OpenBugBounty.org > Bug Bounty List > Broadpeak.io Bug Bounty Program

Broadpeak.io Bug Bounty Program

Broadpeak.io runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of Broadpeak.io

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between Broadpeak.io and researchers.

Bug bounty program allow private submissions only.

Bug Bounty Scope

The following websites are within the scope of the program:

broadpeak.io

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

Please refer to https://broadpeak.io/security for details of our security policy.

General guidance:
• Do not share gathered information with third parties.
• Please make sure to provide enough information so that we can reproduce the issue. A short description including a problem description and the URL/IP of the affected system should be sufficient.

Testing Requirements:

Vulnerabilities should be verified as authentic, and not simply automated results of pen-tests.

Possible Awards:

We will provide recommendations and Broadpeak goodies.

Special Notes:

https://broadpeak.io/legal
https://broadpeak.io/terms-of-services

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Researcher's comments

27 November, 2022

Ka_ranrathod:

Hello there, let me have your email or submission form so i can report security issues.

22 July, 2022

PR3XS1:

Hey team i have found a security vulnerability in your domain please provide me your email so i can send the vulnerability report

Latest Patched

Recent Recommendations

23 November, 2023

Renard007:

Grace à Hatim_cf on a pu corrigé une faille mineure de sécurité.

22 November, 2023

nag:

On behalf of our users on one of the pages hosted at users.encs.concordia.ca, I'd like to thank Niko for his effort in finding and responsibly reporting an XSS vuln in one of our user's sites. The XSS was quickly patched after Niko's detailed report making the web a safer place again. Thanks!

22 November, 2023

creality:

Ronald identified an XSS vulnerability on our site which could be fixed fast. Thanks for the provided information!

4 November, 2023

Enzo:

Thank you for fixing the XSS vulnerability

13 October, 2023

Hamza:

I am highly recommending Sajid for web assessments and penetrating testing. Sajid was highly professional and detailed in t heir approach towards finding vulnerabilities.


Response Time How quickly researchers get responses to their submissions.
Remediation Time How quickly reported submissions are fixed.
Cooperation and Respect How fairly and respectfully researchers are being treated.