Security at CentralNic
Security is at the centre of everything we do at CentralNic: millions of businesses and internet users rely on the secure and stable operation of our registry services. As a result our business systems are certified against the ISO 27001 (Information Security Management) and ISO 22301 (Business Continuity Management) and we have a programme of continuous enhancement of the security and business continuity capabilities of our registry system.
We recognise that no technology is perfect, and we believe that working with skilled security researchers across the globe is crucial in identifying weaknesses in our technology. If you believe you've found a security issue in our product or service, we encourage you to notify us. We welcome working with you to resolve the issue promptly.
Bug Bounty Program
To show our appreciation of responsible security researchers, CentralNic offers a monetary bounty for reports of qualifying security vulnerabilities. Reward amounts will vary based upon the severity of the reported vulnerability, and eligibility is at our sole discretion.
Our Bug Bounty program is managed through HackerOne. At this time, the program is not public, but security researchers interested in participating can request an invitation by getting in touch. We will review your H1 profile to see if you are eligible, and will then invite you to join the program.