Skip to content

Reporting a security vulnerability to Perceptyx

Perceptyx welcomes reports about potential security vulnerabilities in the Perceptyx Platform and in the public web properties we operate.

How to report

Email security@perceptyx.com. Include where you found the issue, the steps needed to reproduce it, and the impact you believe it has. Please send one issue per email, in English. Machine-readable contact details are published at https://www.perceptyx.com/.well-known/security.txt (RFC 9116).

What happens next

A member of the Perceptyx security team will acknowledge your report, tell you whether we have confirmed the issue, and let you know when it has been addressed. Confirmed issues are handled under our vulnerability management process. Perceptyx does not operate a bug bounty program and does not publish an acknowledgements list.

What this policy authorizes

The Perceptyx Platform is not a public application. It is available only to Perceptyx customers and their employees, and it holds those organizations’ survey data. Active security testing of the platform is performed by firms engaged and authorized by Perceptyx. This policy does not authorize anyone else to test the platform.

If you become aware of a vulnerability, for example while using the platform as an authorized user or while visiting a Perceptyx public web property, we ask you to report it to us and to follow these rules:

  • Do not access, copy or retain data that is not yours. If you encounter other people’s data, stop and tell us in your report.
  • Do not go further than needed to notice the issue. Do not attempt to exploit it, degrade the service, or reach other systems.
  • Do not disclose the issue publicly before Perceptyx has had a reasonable opportunity to address it.

Perceptyx will not pursue legal action against anyone who reports a vulnerability in good faith and follows these rules.

Perceptyx customers

If you are a Perceptyx customer and believe your organization’s data may be affected, contact your customer success manager or security@perceptyx.com. Incident notification follows the terms of your agreement.

Last reviewed 2026-10-14.