Bug Bounty

This page explains how gratitude or rewards are handled for security reports. It should not be read as a promise of a standing public bug-bounty program.

Current program status

There is not always a fixed reward table or an always-open bounty program. That said, reports that make a meaningful security improvement may be considered for public thanks or individual rewards at our discretion.