Security
This page details information about our data centers, storage and payment processing practices. If you have any questions about how we host your bot or store your data, please reach out to us at [email protected] or in our Discord support server.
Data Centers and Storage
BotGhost hosts and manages your bot using Amazon's secure and trusted 'AWS' server infrastructure. AWS is a secure-by-design infrastructure with built-in protection used by millions of businesses around the world. Data sent between our servers is both secured at rest and in transit, including any personal information such as your email or Discord bot's token. You can read more about AWS's security measures on their security overview page.
Payment Processing
BotGhost uses both Stripe and PayPal for the payment processing of our subscriptions. Both Stripe and PayPal are PCI Level 1 compliant. BotGhost does not store your credit card's information; all information is stored securely by Stripe or PayPal.
Bug Bounty Program
BotGhost values the security of our platform and appreciates the security research community's efforts in helping us maintain a secure environment. We offer bug bounties for the responsible disclosure of critical security vulnerabilities and exploits.
Terms and Conditions
To be eligible for a bug bounty reward, security researchers must adhere to the following terms and conditions:
- You must provide a detailed report of all accessed resources and the steps to reproduce the vulnerability.
- You must not have shared the vulnerability details, reproduction steps, or any information about the exploit with any other entities prior to receiving the bounty.
- You may share the vulnerability information publicly only after it has been patched and we have provided explicit confirmation.
- You must not have used the accessed resources or vulnerability for any malicious intent or unauthorized access.
- The vulnerability must be a genuine security issue that poses a critical risk to our platform or users.
- BotGhost reserves the right to determine the severity and eligibility of reported vulnerabilities.
Reporting Security Vulnerabilities
To report a security vulnerability, please contact us through one of the following methods:
How to Contact Us
Please feel free to contact us if you have any questions or comments about BotGhost's security at [email protected].
