Last Updated: September 2026
This Report Security Issues page explains how to report a potential security vulnerability affecting Cerilica.com, including our responsible reporting guidelines, bounty program, reward levels, and security disclosure process.

If you discover a potential security vulnerability on Cerilica.com, please report it to us as soon as possible. We review legitimate security reports and aim to investigate reported issues promptly. However, before submitting a report, please review the guidelines below.

Report Security Issues to Cerilica LLC

We welcome responsible reports from security researchers and other users who identify potential vulnerabilities. Therefore, we ask researchers to follow the principles on this page when investigating and reporting an issue.

A clear report helps us understand and reproduce the potential vulnerability. In addition, detailed information may help us evaluate its security impact more efficiently.

Report Security Issues Responsibly

If you follow the principles below when reporting a security issue to Cerilica.com, we will not initiate legal action or enforcement investigations against you in response to your report.

Report Security Issues Using Responsible Research Guidelines

When researching or reporting a potential vulnerability, we ask that you:

  1. Give us reasonable time to review and fix the issue before disclosing it publicly or sharing it with others.
  2. Do not interact with or access private accounts without the account owner's consent.
  3. Make a good-faith effort to avoid privacy violations, service disruptions, or data destruction.
  4. Do not exploit the issue for any reason, including to demonstrate additional risks or access sensitive data.
  5. Comply with all applicable laws and regulations.

Furthermore, please limit your testing to what is necessary to demonstrate the potential security issue.

Report Security Issues Through Our Bounty Program

Cerilica LLC recognizes security researchers who help protect our platform by responsibly reporting vulnerabilities. Therefore, eligible security reports may qualify for a bounty.

However, Cerilica.com awards bounties at its discretion. We consider factors such as security risk, impact, exploitability, and report quality.

Report Security Issues and Bounty Eligibility

To potentially qualify for a bounty, you must follow the fundamentals listed above and report a valid security issue that creates a meaningful privacy or security risk.

  1. Submit your security report through the appropriate Cerilica LLC reporting channel rather than contacting individual employees.
  2. Disclose any accidental privacy violations or service disruptions that occurred during your research.
  3. Provide enough information for us to understand and reproduce the issue.
  4. Allow us reasonable time to investigate the report and address the vulnerability.
  5. Understand that we prioritize reports according to their potential risk and impact.
  6. Understand that Cerilica LLC reserves the right to publish submitted reports.

In addition, submitting a report does not automatically guarantee a bounty. We first review the issue, its impact, and whether it meets the applicable requirements.

Security Vulnerability Rewards

Rewards depend on the impact and severity of the vulnerability. Therefore, please provide detailed and reproducible steps whenever possible.

If we cannot reproduce the reported issue, it will not qualify for a bounty. In addition, the first valid report of an eligible vulnerability receives the applicable bounty.

Multiple vulnerabilities caused by a single underlying issue may be treated as one report. Finally, we assess eligible rewards based on factors such as impact, exploitability, and report quality.

Critical Severity – Maximum Reward $200

Critical security reports may include major issues such as:

  • Remote Code Execution
  • Remote Shell or Command Execution
  • Vertical Authentication Bypass
  • SQL Injection that leaks targeted data
  • Full account access

High Severity – Maximum Reward $100

High-severity reports may include issues such as:

  • Lateral authentication bypass
  • Disclosure of sensitive internal data
  • Stored XSS affecting other users
  • Local file inclusion
  • Insecure handling of authentication cookies

Medium Severity – Maximum Reward $50

Medium-severity security issues may include:

  • Logic or business process flaws
  • Insecure object references

Low Severity – Recognition Only

Lower-severity reports may not qualify for a monetary reward. However, valid reports may still receive recognition. Examples include:

  • Open redirects
  • Reflected XSS
  • Low-sensitivity information leaks

How to Report Security Issues

When you Report Security Issues, provide enough information for us to understand the potential vulnerability. For example, a useful report should explain what you discovered, where the issue occurs, and how we can reproduce it.

In addition, please include relevant technical details that help demonstrate the issue without unnecessarily exposing private information or disrupting the service.

After receiving a legitimate report, we will review the information and evaluate the potential security impact. However, investigation time may vary depending on the complexity and severity of the reported vulnerability.

Report Security Issues While Protecting Privacy

Please make a good-faith effort to protect customer and user privacy during security research. In particular, do not intentionally access, download, modify, or disclose private information that is not necessary to demonstrate the vulnerability.

If you accidentally encounter private information, stop unnecessary access and explain what occurred in your report. As a result, our team can evaluate both the vulnerability and any potential privacy impact.

For additional information about how Cerilica LLC handles personal information, please review our Privacy Policy.

Responsible Security Disclosure

We ask researchers to give Cerilica LLC reasonable time to investigate and address a reported security issue before publishing or sharing vulnerability details.

Furthermore, please avoid actions that could disrupt Cerilica.com, damage data, affect customers, or create unnecessary security risks while demonstrating an issue.

Contact Cerilica LLC to Report Security Issues

If you need information about how to Report Security Issues or have a security-related question, please contact Cerilica LLC using the information below.

Company Name: Cerilica LLC
Address: 5151 Harrison Ave, Butte, MT 59701, USA
Phone: +1 406 476 4777
Email: contact@cerilica.com

Business Hours

Monday – Friday: 9:00 AM – 6:00 PM
Saturday: 10:00 AM – 4:00 PM
Sunday: Closed

Finally, you can visit the Cerilica LLC for additional information about our company and customer policies.