your email address so that we can contact you about your report.

Agreement to submission *

By submitting a vulnerability, you agree and acknowledge that you have no expectation of payment and that you expressly waive any future pay claims against Scout Holding Company related to your submission.

Required

Submit

Clear form

Never submit passwords through Google Forms.

This form was created inside of Scout.. Report Abuse

Forms