Security Disclosure Policy

At Mercu, we take the security of our platform and our users seriously. We welcome contributions from the security community to help us identify and fix vulnerabilities.

If you’ve discovered a security issue, we want to hear from you - and we’ll do our best to address it quickly and responsibly.

Reporting a Vulnerability

If you believe you've discovered a security vulnerability in Mercu, please email us at: security@mercu.com

To help us respond quickly and effectively, please include:

  • A clear description of the issue
  • Steps to reproduce the problem
  • Any relevant request/response data or logs
  • Screenshots or screen recordings (if helpful)
  • Whether you tested on production or a test environment
  • Your contact details (optional, if you’d like acknowledgment or updates)

If you'd like to encrypt your message, you can use our PGP key (see below).

Coordinated Disclosure

We ask that:

  • You give us a reasonable amount of time to investigate and fix the issue before making it public
  • You do not access or modify user data beyond your own
  • You avoid privacy violations, service disruption, or data destruction
  • You comply with all applicable laws

We’ll notify you when the issue is resolved, and may request a coordinated public disclosure, if appropriate.

Rewards and Recognition

While we don’t operate a formal bug bounty program, we do offer discretionary rewards and public acknowledgment for valid, high-impact reports.

We appreciate researchers who go out of their way to make Mercu safer for everyone.

What You Can Expect from Us

  • A prompt, professional response
  • Regular updates as we investigate and resolve the issue
  • Recognition and thanks if your report leads to a confirmed fix

PGP key

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=0ZLx
-----END PGP PUBLIC KEY BLOCK-----

A high-volume hiring experience that your recruiters and candidates will thank you for.

Mercu Hire automates repetitive and time-consuming tasks when hiring frontline staff: Interview scheduling, interview reminders, and candidate questions. All while delivering the most engaging candidate experience available on the market.