A FAQ is basically a sign that we as a company fail to explain some things to more than one person. Please find here a detailed manual that we send our users in order to get them to know our platform fast. It may help you get started up nicely and makes us look good. Command + F finds what you need to know.View the manual
Here you’ll find the questions other clients ask us the most.
The researchers are from all over the world besides countries that are on the U.S. sanctions list.
For our researcher programs we work with a carefully selected group of security experts worldwide. We check personal information through an ID verification, review ethical hackers track record through an internet background check and the selection is done by our own security experts. When irregularities occur we are authorized to exclude a researcher from the community.
With a researcher program we offer the possibility to have a selected group of the best ethical hackers search for unknown vulnerabilities on your website. All researchers in our platform are screened and tested, so we can be sure we only work with the best and the most reliable researchers in the world. All reported issues are reviewed and validated by the Zerocopter’s Triage Team before publishing it to the dashboard. The researchers will be rewarded on a no-cure-no-pay basis, per approved vulnerability.
In a Coordinated Vulnerability Disclosure (CVD) policy you ask when someone discovers a vulnerability in your online environment to report it as soon as possible so you can address it quickly. This policy is visible to all of your users by for example mentioning it on your homepage. Vulnerabilities discovered by users are compiled by Zerocopter and reported to you in an easy to understand overview of the problem. The reports are presented in your own dashboard, you and your team will receive an email when a report has been added or edited.
The scanner finds known vulnerabilities in your site. Our scanner is a combination of the best vulnerabilities scanners available on the market. For example, Nessus is implemented in our scanner and we are working to implement more scanners for every aspect of your organisation.
Zerocopter uses minimal bounties to reward our Researchers for finding unknown vulnerabilities. We subtract an all-in price from your Researcher Program budget per validated vulnerability. The all-in price includes the reward paid to the researcher and a 30% handling fee. You can find the Vulnerability Price List via https://www.zerocopter.com/vulnerability-price-list