Security

Fantasy goalz Software Security Policies

At FanTasygoalz , our talented team of engineers and security specialists work non-stop to make our code as secure as possible. However, software without a single vulnerability simply does not exist in the real world. As our products evolve and technology advances, new vulnerabilities are bound to arise. But our Vulnerability Disclosure policy and partnership with HackerOne help us stay ahead of any potential problems.

Vulnerability Disclosure Policy

To identify vulnerabilities before they become problems, we rely on people like you. Through our Vulnerability Disclosure Policy, we reward anyone who identifies new vulnerabilities in our products and reports it to us. Once we are informed of a vulnerability — through our partnership with HackerOne — we immediately get to work finding a solution.

Not only does this keep fantasy goalz users safe and secure, but it also incentivises those who find a vulnerability to do the right thing and report it.

Partnership with HackerOne

We pay anyone who reports a vulnerability to us exclusively through HackerOne.com. So if you know of a vulnerability, just create an account on HackerOne to report it and get paid.

NOTE: HackerOne is the only platform we use to reward bug spotters. Any other means of communicating vulnerabilities — such as emails, calls, or customer service inquiries — will not be rewarded.

Hall of Fame

We believe our researchers should be acknowledged for their work. In addition to the bounty we have a fantasy goalz Security Hall of Fame, where researchers who have been rewarded bounties are added to the Hall of Fame. The Hall of fame can be found here

Want more information?

If you have any question about our Vulnerability Disclosure policy, our Bug Bounty Program, or anything else regarding fantasy goalz security, please reach us at security@fanduel.com. Vulnerability disclosures can be encrypted using our PGP key.