home / bug bounty
// managed bug bounty & vdp
Continuous testing, verified before it reaches you
A pentest is a snapshot. A bug bounty program keeps skilled researchers probing your systems every week — and you only pay for valid findings. We run the whole thing, so your team sees verified, fix-ready reports and nothing else.
// why managed
We absorb the noise
Running a program in-house means drowning in duplicates, invalid reports and payout admin. We handle all of it and pass you only what matters.
Written with you
In-scope assets, out-of-scope exclusions, excluded vuln classes and a reward table, all agreed up front.
Every report reproduced
We validate and reproduce each submission against a strict gate before it ever reaches your developers.
Handled end to end
Reward decisions, researcher payouts and TDS for Indian payees — off your plate entirely.
// triage workflow
Every report, the same path
A clear state machine from submission to payout — the same discipline we use when we hunt ourselves: prove it, deduplicate it, score it, then pay.
- new
New
Report received and acknowledged against our triage SLA.
- triaged
Triaged
Reproduced and validated by our team — or sent back for more detail.
- dup
Duplicate
Matched against existing reports so you never pay twice for the same bug.
- accepted
Accepted
Confirmed valid, severity and reward agreed.
- resolved
Resolved
Fixed by your team and retested by us.
- paid
Paid
Researcher paid, with TDS handled for Indian payouts.
// vdp
Not ready for rewards? Start with a VDP
A Vulnerability Disclosure Program gives anyone a safe, legal channel to report bugs in your systems — with safe-harbour terms and a published security.txt. It's the lowest-friction way to start, and it's how our own site works.
Public disclosure channel
- Safe-harbour terms for good-faith research
- A public reporting page and
security.txt - We triage and route valid reports to you
- No rewards — recognition only
Private, rewarded program
- Invite vetted SDX Society researchers
- Reward table scaled to severity
- Full triage, dedup and payouts by us
- Continuous coverage after your pentest
Give researchers a reason to help you
Fast, fair triage is what hunters compare platforms on. We publish a triage target and meet it — so good researchers keep coming back to your program.