Bug Bounty Program
Great news! As part of our commitment to protect the safety of our customers (and their end users), we have now launched our atmail Bug Bounty Program, and invite security researchers to proactively identify any potential security vulnerabilities in our offerings. Our program is inclusive of all atmail brands and technologies and offers rewards for a wide array of vulnerabilities.
Rewards
Our rewards go up to US$5,000. You will be eligible for a bounty only if you are the first person to disclose an unknown issue. Qualifying bugs will be rewarded based on severity, to be determined by atmail in its sole discretion. Rewards are granted entirely at the discretion of atmail and will be paid within 30 days after atmail awards the bounty to the researcher.
At atmail’s discretion, providing more complete research, proof-of-concept code and detailed write-ups may increase the bounty awarded. Conversely, atmail may pay less for vulnerabilities that require complex or over-complicated interactions or for which the impact or security risk is negligible. Rewards may be denied if there is evidence of program policy violations. No bounty will be awarded for reports that impersonate an apparent vulnerability. Reports in third party software may not be eligible for bounties at atmail’s discretion.
| Severity | Payout (USD) |
|---|---|
| Critical | $5,000 |
| High | $2,000 |
| Medium | $500 |
| Low | $50 |
| Informative | $0 |
Play by the rules
It is important that all security researchers looking to participate in our bug bounty program take the time to review our atmail Bug Bounty Program Policy to ensure compliance with our rules (and also to help you safely verify any vulnerabilities that you may uncover). By submitting reports or otherwise participating in this program, you agree that you have read and will follow the Program Rules and Legal Terms sections of our Policy.
Update as of: 12 February 2021
This program only applies to the most recent and supported version of atmail’s products. As of this time, this means version a8.
New to atmail?
atmail is an email solutions company with 22 years of global, email expertise. You can trust us to deliver an email hosting platform that is secure, stable and scalable. We power more than 170 million mailboxes worldwide and offer modern, white-labelled, cloud hosted email, as well as on-premises email solutions for organisations that need to keep their data in-house.
More Posts
