Leadspace Vulnerability Disclosure

generated: '2026-07-19'
method: searched
probe: true
url: https://www.leadspace.com/report-a-vulnerability
policy:
  - https://www.leadspace.com/report-a-vulnerability
contact:
  - info@leadspace.com
bug_bounty:
  program: false
  statement: >-
    "Leadspace does not compensate individuals or organizations for identifying
    potential or confirmed vulnerabilities."
safe_harbor:
  offered: true
  statement: >-
    "As long as you use this process in disclosing information on security
    issues to Leadspace, we will not take legal actions against you."
scope:
  in_scope:
    - "*.leadspace.com"
  out_of_scope:
    - leadspace.com
    - www.leadspace.com
rules:
  - No automated scanning tools.
  - Do not degrade or disrupt service availability.
  - Do not access or modify data belonging to others.
  - Maintain confidentiality until Leadspace has resolved the issue.
  - No social engineering or physical attacks.
security_txt:
  present: false
  probed:
    - path: https://www.leadspace.com/.well-known/security.txt
      status: 404
    - path: https://apigw.leadspace.com/.well-known/security.txt
      status: 404
evidence:
  - source: https://www.leadspace.com/report-a-vulnerability
    kind: disclosure-policy-page
    status: 200
  - source: https://support.leadspace.com/hc/en-us/articles/360012276859-General-Statement-of-Information-Security-and-Privacy
    kind: security-program-statement
    status: 200