Vulnerability Disclosure Policy

Last Update: May 11, 2025

Vulnerability Disclosure Policy

Last Update: May 11, 2025

Vulnerability Disclosure Policy

Last Update: May 11, 2025

We are committed to maintaining the security and privacy of our systems and data. To protect our platform, customers, and data, we strictly control who may perform security testing.


Testing Restrictions

Only security researchers who have been explicitly approved through our bounty hunting program are authorized to conduct testing on our systems.

  • Unauthorized testing of any kind is strictly prohibited.

  • All testing, scanning, or probing without prior written approval will be treated as unauthorized access and may lead to legal action or reporting to relevant authorities.


Compensation Policy

We do not operate a public bug bounty program.

  • We will not provide compensation for vulnerabilities discovered or reported by individuals who are not pre-approved through our bounty hunting program.

  • To be eligible for compensation, you must be officially enrolled in our bounty hunting program before conducting any tests.


Bounty Hunting Program

If you wish to be considered for our bounty hunting program, please email [contact@zupport.ai] with the following:

  • Your security testing experience

  • Your full name and address

  • Your company name (if acting on behalf of one)

Only selected individuals will be granted permission to perform testing, and will receive further details on how to report vulnerabilities.


Reporting a Vulnerability

We only accept vulnerability reports from researchers who have been explicitly approved through our bounty hunting program.

Unauthorized testing is a violation of our policy and may constitute illegal access. We will take legal action against any individual or organization that conducts security testing against our systems without our explicit written consent.