Report a security issue.
Keeping candidate and customer data safe matters more to us than anything else we build. If you think you have found a vulnerability, we want to hear from you.
TLS 1.3AES-256SSOAudit trail
How to report
Email support@scrini.ai with "Security" in the subject. Include what you found and where (URL, endpoint or feature), the steps to reproduce it with a proof of concept and the impact you think it has.
Please do not
- Access, change or delete data that is not yours
- Run tests that slow down or disrupt the service
- Use social engineering, phishing or physical attacks
- Share the issue publicly before we have fixed it
What you can expect from us
| Step | Timing |
|---|---|
| We confirm we got your report | Promptly |
| We assess it and share next steps | Once we have triaged it |
| We fix it and let you know | As fast as severity requires |
Scope
- In scope: scrini.ai, app.scrini.ai and our public APIs
- Out of scope: third-party services we use and reports from automated scanners without a working proof of concept
Thank you
With your permission, we are happy to credit you once the issue is fixed.