How to report
If you have a student account, the fastest way is the private report form at Report a problem (choose Security). Only our team can read it, and our replies show up in your dashboard.
No account? Message our Facebook Page and say you have a security report. We'll reply with a private way to send the details. Please don't post the details publicly.
A good report tells us what the issue is, where it is (a link or feature), what someone could do with it, and the steps to see it.
Our promise to you
- We'll confirm we got your report, usually within two working days.
- We'll keep you updated while we fix it, and tell you when it's done.
- If you act in good faith and follow this page, we won't take legal action against you or ask anyone else to. We consider that research authorised.
- With your permission, we're happy to thank you by name once it's fixed.
Please
- Use your own account or test accounts. Don't access, change or keep anyone else's data.
- If you see someone else's personal information by accident, stop, don't save it, and don't include it in your report.
- Don't run tests that slow the site down for students (no load testing, spam or automated scanning at high volume).
- No social engineering or phishing of our team or students, and no physical attacks.
- Give us a reasonable amount of time to fix the issue before telling anyone else.
In scope
itcareerlaunch.com and its student dashboard. Payments are processed by our payment partner; we never see or store card or bank details, but tell us anyway if something about checkout looks wrong and we'll pass it on.
We're a small team, so we can't offer paid bounties right now. We do read every report, and we're genuinely grateful.