Hello Security Researchers,

We are excited to announce the launch of Liferay VDP, our next public program on Intigriti!

This program focuses on the Websites and Web Applications (e.g., liferay.com, liferay.dev, learn.liferay.com, etc.), as well as Liferay security matters and other web applications owned by Liferay, Inc. that are not based on Liferay Portal or DXP software.

Please note, this is a Responsible Disclosure Program focused on collaboration and security hardening. While this program does not currently offer monetary bounties, we deeply value the time, skill, and effort the research community invests in us. We provide public recognition for valid, first-time reports in our "Hall of Fame", unless you prefer to remain anonymous.

Go ahead, check the details of Liferay VDP, and submit your findings if you find something on our hosted sites that doesn't look right.

Happy hunting!
The Liferay Security Team