Acrobits
Vulnerability disclosure program on security.txt acrobits.net
- Top reward
- No cash rewards
- Top severity paid
- Not published
- Assets in scope
- 3
- Public CVEs
- 0
- Last change
- No changes yet
At a glance
What to know before you start testing.
- No cash rewards
- A disclosure program: you report for credit, not money.
- Report by email
- [email protected]
- Full safe harbor
- Good-faith research is authorised; no legal action.
- Replies within 2 days
- As the policy promises.
- Publish after a fix
- Coordinate the timing with the company.
Rewards
What the company's own policy page says it pays.
This program does not pay cash rewards.
- Pays cash
-
No
We do not run a paid bug bounty.
- Response
-
Within 2 days
We confirm receipt within 2 business days.
- Safe harbor
-
Full
We will not take legal action against anyone who reports a vulnerability in good faith, stays within this policy, and avoids harming our customers, their users or their data.
- Hall of fame
-
No
With your permission, we credit you in the advisory.
Summarised with AI from the company's policy, read 12 Nov 2026, and checked word for word against it. Read the original
Scope
3 assets you may test, 4 excluded.
Domains 2
- acrobits.cz
- acrobits.net
Products and areas 1
- any Acrobits product
Out of scope (4)
- denial-of-service testing
- issues that require a rooted or jailbroken device
- our customers’ own PBX and SIP provider systems
- social engineering
Rules
What the policy asks of you, and the bug types it won't reward, quoted from Acrobits's policy. "We" in these lines means the program, not this site.
While testing
-
Test only against accounts you own, and do not access other users’ data or test our customers’ production systems.
-
We ask researchers to give us the time to fix an issue before making it public.
-
Please don’t include personal data you don’t need to show the issue.
Not accepted
-
issues that require a rooted or jailbroken device
Summarised with AI from the company's policy, read 12 Nov 2026, and checked word for word against it. Read the original
Changes
Tracked since 12 Nov 2026. Last checked 3 hours ago.
No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.
Public CVEs
Published vulnerabilities in this vendor's products, from the NVD.
No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.