chore: research guidelines bug bounty (#2005)

ory · Jan 13, 2025 · 444987d · 444987d
1 parent b47c441
commit 444987d
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/docs/ecosystem/security.md b/docs/ecosystem/security.md
@@ -60,9 +60,11 @@ holder.
 
 Prohibited activities:
 
-- social engineering like phishing, vishing, or smishing
-- security scanning with more than 5 QPS against Ory domains
-- any activity that leads to disruption of our service longer than 5 minutes
+- creating failing/incomplete subscriptions to paid plans in Ory Network for example with incomplete or fake credit card
+  information.
+- social engineering like phishing, vishing, or smishing.
+- security scanning with more than 5 QPS against Ory domains.
+- any activity that leads to disruption of the Ory Network service for customers.
 
 ### What can you report