bloomsocial site logo

Bug Bounty Policy

Bug Bounty Policy

Last updated: October 26, 2026

Our approach to security research

BloomSocial AI welcomes responsible security research that helps identify vulnerabilities in our website, application, APIs and related services.

We recognize the value of independent security researchers in helping software providers identify and address security weaknesses. We encourage researchers to report potential vulnerabilities through our Vulnerability Disclosure Policy.

 

Is BloomSocial AI offering a paid bug bounty?

BloomSocial AI does not currently advertise a paid bug bounty programme or a standard monetary reward schedule.

Submitting a vulnerability report does not create an entitlement to payment, a bounty or other compensation. Researchers should not undertake security testing on the assumption that a financial reward will be provided.

If BloomSocial AI establishes a formal reward programme in the future, its eligibility criteria, scope, reward structure and terms will be published separately.

 

Reporting a vulnerability

Please report suspected security vulnerabilities by email to contact@bloomsocial.ai, using the subject line Security Vulnerability Report.

 

Where possible, include:

  • A concise description of the vulnerability.
  • The affected product, URL, endpoint or functionality.
  • Reproducible steps and the potential security impact.
  • Relevant technical evidence that can be shared safely.

 

Please do not include credentials, access tokens, personal data or other sensitive information in your initial report.

Research guidelines

All research should be conducted responsibly and in good faith. Researchers must avoid unauthorized access, exposure of customer information, service disruption, destructive testing and activities that could compromise the security or privacy of other users.

Please refer to the Vulnerability Disclosure Policy for the applicable scope, reporting process and responsible research guidelines.

 

Handling reports

BloomSocial AI will review submitted reports and assess validated vulnerabilities according to their severity, potential impact and remediation requirements. We may request additional information where necessary.

Acknowledgment, investigation, remediation and any subsequent communication will depend on the circumstances of the report. Submission does not guarantee a specific response time, resolution timeline, public recognition or reward.

 

Contact

For vulnerability reports or questions about this policy:

BloomSocial AI