Welcome to Voi's Vulnerability Disclosure Program. At Voi, we’re about transforming urban transport. Since 2018, we’re on a mission to challenge the car-centric culture and bring in mobility solutions that make city life smoother, greener and more enjoyable.
This is a responsible disclosure program without bounties.
While we do not offer bounties for reported vulnerabilities in our VDP, we appreciate your contribution to securing our systems.
If you believe your disclosure may qualify for a reward, please review and submit the report through our bug bounty program
Validation time
When you report a potential security vulnerability to us, we commit to:
• Acknowledge receipt of your report within 7 calendar days.
• Provide a status update at least once every 30 calendar days until the vulnerability is resolved or we determine that no further action is required.
Introduction
Voi is committed to protecting the security of our users and our products. We welcome vulnerability reports from the security community under our VDP. This program provides researchers with a safe and responsible way to report potential vulnerabilities in Voi systems.
Researchers must only test systems and services that are owned, operated, or explicitly authorised by Voi. Any systems outside this scope (e.g., third-party systems, vendor services, or partner infrastructure) are out-of-scope and must not be tested.
This program follows Intigriti's triage standards based on the proof of concept.
We currently don’t offer any credentials to test user roles.
You can self-register on the application but please don’t forget to use your @intigriti.me address.
For obvious reasons we can only allow submissions or applications for our program with a valid Intigriti account.
It will only take 2 minutes to create a new one or even less to log in with an existing account, so don't hesitate and let's get started. We would be thrilled to have you as part of our community.
