//
Detail Updates Leaderboard
Description

House of HR is a leading HR services group active all over Europe. Our entrepreneurial spirit drives us to provide specialized solutions in two key segments: Specialized Talent Solutions and Engineering & Consulting. Our decentralized model empowers rapid decision-making across our Powerhouses. If you find a security bug in one of our apps, this is the place to report it! Happy hunting! 🏹

Bounties

This is a responsible disclosure program without bounties.

Rules of engagement
Required
Not applicable
max. 5 requests /sec
Not applicable

By participating in this program, you agree to:

Our promise to you

  • We will respond to report in ultimately two weeks, probably faster!
  • We are happy to respond to any questions, please use the button in the right top corner for this.
  • We respect the safe harbour clause that you can find below

Your promise to us

  • Please limit the use of automation, as we are looking more for your manual testing output. If you do decide to use automation, please keep in mind a rate limit of 5 requests /second
  • Provide detailed but to-the point reproduction steps
  • Include a clear attack scenario. How will this affect us exactly?
  • Remember: quality over quantity!
  • Please do not discuss or post vulnerabilities without our consent (including PoC's on YouTube and Vimeo)
  • Please do not use automatic scanners -be creative and do it yourself! We cannot accept any submissions found by using automatic scanners. Scanners also won't improve your skills, and can cause a high server load (we'd like to put our time in thanking researchers rather than blocking their IP's 😉)
Domains
tier
All
type
All

*.houseofhr.com/*

No bounty
Wildcard

*.swop.com/*

Out of scope
Wildcard
houseofhr.com/contact-us
Out of scope
URL

This contact form is out of scope

houseofhr.com/your-career/jobs
Out of scope
URL

Applying for jobs is out of scope

rebel.houseofhr.com
Out of scope
URL
In scope

We are happy to announce our responsible disclosure program! We've done our best to clean most of our known issues and now would like to request your help to spot the once we missed! We are specifically looking for:

  • Leaking of personal data
  • Horizontal / vertical privilege escalation
  • SQLi
  • ...

Feedback
Would you like to help us improve our program or have some feedback to share, please send your anonymous feedback here:

Program feedback link
Please note this form will be checked periodically and should not be used for submission or support queries.

Severity assessment

This program follows Intigriti's contextual CVSS standard

PII leakage is very important for us in terms of Business Impact.

FAQ

Where can we get credentials for the app?

We currently don’t offer any credentials to test user roles.

All aboard!
Please log in or sign up on the platform

For obvious reasons we can only allow submissions or applications for our program with a valid Intigriti account.

It will only take 2 minutes to create a new one or even less to log in with an existing account, so don't hesitate and let's get started. We would be thrilled to have you as part of our community.