Skip to content

[Program]: nelko.com #62

@batamaji

Description

@batamaji

Company

nelko.com

Program URL

https://nelko.com/pages/vulnerability-disclosure-policy

Contact

No response

Description

At Nelko, the security of our customers and the integrity of our hardware and digital ecosystem are our top priorities. We are committed to ensuring that personal information is protected carefully and handled with discretion. We appreciate the efforts of security researchers who help us identify and fix potential vulnerabilities.

Rewards

  • *bounty
  • *recognition
  • *swag

Program type

vdp

Status

active

Safe harbor

full

Allows disclosure

false

Domains

Official Domain: .nelko.net
Software: Official Nelko-branded mobile applications and printing software.
Hardware: Firmware and communication protocols of Nelko-branded printers.

Structured scope

No response

Out of scope

Third-Party Services: Services hosted by third parties (e.g., Shopify, PayPal, Mailchimp).
Physical Security: Attacks against Nelko’s physical offices, warehouses, or personnel.
Social Engineering: Phishing or deceptions targeting Nelko employees or customers.

Excluded methods

  • dos
  • social_engineering
  • phishing
  • physical_access
  • automated_scanning

Requires account

No response

Minimum payout

No response

Maximum payout

No response

Currency

No response

Payout - critical

No response

Payout - high

No response

Payout - medium

No response

Payout - low

No response

Swag details

At our sole discretion, Nelko may provide product rewards (such as printers or consumable gift sets) to researchers who report significant, verified vulnerabilities as a token of our appreciation.

Testing policy URL

No response

Response SLA days

3

Disclosure timeline days

No response

Legal terms URL

No response

Hall of fame URL

No response

Reporting URL

No response

PGP key URL

No response

Preferred languages

No response

Standards

No response

Confirmation

  • I confirm the information is accurate and I have included only publicly documented program details.

Metadata

Metadata

Assignees

No one assigned

    Labels

    submission-processedBot has parsed this submission and opened a PR

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions