Hall of Fame
We believe in recognizing the people who help make our systems more secure. This page honors security researchers who have responsibly disclosed vulnerabilities to us. Every valid report earns a place here.
Want to be listed here? Report a vulnerability and help us improve our security.
Vulnerability Disclosure Program
The following researchers have been recognized for responsibly disclosing vulnerabilities in Seibert Group infrastructure through our Vulnerability Disclosure Program.
| Researcher | Date | Category |
|---|---|---|
| Rahul Mahangade | Oct 2026 | Unauthenticated SMS Abuse |
| Muhammad Zeeshan | Oct 2026 | Token Disclosure, Broken Access Control, SQL Injection |
| Dendy Romadhon | Oct 2026 | Broken Access Control |
| Jagadeesan M | Sep 2026 | Insufficient Callback URL Validation |
| Elad Meged from Novee Security | Apr 2026 | Stored XSS / Account Takeover |
| Muhammad Usama | Jul 2025 | Information Disclosure |
Atlassian Marketplace Bug Bounty Program
The following researchers are recognized for high-impact vulnerability reports (Critical or High severity) in our Confluence and Jira apps through the Atlassian Marketplace Bug Bounty Program, including apps by our partner App Anvil.
| Researcher | Reports | Highest Severity | Period |
|---|---|---|---|
| pentest_denlan | 4 | Critical | 2020–2022 |
| UpdateLap | 21 | High | 2021–2025 |
| Captain_hook | 6 | High | 2021–2022 |
| visat | 5 | High | 2021–2024 |
| yesh_6 | 1 | High | 2023 |
| toukakirishima | 1 | High | 2026 |
As of March 2026. This list includes researchers with at least one Critical or High severity finding.
Notes
- VDP entries are listed with consent from the researcher
- Atlassian Marketplace entries use public BugCrowd handles from a public bug bounty program
- We do not disclose technical details about any vulnerability
- Questions: security@seibert.group