HackYourMom Security Testing Policy

HackYourMom is committed to ensuring maximum security for its users and data. We greatly appreciate the efforts of security researchers who help us identify and fix vulnerabilities. We offer rewards for responsible vulnerability disclosure commensurate with vulnerability severity.

Contact

Please send vulnerability reports to our contact email:

• Email: [email protected]

Encryption

To ensure the confidentiality of your message, please use our PGP key:

• PGP key: [https://hackyourmom.com/blog/pgp-key/]

Testing rules

1. Allowed testing methods:

• Testing using techniques that do not violate the law.
• Testing should be aimed at identifying vulnerabilities in our own systems.
• Using only your accounts or accounts for which you have express permission.

2. Prohibited testing methods:

• Social engineering or phishing of users or employees.
• Any testing that results in a denial of service (DoS).
• Any actions that may lead to data or infrastructure damage.

Rewards

We reward researchers based on the severity of the vulnerability they discover:

1. Low vulnerability: 1 rubber duck

2. Medium vulnerability: 2 rubber ducks

3. Critical vulnerability: 3 rubber ducks

Rewards are at the sole discretion of HackYourMom and may vary depending on the context and severity of the vulnerability.

Responsible disclosure

We ask that you follow the principles of responsible disclosure:

• Report vulnerabilities found immediately.

• Provide enough information to reproduce the vulnerability.

• Please refrain from publicly disclosing vulnerabilities until we fix the issue.Conclusion

We appreciate your help in keeping our site safe and look forward to working with you. If you have any questions or need more information, please do not hesitate to contact us using the contact information provided.

With best regards, The HackYourMom team