Security at CLARK
Our Vulnerability Disclosure Program
Providing a secure service for our customers is a top priority for us. In addition to our own security measures we want researchers across the globe to be able to send in their findings.
Spotting Vulnerabilities
If you have discovered a vulnerability in our applications or another serious security issue, please submit it right away following our guidelines.
Disclosure Policy
Learn more about which of our applications are open to security research and vulnerability testing.
Time to Fix
From the time we receive the report to the time we confirm to you that the finding has been fixed, this is timeframe you can expect from us.
Of course, some findings might take longer to fix based on their complexity, but we will stay in touch to find the best mitigation in the meantime.
Disclosure Process Timeline
- Within a week, we will acknowledge that your report has been received.
- Within 2 weeks, we will triage your report and accept or decline it.
- To the best of our ability, we will confirm the existence of the vulnerability to you and be as transparent as possible about what steps we are taking during the remediation process, including on issues or challenges that may delay resolution.
- We will maintain an open dialogue to discuss issues.
Rewards
At this time, we are only running a Vulnerability Disclosure Program and do not offer cash rewards. This page will be updated as soon as we move to a Bug Bounty program with cash rewards.
In order to thank you by the means we can, we will in the meantime:
- Add you to our Hall of Fame, given that we confirmed the vulnerability and you want to be recognized!
- Send you a Thank You Box of CLARK goodies, given that you can share an address with us.
About CLARK
Help us build a better digital experience for insurances
Since 2015 CLARK provides desktop and mobile applications that allow users to discover, buy, switch, analyze – in short, manage – insurances.
Providing a secure and highly-trusted platform for insurance management is our core mission.