EmailMeForm Bug Bounty Program

Bug Bounty Scope

The following websites are within the scope of the program:

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

General Requirements:

Bugs EMF is interested in

We are interested in bugs that compromise the functionality of our services, in particular:

security vulnerabilities
privacy leaks

Testing Requirements:

Bug reports should be sent by email to [email protected]

What does a valid bug report look like?

Let us know where you found it:
For apps: state the platform and versions you’re using
For website: please state the browser version and your OS version
Clearly explain or video record the steps needed to reproduce the bug
Describe the bug in as much detail as you can (include any logs, if available)
State what you expected to happen
Assess the impact this issue may have on EMF and our users
If possible, suggest a way to fix the bug
Please include any other information that might be relevant.

Possible Awards:

EMF offers financial rewards and recognizes your contribution to the security of our services. We pay for valid bug reports (see below for more information) that are reported for the first time. EMF will decide the appropriate reward on a case by case basis.

In addition, and with your permission, your findings may be publicly acknowledged and credited to you in a blog post, release notes of future software updates, or listing in our security researcher honor roll if preferred.

Other Submissions Handling