Holidu · Vulnerability Disclosure

Holidu Vulnerability Disclosure

Vulnerability disclosure

Holidu runs a coordinated vulnerability disclosure program on Hackerone. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

CompanyTravel And LeisureVacation RentalsShort-Term RentalsHospitalityProperty ManagementBookingChannel ManagerConnectivityAffiliate
Program: Hackerone security.txt present

Disclosure Policy

Security Contact

Contact
mailto:security@holidu.com

Source

Vulnerability Disclosure

Raw ↑ 
generated: '2026-07-19'
method: searched
probe: true
source: https://www.holidu.com/.well-known/security.txt
contact:
- mailto:security@holidu.com
policy_summary: >-
  Holidu operates an invite-only bug bounty program through HackerOne. Researchers
  email a detailed report plus their HackerOne username; eligible submissions may
  be invited to the private program.
bug_bounty:
  platform: HackerOne
  model: invite-only / private
preferred_languages: en
expires: '2026-12-31T23:00:00.000Z'
evidence:
- source: well-known/holidu-security.txt
  kind: security.txt (RFC 9116, live probe)