Caution! This message was sent from outside the University of Manitoba.
Hi Team,
I’m reaching out to inquire about your organization’s security research and vulnerability disclosure process.
I’m interested in conducting security research on your website/application and wanted to confirm your preferred process before performing any security testing. Could you please let me know whether you currently have a bug bounty program, Vulnerability Disclosure Policy (VDP), or a responsible disclosure process in place?
If so, I’d also appreciate information regarding the scope, permitted testing activities, reporting channel, and whether you offer rewards, acknowledgments, or Hall of Fame recognition for valid security reports.
I’m happy to follow your guidelines and ensure that any testing is conducted responsibly and within the permitted scope.
Thank you for your time. I look forward to hearing from you.
Best regards, Darshan