In addition to our own direct responsible disclosure program, LastPass participates in a bug bounty program, hosted at BugCrowd, to facilitate the work that security researchers do to find and responsibly disclose qualifying security bugs. If using automated tools to find vulnerabilities, please be aware that these tools frequently report false positives. Please include a code sample and either images or a video recording that clearly demonstrates the exploit. This may include exact steps to reproduce the bug, any links that were clicked on, pages that were visited, URLs, and any affected account email addresses. When reporting potential issues, we ask that users please try to be as thorough as possible in providing information that will allow the LastPass team to appropriately recreate their findings. Direct communication to the LastPass security teamĬustomers with a security concern should report it via email to where it will be escalated to the threat intelligence team.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |