APPLICATION SECURITY

Public Disclosure Program

This page outlines how we manage and share information publicly in compliance with regulatory requirements.

REPORT A VULNERABILITY
Fair and simple pricing

How to report security vulnerabilities to ProjectTeam

ProjectTeam is committed to ensuring the security of the ProjectTeam.com for Government (PTG) system from unwarranted disclosures. Security researchers interested in reporting PTG system application security vulnerabilities can notify us at security@projectteam.com.  

The following information must be provided to receive a response:

  1. Details of the vulnerability, including the type of vulnerability
  2. Information needed to reproduce and validate the vulnerability, including any Proof-of-Concept code used for exploit
  3. Perceived impact(s) of issue, including how an attacker could exploit the issue
  4. Any additional contact information we may need
  5. Any other pertinent details

You should receive a confirmation of receipt within 72 hours.

ProjectTeam is committed to the timely correction of vulnerabilities.  Accordingly, we require that you refrain from sharing information about discovered vulnerabilities for 90 calendar days after you have received our acknowledgment of receipt of your report. If you believe others should be informed of the vulnerability prior to our implementation of corrective actions, we require that you coordinate in advance with us.

We may share vulnerability reports with the Cybersecurity and Infrastructure Security Agency (CISA), as well as any affected vendors.