Vulnerability Disclosure Program

At Play Digital Signage Inc., the security of user information is paramount. We recognize the valuable role security researchers play in enhancing online safety and welcome their contributions to safeguarding our systems.

We encourage security researchers to responsibly disclose any vulnerabilities they discover in our websites, services, or software. To ensure a collaborative and legally protected environment, we offer a safe harbor for researchers who adhere to the following guidelines:

• Act in Good Faith: Avoid actions that could compromise user privacy, damage data, or disrupt our services.
• Respect User Privacy: Only access accounts you own or have explicit permission to access. Report and refrain from accessing any Personally Identifiable Information (PII) encountered.
• Allow Time for Remediation: Grant us reasonable time to address and resolve vulnerabilities before public disclosure.

Researchers who comply with these guidelines will be considered authorized and protected from legal action by Play Digital Signage Inc. We will also endeavor to support researchers facing legal action from third parties due to their responsible disclosure.

To report a potential security vulnerability, please contact us at [email protected]. Include a detailed report with:

• Reproducible Steps: Clear instructions on how to replicate the vulnerability.
• Defined Impact: A description of the potential consequences of the vulnerability.
• One Vulnerability per Report: Submit separate reports for each vulnerability discovered.

This policy covers vulnerabilities in any website, service, or software owned or operated by Play Digital Signage Inc. However, social engineering tactics like phishing are strictly prohibited.

Researchers planning to conduct penetration testing are requested to contact us at [email protected] beforehand. Information on potential bug bounties will be provided upon request.

We appreciate your commitment to security and your collaboration in making Play Digital Signage a secure platform for all users.