Crunchbase is committed to reviewing and resolving issues that may arise. In the event that you have found a bug, please contact our support team at support@crunchbase.com. When contacting the team, please provide a description of the problem along with sufficient information to reproduce the issue (e.g., URL, screenshot).
Please note, while we appreciate being notified of ways we can improve, we do not offer a reward program at this time.
What do I do If I find a Security Vulnerability?
A security vulnerability is a weakness in the system that can be exploited by an attacker to perform unauthorized actions.
At Crunchbase, we consider the security of our systems a top priority, if you would like to report a security vulnerability, please follow the guidelines stated in this policy:
- Do not use, modify or delete any personal data from an account that is not associated with you.
- Do not exploit security vulnerabilities, take advantage or perform denial service (DoS) attacks in order to do any security testing.
- Do not submit, or otherwise publish the vulnerability on public forums or comment pages until a fix is released.
We will make every effort to respond to your report in a timely manner, and acknowledge the report.
Please encrypt your finding using our PGP public key (https://www.crunchbase.com/.well-known/public-key.txt) and email your message to security@crunchbase.com.
If you would like the response to be encrypted, please attach your public key to the message.
Please note, while we appreciate being notified of ways we can improve, we do not offer a reward program at this time.