Security

Report a vulnerability

Email security@stageworks.com with a description of the issue, the steps to reproduce it, the page or address where it occurs, and the impact you think it has. Please don't include more personal information about patrons or customers than you need to show the problem.

What we commit to

• We'll acknowledge your report within 3 business days.
• We'll keep you updated as we investigate and fix it.
• We'll let you know when the issue is resolved.
• If you'd like, we'll credit you once it's fixed.

Guidelines

• Only test against accounts and organizations you own or have permission to use.
• Don't access, change or delete anyone else's data beyond the minimum needed to show the issue, and stop once you have.
• Don't run denial-of-service tests, send spam, or use social engineering or physical attacks.
• Give us a reasonable amount of time to fix the issue before you share it publicly.

Safe harbor

If you follow these guidelines and act in good faith, we won't take legal action against you or ask anyone else to, and we'll treat your research as authorized.

Scope

This covers the websites, apps and services Stageworks runs, including organization websites and ticketing that we host. Problems in services we use, such as payment processing, should also be reported to that provider.

We don't offer payment for reports.