At OptOutScout, we believe real security requires outside eyes. We deeply appreciate the white-hat community and are committed to working with independent researchers to verify and patch vulnerabilities in our infrastructure.
We consider activities conducted consistently with this policy to constitute "authorized" conduct under the Computer Fraud and Abuse Act (CFAA). We will not initiate legal action against you for bypassing security controls, provided you follow these guidelines.
OptOutScout is a 100% self-funded project. Because we do not have venture capital backing, we do not currently offer financial bounties for bug reports.
However, we deeply respect the time and effort it takes to audit our systems. For any valid, critical vulnerability reported, we are happy to offer a spot in our Security Hall of Fame below, alongside complimentary lifetime access to our platform.
Please include reproduction steps and a PoC.
