“Bug Bounty” and Word Fence

  • Resolved Swiss-Cheese

    (@swiss_cheese)


    5 months, 3 weeks ago

    Us: We are a non-profit organization with several websites serving diverse interests. We have the free version of Word Fence installed and updated on all of them. Thank you Word Fence!

    On one of our main educational websites which offers free education without cost or obligation we’ve been receiving notices of a so called bug report. Word Fence doesn’t report any issues.

    Please advise. I see the Word Fence its self has its own ethical hacker or bug bounty program. I see online some folks are talking about scams where people are charged outrageous sums and nothing is wrong with their site until they respond to the social engineering exploit. I tried to search WordFence.com for info and I generally try (but life is busy, so who knows) to keep up to date with security breach announcements you folks put out. So which is it? How can we tell what’s legit and what isn’t?

Viewing 1 replies (of 1 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @swiss_cheese, thanks for using Wordfence and getting in touch about this.

    We do indeed offer a bug bounty program for those who wish to help us keep WordPress a safer place, but would not send you details of an issue with your site(s) unless the Wordfence scan had picked something up directly. These are automated emails and would be titled, “[Wordfence Alert] Problems found on yourdomain.com“, and based on the severity level you have chosen to receive email alerts about from the plugin. Our daily/weekly/monthly reports (again depending on your plugin settings) are “Wordfence activity for October X, 202X on yourdomain.com“, for example.

    If you are on our mailing list, we did send out some emails last week but they were news-related rather than a direct notice about your site(s).

    If you’ve received a Wordfence-branded email about problems with your site that you feel is suspicious, by all means forward it to us at wftest @ wordfence . com and include your forum username in the subject or body to make it easily searchable. Let us know here when you’ve sent it so we can take a look.

    Many thanks,
    Peter.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.

Tags