Grade A — Highly protective (score 93/100)
The policy grants the company a perpetual, worldwide license to all submitted vulnerability information and disclaims all liability for damages.
Broad IP license and liability disclaimer. Unilateral modification rights.
you grant us a perpetual, worldwide, royalty-free, fully paid-up license to use and disclose any information you submit
You give the company permanent, global rights to use, share, and profit from your vulnerability reports and code samples without paying you.
BCG... shall not be liable to you in connection with these Terms of Use for any direct, indirect, exemplary, incidental, special or consequential damages.
The company disclaims all legal responsibility for any harm or damages you might suffer while participating in their program.
BCG reserves the right, in its sole discretion, to modify the terms of the Responsible Disclosure Guidelines or to terminate any or all of them at any time.
The company can change or cancel these terms whenever they want without giving you any notice.
Please use our PGP key posted in the collapsible element below to send an encrypted message.
The company provides a PGP key to allow you to encrypt your vulnerability reports for better security.
Last reviewed 2026-08-05 under rubric v3.5.