Vulnerability Disclosure Program

At Looka, we take the security of our platform and our users’ data very seriously. We welcome and encourage security researchers to report any vulnerabilities they may find in our web application, so that we can quickly address them and keep our platform safe and secure.

Scope:

The program applies to all Looka web application assets and services.

Eligibility:

We appreciate all vulnerability reports that are submitted to us in good faith. We will review each submission on a case-by-case basis, but generally, the following criteria must be met for the vulnerability to be considered eligible for a reward or recognition:

How to report a vulnerability:

If you believe you have found a vulnerability in Looka’s web application, please submit a report to us via email at vdp@looka.com. Please include the following information in your report:

Please do not publicly disclose the vulnerability until it has been resolved and you have received permission to do so from Looka’s security team.

Rewards:

We appreciate the time and effort it takes to find and report security vulnerabilities, and we want to thank security researchers for their contributions. We may offer rewards for eligible vulnerability reports at our discretion. Rewards may include monetary compensation or recognition on our website.

Response:

Once we receive your vulnerability report, we will acknowledge it within 7-10 business days. Our security team will review the report and determine its validity and severity. We will keep you informed of the status of the report and our progress in addressing the vulnerability. We aim to resolve all reports as quickly as possible, and we appreciate your patience as we work to address any issues.

Legal:

We will not take legal action against individuals who submit vulnerability reports to us in good faith.

 

Hall of Fame

Looka thanks the following individuals who have helped the improve the security of our systems, data and ICT resources by reporting vulnerabilities. We are very grateful for your hard work.