Security Hall of Fame
Helping Keep the Technology We Support Safe
At 4leggedIT, technology exists to help animal rescues, shelters, foster-based organizations, and other dog-related organizations and businesses we support do more good with the resources they have. That includes keeping their websites, applications, forms, and other technology as secure as possible.
Our Security Hall of Fame recognizes security researchers and members of the ethical security community who have responsibly reported vulnerabilities affecting technology managed or maintained by 4leggedIT.
We appreciate the time, expertise, and good faith these individuals contribute to making the technology we support safer.
Recognition below reflects the specific report described and nothing more — it is not an endorsement of a researcher's other work, opinions, or platforms.
Quick Path
- See who's been recognized in Our Hall of Fame.
- Researchers choose how they're credited, or stay anonymous.
- Report a vulnerability to [email protected] under our Vulnerability Disclosure Policy.
Our Hall of Fame
Thota Murari
Reported multiple confirmed security vulnerabilities affecting 4leggedIT's backend systems (August 2026).
https://www.linkedin.com/in/thota-murari-1abb92285
Corrective Action
Backend database permissions and API access controls were reviewed and tightened, and multi-factor authentication enforcement was strengthened for privileged accounts.
Shubham Mali
Reported a missing email authentication (DMARC/SPF) configuration allowing domain spoofing across multiple 4leggedIT-managed domains (August 2026).
https://www.linkedin.com/in/hackwithshubham/
Corrective Action
Email authentication (SPF and DMARC) was configured and enforced across the affected domains to prevent spoofing.
Immadisetty Kiran Kumar
Reported multiple confirmed security vulnerabilities affecting 4leggedIT's public-facing infrastructure (August 2026).
https://www.linkedin.com/in/i-kirankumar
Corrective Action
The reported issues were verified and remediated on the affected systems.
Pradyumntiwarinexus
Reported a weak registration password policy that allowed a user's email address to be used as the account password on the 4leggedIT User Portal (August 2026).
https://www.linkedin.com/in/pradyumn-tiwarinexus-b270561b1/
Corrective Action
Server-side validation was added to the registration flow to reject a password matching the account's own email address.
Botta Sai Prasad
Reported missing security headers and invalid email acceptance during registration on the 4leggedIT User Portal (August 2026).
https://www.linkedin.com/in/botta-sai-prasad
Corrective Action
Missing HTTP security headers were added across 4leggedIT's public-facing sites, and server-side email-format validation was added to registration.
Kiran Daraboina
Reported a missing Content-Security-Policy header across 4leggedIT's public-facing sites (August 2026).
https://www.linkedin.com/in/reckiran/
Corrective Action
A Content-Security-Policy header was implemented and deployed fleet-wide.
If you discover a potential security vulnerability in a system within the scope of our Vulnerability Disclosure Policy, we encourage you to report it responsibly. We do not offer monetary bug bounties, but with your permission, we'd be happy to recognize your contribution here.
Security Contributions
Not every report rises to the level of a confirmed vulnerability, but we still value the time and good-faith testing behind it. This section recognizes contributions of that kind, separate from Our Hall of Fame above.
T. Jaswanth (Tippagalla Jaswanth)
Reported registration behavior in the 4leggedIT User Portal (August 2026).
https://www.linkedin.com/in/tippagalla-jaswanth-36a956321
Corrective Action
A disclaimer was added to the portal clarifying its intended use and confirming it does not grant access to any 4leggedIT systems, accounts, or infrastructure.
Bhargav Subrahmanyam Kalla
Reported a demo-site disclosure gap on the example rescue site's Donate page (August 2026).
https://www.linkedin.com/in/bhargavinfo
Corrective Action
The demo-site disclosure banner was updated to appear on every page, not just the homepage.
Uday Patel (uday637)
Reported password-length input handling in the 4leggedIT User Portal registration flow (August 2026).
https://www.linkedin.com/in/uday-9a4bb4342
Corrective Action
A maximum password length enforced server-side before hashing was already in place; the finding was verified and the existing control confirmed.
Recognition
Researchers may choose how they are recognized. Options include:
- Full name
- Name and organization
- Security research handle
- Website or profile
- Anonymous
We will never publicly identify a researcher without their permission.
Responsible Disclosure
Our Security Hall of Fame is made possible by responsible disclosure.
If you believe you have discovered a security vulnerability affecting a 4leggedIT-managed website, application, API, integration, or other in-scope technology, please report it rather than publicly disclosing the issue.
Reports can be submitted to:
Please review our Vulnerability Disclosure Policy before conducting security research.
Why It Matters
The technology we support can handle everything from adoption applications and volunteer information to rescue communications and animal records.
A security issue isn't just a technical problem. For a small organization operating on limited resources, it can become a real-world problem for the people and animals depending on it.
That's why we appreciate the people who help us find problems before they become bigger ones.
Security Researchers
Want to be recognized here? Submit a responsible vulnerability report and let us know how you'd like to be credited.
To everyone who has helped make the technology we support a little safer: thank you. 🐾