I'm so happy I finally have a person to talk to that seems to understand me.
Thanks for providing me the link to cobalt.io. I've never heard of that platform before. I just registered. My username is sebi
I'd think it would strengthen the position that you care about security if you would dedicate a page on your site to security. Would really like to see something like that. Not only as a security researcher, but also as a customer of yours.
Depending on the application, the amount of resources you should be expending on security is often times multiple times what a naive person would expect. Security is tricky and subtle, and most people don't realize how wrong they are when it comes to doing things securely.
They have now also added a link "Report Vulnerability" in the footer of nexmo.com linking directly to the program, making it easy for everyone to find it.
You can read more about there work with us here if you are interested: https://cobalt.io/case-studies/nexmo
This is last 7 days:
Also, I would like to respond to the complaints that "we don't care about security". This is simply not true and we even use a bug bounty reward program. We do care and we accept reports through https://cobalt.io/ (ex CrowdCurity), so if you share with us your username/email on cobalt, we can add you to our program.
I totally agree we fucked up handling your report better back in may. I hope you are still willing to work with us!