Verantwortungsvolle Offenlegung

At Mt Pelerin, we take the security of our users’ data very seriously. We encourage those who have discovered potential security vulnerabilities in a Mt Pelerin service to disclose it to us in a responsible manner.

We will work with security researchers to validate and respond to vulnerabilities that are reported to us. We won’t take legal action against or suspend or terminate your account access provided you discover and report security vulnerabilities in accordance with this Responsible Disclosure Policy. Mt Pelerin reserves all of its legal rights in the event of any noncompliance.

Testing for Security Vulnerabilities

You may only test against an account for which you are the account owner or an agent authorized by the account owner to conduct such testing.

Mt Pelerin Prohibits the Following Types of Research:

  • Accessing, or attempting to access, data that does not belong to you
  • Executing, or attempting to execute, a denial of service attack
  • Sending, or attempting to send, unsolicited or unauthorized email, spam or other forms of unsolicited messages
  • Testing third party websites, applications or services that integrate with Mt Pelerin
  • Knowingly posting, transmitting, uploading, linking to, sending or storing any malware, viruses or similar harmful software
  • Research conducted by minors, individuals on sanctions lists or individuals in countries on sanctions lists

Reporting Potential Vulnerabilities

Share the details of any suspected vulnerabilities with the Mt Pelerin Security Team by sending an email to security@mtpelerin.com. Please do not publicly disclose these details without express written consent from Mt Pelerin. In reporting any suspected vulnerabilities, please include the following information:

  • Exploit details with adequate information to allow us to reproduce your steps
  • Your email address
  • Your name as it should be displayed on this page if you would like it to be
  • Your Twitter handle if you would like it displayed next to your name, on this page

No Compensation

Mt Pelerin does not compensate individuals or organizations for identifying potential or confirmed vulnerabilities. Requests for monetary compensation will be deemed in violation of this Responsible Disclosure Policy.

Mt Pelerin’s Commitment

To all security researchers who follow this Responsible Disclosure Policy, Mt Pelerin promises to:

  • Acknowledge receipt of your report in a timely manner
  • Provide an estimated time frame for addressing the vulnerability
  • Notify you when the vulnerability is fixed
  • Publicly acknowledge your responsible disclosure, if you wish