Ravi Sir's Cyber Security Cards › Revision Cards
Responsible Disclosure and Staying Legal
Responsible Disclosure and Staying Legal What to do when you notice a security problem on a site that has no bug bounty program. Stop at the first sign. Don’t dig further or download data. Find the right contact, often at /.well-known/security.txt or CERT-In. Report privately. Going further, even to
Read card text
What this card says
What it is
What to do when you notice a security problem on a site that has no bug bounty program.
Steps
Stop at the first sign. Don’t dig further or download data.
Find the right contact, often at /.well-known/security.txt or CERT-In. Report privately.
Why it matters for security
Going further, even to “prove” it, can turn you from a helpful finder into an offender.
Report the minimum and let the owner fix it.
Learn more in the lesson: 35.6 Responsible Disclosure and Staying Legal