Security Post
-
FAQ
I don’t want to use your system for reporting my finding.
Samsung Mobile Security 16 May 2024If there is an issue for creating ticket on our system after agreeing the consent "Terms & Conditions" and "Privacy Notice" of Samsung Mobile Security Rewards Program or you don’t want to use Samsung Account, you can report a vulnerability through an official email as guided below.
https://security.samsungmobile.com/securityReporting.smsbWe offer Acknowledgements and CVEs for the reports by email, but there is no reward in this case. Please keep in mind that reports submitted through "ticketing system" only are eligible for reward. -
FAQ
Where can I report vulnerabilities for non-mobile Samsung products and services?
Samsung Mobile Security 16 May 2024When we received reports developed or managed from other divisions, we will share the reports with the team, and share an update with you. And we also recommend you to find a proper channel at "Samsung Security Reporting". -
FAQ
Are all products and services developed and managed by Samsung Mobile are eligible with Samsung Mobile Security Reward Program?
Samsung Mobile Security 16 May 2024No, not all products and services are eligible with our program. Please refer the scope of our Rewards Program at the link below.
https://security.samsungmobile.com/rewardsProgram.smsbBut we don’t want let your efforts go in vain. So although some of our products such as Galaxy Buds are not eligible with our rewards program, we offer a partial reward as an appreciation for valid reports on products out of scope, based on its security impact.
Acknowledgement and CVE are not assigned for this case. -
FAQ
The reward process for a ticket I reported has been started, but it was closed without rewards.
Samsung Mobile Security 16 May 2024We assume that your ticket may fall under one of the following two scenarios:1. Mandatory information not provided within maximum waiting period.
If the mandatory information have not provided within 90 days, the ticket is going to be closed without a reward.
While approaching 90 days, the mandatory information hasn’t been provided, we notify a final request through our official e-mail and comment on the system. But if we still don’t hear back from you within the period, we close the ticket without a reward.2. Opt-out for rewardWhen creating report, if you select the [I want to Close this ticket without Reward] checkbox in the “Confirming your Reward Information” Pop-up, the ticket will be closed without any rewards.
In case the reward is rejected by mistake, please re-submit a new report via the same account with the same title of this ticket within 30 days, then our bounty team will proceed the process again.Otherwise, we will not be able to proceed to the reward process for the ticket. -
FAQ
Do I have to enter my information at “Confirming your Reward Information”?
Samsung Mobile Security 16 May 2024Absolutely YES.
All the payout can be proceeded based on the mandatory information which is required in the “Confirming your Reward Information” pop-up. If incorrect information is provided, the reward process may be suspended.
All of the information including “Full Name”, “Nationality” and others required in the pop-up, have to be same with the one on your ID, Passport or other identification documents.
No Contents.