Responsible Disclosure Policy

KudosWall

Effective and Last Updated: August 5, 2025

At KudosWall, we are committed to maintaining the security and privacy of our users. We take all reported vulnerabilities seriously and strive to resolve confirmed issues as quickly as possible.

If you believe you've discovered a security vulnerability in our platform, we encourage you to report it responsibly.

How to Report

Please send your report to: [email protected]

Include the following details, if possible:

  • A detailed description of the vulnerability
  • Steps to reproduce the issue
  • Any supporting materials (e.g., screenshots, video, proof-of-concept)

We request that you:

  • Do not publicly disclose the issue until we’ve resolved it
  • Do not access or modify data that does not belong to you
  • Avoid using automated tools or brute force techniques that may affect our service

What to Expect from Us

  • We will acknowledge your report within 5 business days
  • We will investigate the issue and respond as needed
  • We may request clarification or updates from you during the review process

Rewards and Recognition

At this time, KudosWall does not operate a formal bug bounty or paid reward program.

However, we may choose to express our appreciation for significant, responsibly disclosed issues with:

  • A note of thanks (public or private)
  • A small token of appreciation such as a gift card or merchandise, at our discretion

Safe Harbor

We will not take legal action against researchers who:

  • Act in good faith
  • Follow this policy
  • Do not compromise the privacy or availability of our services

Thank you for helping keep KudosWall safe and secure.