Report a security issue

Wahoo Security Program

Wahoo is committed to protecting our community and has established a Vulnerability Reporting Program for users to report security-related issues associated with our website or mobile apps. If you believe you have found a vulnerability or issue, we ask that you submit a report of the issue, including a detailed description of the issue and the steps that we can take to reproduce the issue and/or a proof-of-concept.

Once you submit a report to us, please allow our team a reasonable amount of time to respond to your report and correct the issue. We truly appreciate your efforts to protect our community. All reports are subject to the terms and conditions ("Terms") set forth below, and with the Terms of Services available on the Website. Please note that this is NOT a Bug Bounty program.

Responsible Disclosure Policy

Wahoo is committed to protecting our community and has established a security program for users to report security-related issues associated with our website or mobile apps. If you believe you have found a vulnerability or issue and would like to participate in our program, we ask that you submit a report of the issue, including a detailed description of the issue and the steps that we can take to reproduce the issue and/or a proof-of-concept. Once you submit a report to us, please allow our team a reasonable amount of time to respond to your report and correct the issue. If a credible issue is located we will respond to your inquiry with a timeline for a fix to be issued. We truly appreciate your efforts to protect our community. All reports are subject to the terms and conditions set forth below, and with the Terms of Services available on the Website.

Eligibility

The Wahoo Vulnerability Reporting Program (the “Program”) is open to individuals who are 18 years of age or older (or the age of majority in his/her jurisdiction of residence, whichever is older), provided that users who access our website from any country against which the United States has issued export sanctions or other trade restrictions are not eligible to participate in the Program. The Program is void wherever prohibited or restricted, and is subject to all federal, state, and local laws. You must comply with all applicable laws during your participation in the Program, including but not limited to those regarding the transmission of technical data exported from the United States or the country from which you access our website. Wahoo shall have the right at any time to change or discontinue any aspect or feature of the Program.

Scope

We invite and welcome reports on any security-related issue or vulnerability that you may find on our website. However, please do not resort to phishing, spamming and other questionable methods that may harass our users or compromise their data, generate significant volumes of traffic, or cause disruption to our website.

Ownership and Incentive

Any report that you submit to us will become our property, and we are under no obligation to act on a report.

Warranty Disclaimers

YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT: (1) YOUR PARTICIPATION IN THE PROGRAM IS AT YOUR SOLE RISK. WAHOO EXPRESSLY DISCLAIMS ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WAHOO SPECIFICALLY DISCLAIMS ANY LIABILITY WITH REGARD TO ANY ACTIONS RESULTING FROM YOUR PARTICIPATION IN THE PROGRAM.

Final Note

We ask that you follow principles of responsible disclosure and give the Wahoo security team a reasonable amount of time to respond to and correct the submitted issue before you make it public. We ask you to remain open in communicating with us before making any public disclosure so that we're in agreement on the report and timelines. Email and any other personally identifiable information submitted will be treated pursuant to Wahoo Fitness's Privacy Policy.

Thank You!

We sincerely appreciate the efforts of security researchers in keeping our community safe.