Snapshot 257036
Normalized text
Scripts and page chrome removed; this is what change detection compares.
This website uses cookies to make the website work properly and to provide the most relevant products and services to our customers and site visitors. For more information, please check our Cookie Policy. Accept PRODUCT TERMS POLICIES POLICIES FOR CANDIDATES AGREEMENTS hireEZ Vulnerability Disclosure Program The information on this page is intended for security researchers interested in responsibly reporting security vulnerabilities to hireEZ’s security team. At hireEZ, we take the security of our users very seriously. If you believe you've discovered a security vulnerability on or within hireEZ’s product, service, or application, we strongly encourage you to inform us immediately. Publicly disclosing a vulnerability can put the entire community at risk, so we request that such vulnerability reports be kept in confidence and researchers not make those public until we have resolved the issue. We appreciate your assistance, and we review all reports and will make every effort to resolve the issue as fast as we can. If you believe you have discovered a potential security vulnerability on any of hireEZ domains, please immediately report your findings to us in accordance with our Guidelines for Responsible Disclosure listed below. Guidelines for Responsible Disclosure Notify hireEZ and provide us details of the vulnerability. Please provide us 72 hours, a commercially reasonable time period to address the issue before public disclosure. Provide an appropriate level of detail on the vulnerability to allow us to identify and reproduce the issue. Detail should include target URLs, request/response pairs, screenshots, and/or other information. We will confirm your email and evaluate the validity and reproducibility of the issue. For valid issues, we will work to fix the issue and keep you updated of our progress through the email you provided to us. Make a reasonable effort to avoid service disruption (e.g. DoS), privacy issues (i.e. accessing a hireEZ customer’s data, or our customers' users' data), and data destruction when performing vulnerability research. Do not request compensation for security vulnerability reports either from hireEZ or external vulnerability marketplaces. Do not phish or social engineer employees or customers of hireEZ (this will change later). Do not run automated scanning tools and send us the output without confirming the issue is present. Security tools often output false positives that should be confirmed by the reporter. Vulnerability Categories We Encourage We are primarily interested in hearing about the following vulnerability categories: Authorization and Authentication related issues Data Exposure and Redirection Attacks Remote Code Execution Sensitive Data Exposure – Cross Site Scripting (XSS) Stored, SQL Injection (SQLi), etc. Particularly clever vulnerabilities or unique issues that do not fall into explicit categories How to Report a Security Vulnerability Our public program currently does not provide any monetary reward beyond hireEZ’s eternal gratitude. Security vulnerabilities may be reported via email to security@hireez.com. We are also happy to accept anonymous vulnerability reports. The validity of a vulnerability will be judged at the sole discretion of hireEZ.