Security

Report a security issue

Describe the issue in writing to Jordan. Do not include passwords or private records. The app does not email this form anywhere, because no security mailbox is set.

Bug bounty

Reward: Unlisted. Contact: Unlisted.

On hold: needs a reward amount and a security contact from Jordan. Nothing is paid.

In scope

  • The LendMapper web app
  • Sign-in
  • Public pages on this site

Out of scope

  • County clerk websites
  • Social engineering
  • Denial of service
  • Anything that needs getting around a CAPTCHA or a bot check

Penetration test

Vendor: Unlisted. Last test: Unlisted.

On hold: needs a third-party penetration-test vendor (paid). Not scheduled.