Need Help?

Support Team


24/7 Helpdesk:
helpdesk.jetapps.com


24/7 Support Email:
support@jetapps.com



Sales Team


Sales Email:
sales@jetapps.com


Sales Phone:
1-877-568-1698



Billing Team


24/7 Client Area:
billing.jetapps.com


Billing Email:
billing@jetapps.com


Billing Phone:
1-877-568-1698


Bug Bounty

Responsible Disclosure of Security Vulnerabilities
 
We’re working with the security community to make JetApps.com and JetApps products safe for everyone.
 
Reporting security issues
 
If you’ve discovered a security vulnerability, we appreciate your help in disclosing it to us in a responsible manner.
 
We’ll work with you to make sure that we understand the scope of the issue, and that we fully address your concern. If you believe you have discovered a vulnerability or have a security incident to report, please email support@jetapps.com . Please include a detailed summary of the issue you discovered. Be sure to include an email address where we can reach you in case we need more information. Here are some good things to include:
 
What is the attack scenario?
What is the step-by-step exploit process?
What is the security impact?
 
Code of Conduct
 
Please act in good faith towards our users’ privacy and data during your disclosure. When testing for vulnerabilities, please do not insert test code into popular public guides or threads. These guides are used by thousands of people daily, and disrupting their experience by testing for vulnerabilities is harmful.
 
We won’t take legal or administrative action against you or your account if you act accordingly: White hat researchers are always appreciated.
 
Bug Bounty
 
We’re happy to provide a reward to users who report valid security vulnerabilities. To be eligible for credit and a reward, you must:
 
– Be the first person to responsibly disclose the bug.
– Report a bug that could compromise our users’ private data, circumvent the system’s protections, or enable access to a system within our infrastructure.
 
Please do report:
 
– Persistent Cross-Site Scripting (XSS)
– Cross-Site Request Forgery (CSRF/XSRF)
– Broken Authentication
– Circumvention of our framework’s privacy and permission models
– Remote Code Execution
 
Please do not report:
 
– Outdated versions of WordPress with no known vulnerabilities
– Username enumeration
– Self-XSS
– Missing DNS SPF records
 
Our security team will assess each bug to determine if it qualifies. We do our best to respond to your reports in a timely manner. We aim to respond within 3 business days, however some reports take longer than others to investigate. We reply only during business hours (9AM-5PM PST, weekdays, excluding holidays). Repeated emails will NOT result in a quicker response, and may bump your report to the end of the queue.
You can use this GPG key for encrypting the information.