Company authorization
A representative authorized to arrange testing and a reachable security contact.
FOR COMPANIES BUILDING WHAT’S NEXTOpen your scope.
Open your scope.
Strengthen your defenses.
Turn independent research into a continuous security practice. Launch a public or private bounty program for your applications, APIs, smart contracts, or protocols.
Web2 & Web3Public or privateETH payouts
BEFORE YOU GET STARTED
A clear scope makes a stronger program.
Bring the details your researchers need to work responsibly.
In-scope assets
Exact domains, API endpoints, repositories or on-chain contract addresses.
Rewards and rules
A realistic bounty range, exclusions and a disclosure policy.
A response plan
Someone responsible for triaging reports and communicating with researchers.
Start with a focused program.
Grow with every useful finding.
Save your draft as you define scope. Publication requires approval.