TurboHire Vulnerability Disclosure Policy

Last updated: 28 August 2025

We at TurboHire highly value digital safety and the trust of our users. We welcome responsible security research that helps make our platform more secure. This page outlines how to report potential vulnerabilities in TurboHire’s systems and what to expect during the disclosure process.

If you believe you’ve discovered a potential security vulnerability:

• Please send an email to security@turbohire.co with a clear, concise description of the issue, steps to reproduce it, the affected components, and any supporting evidence (screenshots, logs, etc.).
• We aim to acknowledge your report within five business days.

• After acknowledging your report, we’ll provide an expected timeline for investigating and fixing the issue.
• For serious or critical vulnerabilities, our goal is to resolve them as quickly as possible—typically within two weeks—depending on complexity and impact.

When testing for vulnerabilities, please:

• Only test on systems or data you own or have explicit permission to access.
• Refrain from disrupting service, harming user data integrity, or conducting social engineering attacks.
• Avoid DDoS, phishing, breaking into physical infrastructure, or any activity that may affect users or the platform’s stability.

• We kindly request that you allow us a reasonable period to address the issue before any public disclosure.
• If you wish to publicly disclose the vulnerability and timeline has elapsed, please notify us in advance so that we can coordinate responsible disclosure.

We deeply appreciate security researchers and their efforts. With your permission, we’d be glad to recognize your contribution (by name or alias) once the issue is resolved. Let us know if you’d prefer anonymity.

We may update this policy occasionally to reflect improvements in our security practices or processes. The date above will indicate the latest update.

For transparency and security-related queries: security@turbohire.co

Our Security team is responsible for managing vulnerability reports and maintaining this policy. Any internal breach of this policy may lead to appropriate disciplinary measures.