ThreatDown Responsible Disclosure Guidelines
Divulgación responsable frente a divulgación irresponsable
Según nuestra experiencia, (a) la divulgación del código de explotación de la prueba de concepto, (b) los detalles innecesarios para transmitir el mensaje o (c) la publicación de los detalles de la vulnerabilidad antes de que esté disponible una solución representan una divulgación irresponsable que causa más daño que beneficio, ya que atrae una atención innecesaria hacia un problema de seguridad. Por lo tanto, el programa ThreatDown solo premiará con recompensas por errores a los informantes que sigan las directrices de divulgación responsable.
What do we mean by Responsible Disclosure Program ?
A vulnerability disclosure program (VDP), also known as a responsible disclosure program, offers a structured and responsible channel that researchers can use for submitting accidental security vulnerability findings across our entire ecosystem of applications, infrastructure, services and products.
Reports submitted through ThreatDown’s Responsible Disclose Program are not eligible for monetary awards. However, when applicable, we can request CVEs, and ThreatDown will provide recognition.
What do we mean by Bug Bounty Program?
A bug bounty program engages researchers to look for vulnerabilities within ThreatDowns’s products in scope in exchange for a monetary award.
ThreatDown recompensas en efectivo por los errores más interesantes. La cantidad otorgada por los errores interesantes depende de la gravedad y la explotabilidad del error. Sin embargo, ThreatDown el derecho de aumentar esta cantidad según cada caso.
¿Qué obligaciones de confidencialidad asumo al enviar una propuesta?
If you send us a submission for our programs, you are agreeing that you will never disclose functioning exploit code (including binaries of that code) for the applicable vulnerability to any other entity, unless ThreatDown makes that code generally publicly available or agrees on the disclosure after resolution or you are required by law to disclose it. This does not prevent you from discussing the vulnerability or showing the effects of the exploit in code.
¿Qué tipos de vulnerabilidades acepta el programa CVD?
Our public bug bounty program accepts vulnerability reports for the targets within the ThreatDown’s program scope. Please follow our program guidelines on the HackerOne platform.
Our responsible disclosure program accepts reports about vulnerabilities from any ThreatDown website, service or product.
Last edited September 15, 2026