If you believe you’ve found a security vulnerability in a system we own or operate, we want to hear about it. This page explains how to report it and what you can expect from us.
Last updated: 27 June 2026
01Our Commitment
If you make a good-faith effort to comply with this policy during your research, we will:
- Work with you to understand and validate your report, and keep you updated on our progress.
- Not pursue or support legal action against you for accidental, good-faith violations of this policy.
- Recognise your contribution if you are the first to report a valid, previously-unknown issue and you would like to be credited.
02Scope
This policy applies to internet-facing systems that HackersForce owns or operates, including this website. Third-party services we use (such as our host or email provider) are governed by their own disclosure programmes — please report issues in those directly to the relevant vendor.
03How to Report
Send your report to contact@hackersforce.com with the subject line “Security Disclosure”. Please include:
- A clear description of the issue and the system or URL affected.
- The steps needed to reproduce it, including any proof-of-concept.
- The potential impact as you see it.
- How you’d like to be credited, if at all.
04What We Ask of You
To keep researchers and our users safe, please:
- Give us a reasonable amount of time to investigate and remediate before any public disclosure.
- Avoid privacy violations, data destruction, and interruption or degradation of our services.
- Only interact with accounts you own or have explicit permission to access, and do not access, modify or exfiltrate other people’s data.
- Do not run automated scanners aggressively, attempt denial-of-service, use social engineering, or pivot to other systems.
- Keep the details of any vulnerability confidential until we’ve resolved it.
05Out of Scope
The following are generally not eligible: reports from automated tools without a demonstrated impact, missing best-practice headers with no exploit, rate-limiting or volumetric issues, social-engineering or physical attacks, and findings that require a compromised device or an unlikely amount of user interaction.
06Safe Harbour
Activity conducted consistently with this policy is considered authorized. If legal action is initiated by a third party against you for activity that complied with this policy, we will make it known that your actions were conducted in accordance with it.
07Recognition
We’re happy to publicly thank researchers who responsibly report valid issues. We do not currently operate a paid bug-bounty programme; any recognition is at our discretion.
08Contact
Report a vulnerability or ask a question at contact@hackersforce.com.
