Utah Parent Center Logo Brining Hope, Opening Doors, Elevating Inclusion
HEROIC Mega Menu

Security Research & Collaboration

Security Research

We partner with security researchers to review, validate, and remediate potential vulnerabilities.

Security Research & Collaboration

No technology is perfect. At HEROIC, we believe working with skilled security researchers across the globe is essential to identifying weaknesses early and improving the security of our products and services.

If you believe you’ve discovered a security issue affecting HEROIC, we encourage you to let us know. We take responsible reports seriously and will work with you to understand, validate, and resolve the issue as quickly as possible.

Security is a shared effort, and thoughtful, good-faith research helps keep our platform and our users safe.

Responsible Disclosure

If you identify a potential security issue, please notify us as soon as possible after discovery. Clear, detailed reports help us investigate efficiently and respond appropriately.

When conducting research and reporting findings, we ask that you:

  • Allow us a reasonable amount of time to investigate and resolve the issue before any public or third-party disclosure
  • Make a good-faith effort to avoid privacy violations, data loss, or service disruption
  • Only interact with accounts you own or accounts where you have explicit permission from the account holder

Our goal is to address legitimate issues responsibly while minimizing risk to users and systems.

Bug Bounty Program

To recognize the value of responsible security research, HEROIC may offer a monetary bounty for qualifying vulnerability reports.

Bounties are evaluated on a case-by-case basis and may vary depending on factors such as severity, impact, and report quality. Eligibility and reward amounts are determined at HEROIC’s discretion, and submission of a report does not guarantee compensation.

Our primary focus is on meaningful findings that materially improve the security of the platform.

Exclusions

To ensure safe and productive research, we ask that the following activities are avoided:

  • Denial-of-service or traffic flooding attacks
  • Spamming or automated abuse
  • Social engineering or phishing of HEROIC staff or contractors
  • Physical attempts against HEROIC property, offices, or data centers
  • Testing against excluded or third-party systems, including:
    • WordPress /xmlrpc.php
    • Third-party hosted websites (such as careers.heroic.com or support.heroic.com)
    • Live chat or customer support software

Reports involving these activities are considered out of scope.

Thank you for helping keep HEROIC and its users secure.

We appreciate the time, care, and expertise that responsible security researchers bring to this work.

Submit a Security Finding

If you believe something isn’t working as intended or could expose risk, please report it to us as soon as possible. The more detail you can provide, the faster we can investigate and respond.

Helpful reports usually include:

  • What you found and where you found it
  • Steps to reproduce the issue
  • Why you believe it matters or what could be impacted

Our goal is simple: identify real issues quickly and fix them responsibly.

Step 1 of 4

This field is for validation purposes and should be left unchanged.
Scan to sign up

Scan to sign up instantly

24/7 Dark Web Monitoring
Instant Breach Alerts
Secure Data Protection
Your Data is at Risk

Your Personal Information is Exposed

We found your data exposed in multiple breaches. This includes:

  • Email addresses
  • Passwords
  • Phone numbers
  • Financial information
Secure My Information Now

Your information is protected by enterprise-grade security

Your Breach Details

Date:
Severity:
Records Exposed:

Your Exposed Information

Your Risk Level

How This Affects You

Full Breach Details

Premium Insights

Unlock Critical Security Information

Create a free account to access:

  • Full Breach Impact Analysis
  • Identity Theft Risk Score
  • Exposed Credentials Details
  • Personalized Security Recommendations
Create Free Account

Identity Theft Risk Score

Risk Score: 8.7/10 - Critical

Data Exposure Analysis

Passwords Critical
Financial High
Personal Medium
Social High
Security Critical

Breach Timeline Analysis

March 2024 Multiple credentials exposed in recent data breach
January 2024 Password found in dark web marketplace
December 2023 Personal information leaked in major security incident

Security Recommendations

High Priority
Password Security

Critical: Change compromised passwords immediately and enable 2FA on all accounts

Important
Financial Protection

Monitor credit reports and set up fraud alerts with major credit bureaus

Recommended
Identity Protection

Enable advanced identity monitoring and dark web surveillance