Report a Security Vulnerability
If you’ve found a security vulnerability on the Taleemgah site, please report it through email. Our security team will investigate all legitimate reports and will do their best to fix issues as quickly as possible.
Our bounty program is designed to reward those who help us maintain a safe Taleemgah site for all of our users. Udemy will pay a bounty for legitimate, previously unknown reports.
In order to receive the bounty reports must:
- Be an original, previously unreported bug. Known vulnerabilities will not qualify for a reward.
- Be a vulnerability that allows a user to break into the system, allows a user to violate someone else’s accounts, or allows a user to compromise user data
- Be resolved by our engineers before the reward is provided.
Please note that Taleemgah reserves the right to withhold bounty payments if we believe the reporter has taken actions to endanger the security of Taleemgah’s customers.