Studocu · Vulnerability Disclosure

Studocu Vulnerability Disclosure

Vulnerability disclosure

Studocu publishes a vulnerability disclosure policy for reporting security issues. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

CompanyMarketplaceEducationEdTechStudy MaterialsDocument SharingLearningAI
Program: security.txt present

Disclosure Policy

Policy
https://studocu.com/vdp.html

Security Contact

Contact
mailto:security@studocu.com

Source

Vulnerability Disclosure

studocu-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-21'
method: searched
probe: true
source: well-known/studocu-security.txt
policy:
- https://studocu.com/vdp.html
contact:
- mailto:security@studocu.com
disclosure_programs:
- name: Open Bug Bounty
  url: https://openbugbounty.org/bugbounty/studocucom/
safe_harbor: true
bug_bounty_active: false
scope_summary: Document asset access, premium feature bypasses, user data leaks,
  and database vulnerabilities. Excludes PerimeterX issues, preview banner/blur
  removal, and low-impact issues.
requirements: Working PoC with CVSS score, reproduction steps, and impact analysis.
reward_tiers_when_active:
- tier: Websites/CDN
  amounts: Up to $1,000 (High), $2,000 (Critical), $3,000 (Exceptional)
- tier: Mobile apps
  amounts: Up to $100 (High), $200 (Critical), $500 (Exceptional)
evidence:
- source: well-known/studocu-security.txt
  kind: security.txt
- source: https://studocu.com/vdp.html
  kind: vulnerability-disclosure-policy