Please include the following details in your email submission:

• Description of the location and potential impact of the vulnerability;

• Steps required to reproduce the vulnerability (POC scripts, screenshots, and compressed screen captures are all helpful to us)

We will get back to you within 96 hours. If you do not receive a response from us, it is possible that the problem has already been reported or that the description provided is incomprehensible. We ask that you follow the responsible disclosure standards, which include (but are not limited to)

We request you to adhere to the principles of Responsible Disclosure which are (but not limited to):

• Access and expose your own consumer data.

• Avoid scanning tactics that are likely to degrade service to other customers (for example, by overloading the site).

• Follow the instructions in our Terms of Service.




• Keep vulnerability details private until the softrate security team has been alerted and has had a reasonable amount of time to resolve the vulnerability.

1. Refrain from Public Disclosure

Taking into consideration the safety of our customers/users please do not publish any security vulnerabilities. We expect to fix all security issues within 30 days from the date of the reported security issue. Once an issue has been fixed we will explicitly acknowledge this and at which time you are free to publish your work.

2. Get Recognized for your efforts

You may receive recognition on our Security Hall of fame page depending on various factors like :

• You are the first person to report the vulnerability.

• The vulnerability level of the reported issue.

• You have complied with our guidelines.