At Prezi, we take security of our users’ data very seriously and we believe in harnessing the power of the security researcher community to help keep our users safe. We encourage the responsible disclosure of security vulnerabilities.
To join the program, you should read this entire brief, and only proceed if you accept all the terms within.
Thank you for making Prezi better for everyone!
We encourage and allow you to conduct security research and vulnerability testing on Prezi services and products to which you have authorized access on the “prezi.com” domain.
Please always keep the following rules in mind:
In general, please don’t report the following findings, unless you can showcase an actual vulnerability leading to significant impact:
Since our list of integrations might change, please always resolve our subdomains before any testing to verify that they are not pointing to some external / 3rd party service.
For example, the following domains and subdomains are pointing to different third-party solutions, which we are not authorized to include in this program:
If you believe you have discovered a security vulnerability, please share the details with us by completing the form below.
We will acknowledge receipt of your report within five business days and work with you to understand the issue so we can validate it. We will also do our best to give an estimate on the resolution of the vulnerability and notify you when it is fixed.
Any information you receive, collect or discover about Prezi or any Prezi user through the Program (“Confidential Information”) must be kept confidential and only used in connection with the Program. You may not disclose any such Confidential Information (except in your report to Prezi) without Prezi’s prior written consent.
Prezi, or any of its affiliates, may use the communication between you and Prezi, or material for any purpose whatsoever, including, but not limited to, reproduction, disclosure, transmission, publication, broadcast, and further posting. Further, Prezi and its affiliates are free to use any ideas, concepts, know-how, or techniques contained in any communication or material you send to Prezi for any purpose whatsoever, including, but not limited to, fixing, developing, manufacturing, and marketing products. By submitting any information, you are granting Prezi a perpetual, royalty-free, and irrevocable right and license to use, reproduce, modify, adapt, publish, translate, distribute, transmit, publicly display, publicly perform, sublicense, create derivative works from, transfer, and sell such information.