Terms of Service

You must be at least 18 years of age to use the Platform. By registering, you represent that you meet this requirement and that all information you provide is accurate and complete.

Use of the Platform is void where prohibited by law. It is your responsibility to ensure compliance with applicable laws in your jurisdiction.

You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. Notify us immediately of any unauthorized use.

We reserve the right to suspend or terminate accounts that violate these Terms, engage in fraudulent activity, or otherwise harm the Platform or its users.

Security researchers (“Hackers”) must obtain explicit authorization through an active Program before testing any target system. Testing out-of-scope systems, exploiting vulnerabilities beyond what is necessary to demonstrate impact, or accessing, modifying, or exfiltrating user data is strictly prohibited.

Hackers agree to submit reports in good faith, disclose vulnerabilities responsibly, and not publicly disclose findings before the organization has had reasonable time to remediate them (typically 90 days).

Attempting to defraud the reward system — including submitting fabricated, duplicate, or out-of-scope reports — will result in immediate account termination and forfeiture of any pending rewards.

Organizations must define clear, accurate scope for their Programs and respond to valid reports within a reasonable timeframe. Organizations may not use the Platform to collect vulnerability information and then refuse all valid reports without legitimate justification.

Credits deposited into an organization's wallet are non-refundable once consumed as rewards. Reserved credits that have not been finalized may be released at the organization's discretion.

Reward amounts displayed in a Program's rules are indicative and may be adjusted at the Platform's or organization's discretion based on actual severity and impact. Acceptance of a report does not guarantee a specific reward amount unless explicitly stated in the Program terms.

All rewards are denominated in Platform credits. The Platform makes no representations regarding the monetary value of credits or their convertibility.

You retain ownership of any original work you submit to the Platform. By submitting a vulnerability report, you grant the Platform and the relevant organization a non-exclusive license to use the information for the purpose of remediation and security improvement.

The Platform's software, design, trademarks, and content are proprietary and may not be reproduced, distributed, or used without prior written consent.

The Platform is provided “as is” without warranty of any kind. To the fullest extent permitted by law, we disclaim all warranties, express or implied.

In no event shall the Platform be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of the Platform, even if advised of the possibility of such damages.

We may update these Terms from time to time. Continued use of the Platform after changes are posted constitutes your acceptance of the revised Terms. We will make reasonable efforts to notify registered users of material changes.

Questions about these Terms may be directed to our support team via the Platform.