Security & Vulnerability Disclosure
How to responsibly report security issues found on GardenMora.com.
Please contact us right away if you have found any security weaknesses on GardenMora.com. All valid reports will be taken seriously and we will work to fix any verified issues as soon as possible. Prior to submitting your report you need to read through the following guidelines which include our main principles together with bounty program requirements and non-qualifying issues.
1Core Principles
GardenMora will not pursue legal action or an investigation against you if you submit vulnerability reports according to the guidelines below.
We ask that you:
Give us enough time to investigate the issue and fix it before you share the report with the public.
You must not touch or retrieve any personal data from other users' accounts unless they give you their consent.
Do not cause privacy violations, service interruptions, data destruction or disruption to others.
Do not use or demonstrate the bug to access sensitive data or escalate risk.
You should not perform any actions that go against any laws or regulations.
2Bounty Program
GardenMora appreciates the efforts of ethical curiosity researchers. We compensate monetary rewards to security researchers for reporting valid and relevant vulnerability disclosures. Rewards are paid in our sole discretion based on severity, potential risk, and other factors.
To qualify for a bounty, you must:
Outlined in Section 1.
The issue must pose a real security or privacy risk to our systems or users (Note: not all bugs qualify).
Do not reach out to individual employees directly.
If you accidentally access data or cause service disruption, report immediately without attempting to explore further.
3Non-Eligible Submissions
The following types of issues do not qualify for bounties and should not be submitted:
- Spam, social engineering, or phishing reports not related to our infrastructure
- Missing SPF/DMARC records
- Clickjacking on non-sensitive pages
- Rate-limiting or brute-force issues without clear impact
- Denial-of-Service (DoS) attacks
- Vulnerabilities requiring root or jailbroken devices
- Reports involving outdated browsers or extensions
4How to Submit a Report
When reporting a vulnerability you should follow these steps:
📧 Email us: contact@gardenmora.com
When reporting a vulnerability please provide as much detail as you can including:
- Reproduction steps
- Potential impact
- Any relevant screenshots or code snippets
?Contact Us
Have a question? Our team is here to help: