LIVE: 4,812 reports triaged ✦ $2.1M paid out via partner programs ✦ new: Tallis Mail Gateway program open ✦ reminder: only test what you are authorised to test ✦ LIVE: 4,812 reports triaged ✦ $2.1M paid out via partner programs ✦ new: Tallis Mail Gateway program open ✦ reminder: only test what you are authorised to test ✦ LIVE: 4,812 reports triaged ✦ $2.1M paid out via partner programs ✦ new: Tallis Mail Gateway program open ✦ reminder: only test what you are authorised to test ✦ LIVE: 4,812 reports triaged ✦ $2.1M paid out via partner programs ✦ new: Tallis Mail Gateway program open ✦ reminder: only test what you are authorised to test ✦ LIVE: 4,812 reports triaged ✦ $2.1M paid out via partner programs ✦ new: Tallis Mail Gateway program open ✦ reminder: only test what you are authorised to test ✦ LIVE: 4,812 reports triaged ✦ $2.1M paid out via partner programs ✦ new: Tallis Mail Gateway program open ✦ reminder: only test what you are authorised to test ✦ LIVE: 4,812 reports triaged ✦ $2.1M paid out via partner programs ✦ new: Tallis Mail Gateway program open ✦ reminder: only test what you are authorised to test ✦ LIVE: 4,812 reports triaged ✦ $2.1M paid out via partner programs ✦ new: Tallis Mail Gateway program open ✦ reminder: only test what you are authorised to test ✦
Programs
Open programs from participating vendors. Payout ranges are indicative; final awards are set by each vendor's security team.
Closed Programs
Lumen Router Firmware
ClosedProgram closed after 2025 firmware rewrite.
—Open Programs
Northwind Cloud Storage
OpenWeb app, API and mobile clients. RCE, auth bypass and data exposure in scope.
$500 – $25,000Pinegrove CMS
OpenOpen-source CMS and official plugins. Latest stable release only.
$200 – $8,000Tallis Mail Gateway
OpenSelf-hosted mail gateway. Pre-auth issues paid at the top of the range.
$1,000 – $15,000Orchard Payments SDK
Invite-onlyServer SDKs (PHP, Python, Node). Crypto and logic flaws.
$300 – $10,000