Parse · Vulnerability Disclosure

Parse Vulnerability Disclosure

Vulnerability disclosure

Parse publishes a vulnerability disclosure policy for reporting security issues. A dedicated security contact is published.

CompanyBackend as a ServiceBaaSMobileOpen SourceREST APIDatabaseAuthenticationPush NotificationsReal Time
Program:

Disclosure Policy

Policy
https://github.com/parse-community/parse-server/security/policy
Policy
https://github.com/parse-community/parse-server/blob/alpha/SECURITY.md

Security Contact

Contact
security@parseplatform.org

Source

Vulnerability Disclosure

parse-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-20'
method: searched
probe: true
source: https://github.com/parse-community/parse-server/blob/alpha/SECURITY.md
program_name: Parse Community Vulnerability Disclosure Program
policy:
  - https://github.com/parse-community/parse-server/security/policy
  - https://github.com/parse-community/parse-server/blob/alpha/SECURITY.md
report_url: https://report.parseplatform.org
contact:
  - security@parseplatform.org
disclosure_type: responsible-disclosure
terms:
  initial_response_days: 7
  patch_window_days: 30
  safe_harbor: true
  note: >-
    Parse Community commits to no legal action against good-faith researchers who
    follow the policy, requests at least 7 days for an initial response and at
    least 30 days before public disclosure.
bug_bounty:
  offered: false
  note: Coordinated disclosure program; no monetary bounty platform advertised.
evidence:
  - source: https://github.com/parse-community/parse-server/blob/alpha/SECURITY.md
    kind: security-policy
    keywords: [responsible disclosure, vulnerability, security@parseplatform.org]