Bounty programs are moving to a rebuilt platform in phases. See New Bounty Platform for where to submit, how balances work during the migration, and which programs have moved.
- Getting Started - Guidelines for participating in bug bounty programs, including severity classification, scope, and eligibility.
- Finding Statuses - How findings are categorized - New, In Review, Confirmed, Duplicate, Rejected, Spam, Withdrawn, and Disputed - and what each means for your submission.
- Bounty Severity Classification - Standardized framework for evaluating vulnerability impact and likelihood across bounty programs.
- Deposits for Bounty Submissions - When deposits are required, how to add balance, and how refunds and slashing work.
- Bug Bounty Payout - Requirements, payment statuses, and support after your finding is confirmed.
- Mediation Process - How to escalate a dispute and work with Cantina when you disagree with a client’s decision.