Submit Bug Report
At Central Bank the security of customer information is our number one priority. It is our mission to continually monitor and review all of our security measures to ensure that every customer is protected. We are committed to maintaining top-level security and take each potential security vulnerability very seriously.
If you believe you have identified a potential security vulnerability please contact our Responsible Disclosure Team immediately and they will be able to assist you further.
Reporting a Security Vulnerability
If you believe you have identified a potential security vulnerability, please submit your findings to our Responsible Disclosure Team. Please be sure to include a detailed summary of the potential security vulnerability that you identified. You are encouraged to include the steps it took for you to discover the vulnerability, as well as any screen captures you may have taken. Central Bank thanks you in advance for reporting potential security vulnerabilities.
Responsible Disclosure Guidelines
All security vulnerability reporters should submit potential finding in accordance to the following guidelines:
Reporter does not engage in any activity that can potentially or actually cause harm to Central Bank, Central Bank Customers, or Central Bank Employees.
Reporter does not engage in any activity that can potentially or actually stop, delay, or degrade Central Bank services or assets.
Reporter does not engage in activity that violates
federal or state laws or regulations or
the laws or regulations of any country where
data, assets, or systems reside,
data traffic is routed or
the researcher is conducting research activity.
Reporter does not store, share, compromise, or destroy Central Bank customer data.
Reporter does not initiate in any fraudulent financial transactions.
Reporter does not disclose the potentially identified security vulnerability with third parties.
Out of Scope Vulnerabilities
Certain potential security vulnerabilities are out of scope Central Bank’s Responsible Disclosure Program. Those out of scope security vulnerabilities include, but are not limited to:
Physical testing
Social engineering
Phishing
Denial of service attacks
Resource Exhaustion Attacks
