Security Reporting Policy
How security researchers can report vulnerabilities responsibly.
Last Updated: July 2026
1. Responsible Disclosure
We welcome security researchers to help us keep the Platform secure. If you discover a vulnerability, we ask that you report it to us responsibly and give us reasonable time to respond before public disclosure.
2. How to Report
Report vulnerabilities to security@apartmentsgoat.com with a detailed description of the issue, steps to reproduce, and potential impact. We acknowledge all reports within 48 hours.
3. Guidelines
- Do not access or modify data that does not belong to you
- Do not perform denial-of-service attacks
- Do not use automated scanning tools that may degrade service
- Provide detailed, actionable reports
- Allow reasonable time for remediation before public disclosure
4. Recognition
We recognize responsible reporters and may offer acknowledgment or rewards for significant vulnerabilities at our discretion.