RootBounty connects companies with independent security researchers. Companies publish bug bounty programs (paid rewards) or vulnerability disclosure programs (public credit); researchers report what they find; the RootBounty team verifies companies, reviews programs and keeps the process fair.
| If you are… | Read |
|---|---|
| A researcher | Getting started as a researcher · Writing a good report |
| A company | Getting started as a company · Running a program |
| Anyone | Account security · Mailboxes (companies and staff) · Community and reputation |
| A developer | API overview · API reference |
See also the disclosure policy.