Indigov · Vulnerability Disclosure

Indigov Vulnerability Disclosure

Vulnerability disclosure

Indigov runs a coordinated vulnerability disclosure program on Hackerone. A dedicated security contact is published.

CompanyGovernmentGovTechConstituent Relationship ManagementCRMCivic TechnologyCaseworkConstituent CommunicationsCustomer Data PlatformPublic Sector
Program: Hackerone

Disclosure Policy

Policy
https://indigov.com/pages/responsible-disclosure

Security Contact

Contact
security@indigov.com

Source

Vulnerability Disclosure

indigov-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-19'
method: searched
probe: false
source: https://indigov.com/pages/responsible-disclosure
policy:
- https://indigov.com/pages/responsible-disclosure
contact:
- security@indigov.com
safe_harbor: true
acknowledgement_sla: 48 business hours
bug_bounty: null
notes: >-
  Indigov publishes a Responsible Disclosure policy with Safe Harbor for
  good-faith researchers. Reports go to security@indigov.com with evidence and
  reproduction steps; acknowledgement within 48 business hours; credit after
  fixes ship. No formal bug bounty (HackerOne/Bugcrowd) is advertised. Excluded
  classes include brute-force, denial of service, jailbreak-dependent mobile
  issues, and clickjacking.
evidence:
- source: https://indigov.com/pages/responsible-disclosure
  kind: disclosure-page
  keywords: [responsible disclosure, safe harbor, security@indigov.com]