๐Ÿ›ก๏ธ Responsible Disclosure Guidelines
Noon avatar
Written by Noon
Updated over a week ago

At Noon, we take the security of our product seriously and encourage responsible reporting of any vulnerabilities or security concerns that may be discovered. If you believe you have discovered a security vulnerability in our application, we ask that you follow these guidelines to report it responsibly:

  1. Report the vulnerability to us by sending an email to security@noon.work. Please provide us with as much information as possible, including a description of the vulnerability, steps to reproduce it, and any proof of concept code or screenshots that may be helpful.

  2. Please do not publicly disclose the vulnerability until we have had sufficient time to investigate and address the issue.

  3. We do not currently have a bug bounty program, and as such, we are not offering monetary compensation for vulnerability reports at this time. However, we value your input and will work to address any security issues as quickly as possible.

  4. We commit to acknowledging receipt of your report within 72 hours and will aim to provide a status update within five business days.

  5. We ask that you do not attempt to exploit the vulnerability further than necessary to validate your findings. We also request that you do not disclose any sensitive data that may have been accessed during your testing.

  6. We ask that you do not engage in any malicious activity, including but not limited to, performing denial of service attacks, social engineering, or any other activities that may cause harm to our users or infrastructure.

  7. We reserve the right to take legal action against anyone who engages in malicious activity or violates our responsible disclosure guidelines.

Thank you for helping us to maintain the security of our product. Your cooperation and collaboration are essential to ensuring the safety of our users and their data.

Did this answer your question?