Security and responsible disclosure

Last updated: 28 September 2026

Report a suspected vulnerability

Send a concise report to the security contact below. Include the affected CanIBeHired URL, reproduction steps, potential impact, and a minimal redacted example. Never send passwords, access tokens, applicant data, or a live exploit against other people’s accounts.

Keep testing safe

This page is a reporting channel, not authorization for intrusive testing. Do not disrupt availability, bypass access controls, extract data, run high-volume scans, or test employers, ATS providers, Traceroster, or infrastructure outside CanIBeHired. Ask before testing beyond ordinary interaction with public pages.

What to expect

We review reports and prioritize fixes by demonstrated impact. We cannot promise a response deadline or a reward. Please give us a reasonable opportunity to investigate before publishing details that could put users at risk.

Email: security@canibehired.com