Security
Security acknowledgments.
Thank you to everyone who takes the time to find and responsibly report a vulnerability.
Hall of thanks
No researchers listed yet.
If you find a valid vulnerability and report it in good faith under our disclosure policy, we’ll add you here once the issue is fixed, or leave you off if you prefer.
When we confirm a report, we’ll ask how you’d like to be credited:
- Your name and a link of your choice
- A handle or alias only
- Not listed at all
What we’re looking for
Findings that matter most.
Tenant isolation bypass, authentication or authorisation bypass, billing evasion, server-side request forgery through webhook URLs, and booking concurrency exploits.
Scope and testing rules are in the security policy. Email security@reservory.com.