Bug Bounty

Here hackers and businesses join forces, and everyone wins.

For hackers

Do what you love

When else do you get the chance to safely (and legally!) hack a banking application or a huge marketplace?

Earn money by finding flaws

Find a vulnerability within the specified scope, and the company will pay you for it. You will earn even more if you find a way to trigger an event that the company defines as non-tolerable.

Compete and gain bragging rights

Share your profile on social media or add it to your CV as evidence of your hacking competence.

Make the world a safer place

With your help, the services that you, your friends and family, and thousands of other people use will become safer and more reliable.

For companies

Large community of experienced hackers

The researchers we invite to the platform know their business. Many of them have found dozens of vulnerabilities, including ones with CVE IDs. Researchers often work as freelancers, and bug bounty programs are the best way to use their services.

Pay for results only

You pay only for confirmed vulnerabilities that were found in the websites and services designated by you. You don't pay anything if hackers spend weeks trying to find a flaw and fail.

Easier interaction with researchers

We provide a platform for interaction with researchers and deal with all the formalities, including money transfers to help you pay rewards.

Confidentiality above all

We require all participating researchers to adhere to the principles of responsible disclosure. You will have enough time to fix the discovered vulnerabilities.

Companies

Приморский край

Информационные ресурсы Приморского края созданы для экономии времени при получения государственных и муниципальных услуг

Красноярский край

Информационные ресурсы Красноярского края созданы для экономии времени при получения государственных и муниципальных услуг

Timeweb

Timeweb – облачная платформа для бизнеса и частных лиц, позволяющая создавать, масштабировать и управлять IT-инфраструктурой по всему миру. Компания включена в реестр отечественного ПО и входит в топ-5 крупнейших облачных провайдеров России.

https://timeweb.cloud/ - Облачная IT-инфраструктура для бизнеса, стартапов и независимых разработчиков.
https://timeweb.com/ru/ - shared-хостинг
https://mail.timeweb.com/login - Сервис почты
https://craftum.com/ - Конструктор сайтов
https://cheapsender.email/ - Сервис рассылок

3 programs

Craftum

Craftum - конструктор сайтов, который позволяет быстро создать сайт для продаж, продвижения личного бренда, портфолио или презентации компании, используя готовые шаблоны и модули.

Инфосистемы Джет

Инфосистемы Джет - системный интегратор, который входит в десятку крупнейших ИТ-компаний России и в ТОП-5 поставщиков ИТ-услуг. Мы первыми внедряем уникальные решения, которые испытали на себе. Реализуем сложные комплексные проекты, которые другим кажутся невозможными: можем построить ЦОД в вечной мерзлоте, запустить с нуля виртуального оператора связи за полгода или за несколько месяцев построить ИТ-инфраструктуру и систему клиринга для новой национальной платежной системы.

Сахалинская область

Электронные сервисы Сахалинской области созданы для экономии времени при получения государственных и муниципальных услуг

Купер

Купер — сервис доставки из магазинов и ресторанов для любого повода.
Купер доставляет свежие продукты, вкусную готовую еду, лекарства, косметику, цветы, товары для дома и любимых питомцев и многое другое от 20 минут.
Сегодня клиентам доступны 8 млн позиций из 230 продуктовых сетей, почти 1300 магазинов непродовольственных товаров, 30 аптечных сетей и более чем 38 тысяч ресторанов. Купер работает в 360 городах.

Азбука вкуса

Azbuka Vkusa is a Russian retail company with a growing chain of stores of different formats in Moscow, the Moscow region, and St. Petersburg. Azbuka Vkusa owns the online store av.ru, has its own culinary production, private brands, a farm in the Kaluga region, and runs its own restaurant, AV Grand-Cafe. The company ranks first among Russian food retailers in terms of sales per square meter, with an assortment of over 18,000 stock keeping units (SKUs) provided by 900 manufacturers and suppliers from 70 countries; more than 1,000 SKUs are produced by the company in-house. Azbuka Vkusa is a high-end retailer, one of the 200 largest private companies in Russia according to Forbes, and one of the top 100 employers in Russia according to HeadHunter. To date, the total number of chain stores is 172, which includes 104 Azbuka Vkusa supermarkets, 60 AV Daily minimarkets, 5 AV Market hypermarkets, and 3 Enoteca boutiques.

Okko

Rambler&Co

Rambler&Co ranks first among media holdings in Russia by monthly audience size, with over 47.7 million people (according to Mediascope, Cross Web, March 2022). It includes Lenta.ru, Gazeta.Ru, the Rambler portal, Championat, Sekret Firmy, Motor.ru, Ferra.ru, and several other media assets. Due to the diverse thematic focus of its platforms, the holding covers almost the entire spectrum of interests and needs of various audiences.

5 programs

Positive Technologies

Positive Technologies is a leading global provider of cybersecurity solutions. Over 2,300 organizations worldwide use technologies and services developed by our company. For more than 20 years, our mission has been to safeguard businesses and entire industries against the threat of cyberattacks. Positive Technologies is the first and only cybersecurity company in Russia to go public on the Moscow Exchange (MOEX: POSI).

3 programs

T-Bank

Online financial ecosystem built around one of the world’s largest online banks.

Новая Перевозочная Компания

JSC New Forwarding Company is one of the largest independent enterprises in the Russian freight rail transportation market. The Globaltrans group controls 100 percent of the shares in JSC New Forwarding Company. Registered on July 24, 2003, JSC New Forwarding Company holds a leading position among private railway rolling stock operators in organizing the transportation of mining and mineral processing products, steel mill goods, construction aggregates, and other types of cargo.

Ozon

OZON is one of the largest Russian e-commerce platforms.

Standoff 365

Standoff 365 is a platform for infosec researchers that includes a cyberrange, bug bounty programs, and the Talks meetup.

VK is one of the largest technology companies in Russia. More than 95% of the Russian internet audience use VK products. Security of VK services and protection of user data are key priorities for the company.

26 programs

Консоль

Автоматизируем управление самозанятыми, ИП, физлицами. Помогаем средним и крупным компаниям сократить издержки и снизить риски сотрудничества с большим числом исполнителей

ATI.SU

ATI.SU — крупнейшая в России и СНГ Биржа грузоперевозок.

Wildberries

Wildberries — онлайн-платформа с 18-летней историей. География присутствия площадки охватывает 7 стран мира, в том числе Россию, Белоруссию, Казахстан, Армению и Киргизию. Ежедневно на площадке оформляется 8 млн заказов, а 90% её продавцов – представители малого бизнеса.

Programs

Ozon

Ozon is one of the largest Russian e-commerce platforms. The OZON infrastructure has a large number of different services that we want to make safer. Any security researcher can help us with this by participating in our bug bounty program. We will be glad and grateful to all participants. You can send us reports in English or Russian. www.ozon.ru

Новая Перевозочная Компания

Новая перевозочная компания

New Forwarding Company offers freight rail transportation services to big industrial customers and provides railcar leasing and auxiliary services. We aim to deliver the best experience to our clients and keep our partners and employees safe.

Online financial ecosystem built around one of the world’s largest online banks https://tbank.ru