Donorbox is a technology company established in 2014. The company provides an online fundraising platform enabling individuals and nonprofit organizations to facilitate online donations. The platform is utilized by various types of organizations, including charities, religious institutions, schools, animal welfare groups, political campaigns, among others.
This is a responsible disclosure program without bounties.
Validation times
We will validate all submissions within the below timelines, once your submission has been verified by Intigriti.
Submissions validated outside of this may be awarded a $25 bonus.
| Vulnerability Severity | Time to validate |
|---|---|
| Exceptional | 5 Working days |
| Critical | 5 Working days |
| High | 10 Working days |
| Medium | 15 Working days |
| Low | 15 Working days |
This remains at the discretion of Donorbox to award.
Check our fix
We offer up to $50 bonus to verify a resolved issue for us (when requested).
This remains at the discretion of Donorbox to award.
Donorbox Live is a mobile app that allows orgs to connect Stripe-sanctioned card readers and accept in person payments. See the infrastructure section below for details.
This is the customer support admin console used by Donorbox employees. A donorbox.org account (signed in via Google SSO and with MFA enabled) is required to access this. Additionally, you must be invited to the Rebel Idealist organization in order to gain initial admin access. Please report any unauthorized access to this page.
Donorbox Live is a mobile app that allows orgs to connect Stripe-sanctioned card readers and accept in person payments. See the infrastructure section below for details.
This program follows Intigriti's contextual CVSS standard
You can self-register on the application but please don’t forget to use your @intigriti.me address.
For obvious reasons we can only allow submissions or applications for our program with a valid Intigriti account.
It will only take 2 minutes to create a new one or even less to log in with an existing account, so don't hesitate and let's get started. We would be thrilled to have you as part of our community.
