Bug Bounty Program

Help us make our services more secure!

Get rewards for finding and reporting security vulnerabilities.

Rewards

Severity Level Reward Examples
Critical up to 5000 PLN RCE, SQL Injection, XSS
High up to 2000 PLN CSRF, SSRF, IDOR
Medium up to 1000 PLN Open Redirect, Clickjacking
Low up to 500 PLN Information Disclosure

Program Rules

  • Do not exploit found vulnerabilities for purposes other than testing
  • Do not disclose information about found vulnerabilities to third parties
  • Do not perform load testing (DDoS)
  • Do not use automated scanners without prior consent
  • Respect user privacy

How to report a vulnerability?

  1. Register in the Bug Bounty program
  2. Conduct tests according to the rules
  3. Prepare a detailed report containing:
    • Vulnerability description
    • Steps to reproduce
    • Potential impact
    • Proposed solution
  4. Submit the report through the dedicated form
Report a Vulnerability