Security Hall of Fame

ISO Mate is grateful to the security researchers who take the time to responsibly report vulnerabilities to us. Their work helps us keep our platform and our customers safe. This page recognizes the people who have made a valued contribution to the security of ISO Mate.

A Note on Compensation

ISO Mate does not currently operate a guaranteed paid bug bounty program. As an early-stage company, we are not yet in a position to offer immediate monetary rewards for vulnerability reports, and we want to be completely transparent about this.

However, we deeply value the security community and do not want your hard work to go unappreciated. We carefully track all valid submissions. While future payouts cannot be legally guaranteed today, it is our earnest goal to recognize these early contributions retrospectively as our company grows. ISO Mate reserves the right to issue discretionary, retroactive rewards to eligible researchers when our financial position allows.

Being listed here in our Security Hall of Fame serves as a permanent record of your invaluable contribution to our security and our gratitude for your help.

Responsible Disclosure

We ask that researchers give us a reasonable opportunity to investigate and remediate a reported issue before disclosing it publicly. To protect our customers, we only add a researcher and the details of their finding to this page after the vulnerability has been fully remediated. Entries are published with the researcher’s permission, and we are happy to credit you by name, handle, or anonymously, whichever you prefer.

Safe Harbor and Scope

We want researchers to test with confidence. If you act in good faith and follow our disclosure policy, we consider your research authorized and will not pursue legal action against you. The policy also sets out which systems are in scope, which are out of scope, and the testing activities we do not permit. Please review it before you begin: Vulnerability Disclosure Policy.

Recognized Researchers

The researchers below have responsibly disclosed vulnerabilities that we have since remediated. We add new entries here as reports are validated and fixed, with each researcher’s permission.

How to Report a Vulnerability

If you believe you have found a security vulnerability in ISO Mate, please email us at security@isomate.io with enough detail for us to reproduce and validate the issue. We will acknowledge your report, keep you informed as we investigate, and let you know once the issue is resolved. For the full rules of engagement, see our Vulnerability Disclosure Policy. For more information about how we protect your data, see our Security Practices page.

Contact

For anything related to security or responsible disclosure, please contact us at security@isomate.io.