Glia Vulnerability Disclosure

generated: '2026-08-04'
method: searched
probe: true
url: https://www.glia.com/security-bounty
program: Glia Bug Bounty Program
platform: self-hosted
policy:
- https://www.glia.com/security-bounty
contact:
- bounty-hunters@glia.atlassian.net
security_txt: false
security_txt_note: >-
  No RFC 9116 security.txt is served on any Glia host - /.well-known/security.txt returns 404 on
  www.glia.com, glia.com and api.glia.com. The policy exists only as a web page.
safe_harbor: true
safe_harbor_text: >-
  "Activities conducted in a manner consistent with this program will be considered authorized
  conduct and we will not initiate legal action for such activities."
scope:
  in_scope:
  - '*.glia.com'
  - '*.glia.eu'
  - '*.salemove.com'
  - '*.salemove.eu'
  - Official Glia applications for Windows, Mac, Linux, iOS and Android
  out_of_scope:
  - community.glia.com (Higher Logic)
  - partners.glia.com
  - www.glia.com (Webflow)
  - status.glia.com (Atlassian)
  note: Third-party hosted properties are excluded; the marketing site itself is out of scope.
rewards:
  currency: USD
  tiers:
  - {tier: 'Tier 0 (Critical)', minimum: 5000}
  - {tier: 'Tier 1 (High)', minimum: 2500}
  - {tier: 'Tier 2 (Medium)', minimum: 1000}
  - {tier: 'Tier 3 (Low)', minimum: 200}
  payment_terms: Paid after the vulnerability is verified and fixed.
pgp_key: null
evidence:
- source: https://www.glia.com/security-bounty
  kind: disclosure-page
  http_status: 200
  fetched: '2026-08-04'
- source: https://www.glia.com/.well-known/security.txt
  kind: security.txt
  http_status: 404
  fetched: '2026-08-04'