atmail.com
Top 1M siteProgram Details
Atmail is committed to protecting our customers and their users. As part of this commitment, we invite security researchers to help protect Atmail and its users by proactively identifying security vulnerabilities via our bug bounty program. Our program is inclusive of all Atmail brands and technologies and offers rewards for a wide array of vulnerabilities. We encourage security researchers looking to participate in our bug bounty program to review this policy to ensure compliance with our rules
- Allows Disclosure
- Yes
- Disclosure Window
- 90 days
Payout Structure
In-Scope Domains
- *.atmail.com, including www.atmail.com within the scope listed below. Excluding billing.atmail.com
- *.atmail.cloud
- All Atmail code shipped with it’s product, both source and binaries (in binary form) as supplied.
- Only the latest versions of the currently shipped and supported products are in scope.
- All Atmail Hosted services, both public and private cloud installations.
- All Atmail supplied customer service portals, third-party components excluded.
- www.atmail.com, limited to the contents being served from this website, and not third-party components that may present as accessible via this website.
Out of Scope
Any domain that is an alias (CNAME) for a third-party system, or is being proxied through a CDN such as Cloudflare directly to a third-party platform. e.g. billing.atmail.com, success.atmail.com, status.atmail.com., All third party services associated with Atmail services.