Security

Reporting a vulnerability

If you believe you've found a security vulnerability in Zero Hiring, we want to hear from you. Please email security@zerohiring.com with a description of the issue, steps to reproduce it, and any relevant proof of concept. We ask that you do not publicly disclose the issue until we've had a chance to investigate and respond.

What to expect

• We will acknowledge receipt of your report.
• We will investigate and keep you informed of our progress.
• We will not pursue legal action against researchers who report vulnerabilities in good faith and in accordance with this policy.

Scope

This policy covers the Zero Hiring web application and API. Please avoid actions that could degrade service for other users, such as denial-of-service testing, spam, or accessing data that isn't your own. Do not attempt to access, modify, or delete candidate or employer data belonging to other accounts.

Other ways to reach us

For non-security bugs, feedback, or general support, use the in-app feedback form from your dashboard, or see our Terms of Service and Privacy Policy for additional contact points.