Policy on Re-Evaluation of Closed Reports

According to HackenProof’s established policy, once a vulnerability report has been closed and marked as "Informative" — particularly when the client has explicitly accepted the associated risk and confirmed that there are no plans to remediate the issue — we do not reconsider or re-evaluate the bounty status after more than three months from the date of closure.

Last updated