Security Policy
Last Updated: 10 July 2026
Responsible Disclosure
At Propertiso, we take the security of our platform, users, partners, and data seriously.
We appreciate the efforts of security researchers and the wider security community in helping us identify and address potential vulnerabilities.
If you discover a security issue affecting Propertiso, we encourage you to report it responsibly so we can investigate and resolve it.
Propertiso does not currently operate a paid bug bounty program. However, we appreciate responsible security reports and will review all valid submissions.
How to Report a Security Issue
Please report security vulnerabilities to:
When reporting a potential security issue, please include:
- A detailed description of the vulnerability
- The affected area, URL, or service
- Steps required to reproduce the issue
- Any relevant screenshots, logs, or technical details
- The potential security impact
The more information you provide, the faster we can investigate and respond.
Our Commitment
When you report a security issue responsibly, we will:
- Review your report and acknowledge receipt where possible
- Investigate the reported issue
- Take appropriate actions to resolve confirmed vulnerabilities
- Keep you informed about the progress of the investigation when possible
Responsible Testing Guideline
We ask security researchers to:
- Avoid accessing, modifying, or deleting other users' data
- Avoid actions that could negatively impact platform availability or performance
- Avoid social engineering, phishing, or attacks against Propertiso users, employees, partners, or third parties
- Test only against accounts and systems that you own or have explicit permission to test
Out of Scope
The following activities are generally not considered security vulnerabilities:
- Security recommendations without a demonstrated security impact
- Automated scans or reports without evidence of an exploitable issue
- Issues requiring unlikely user interaction without meaningful security impact
- Denial-of-service testing or activities that could affect platform availability
- Reports related only to content disputes, business decisions, or user-generated content concerns
Disclosure
We kindly request that security researchers allow Propertiso reasonable time to investigate and address reported vulnerabilities before publicly disclosing technical details.
Responsible disclosure helps protect our users, partners, and the wider Propertiso community.