RootBounty connects companies with independent security researchers. Companies publish bug bounty programs (paid rewards) or vulnerability disclosure programs (public credit); researchers report what they find; the RootBounty team verifies companies, reviews programs and keeps the process fair.
| If you are… | Read |
|---|---|
| A researcher | Getting started as a researcher · Writing a good report · Reporting as a team · Bounty payments |
| A company | Getting started as a company · Running a program · Company teams · Bounty payments |
| Anyone | Your account · Account security · Agreements · Messages and notifications · Community and reputation |
| A developer | API overview · API reference · AI assistants (MCP) |
See also the disclosure policy.