Terms of Service
Last updated: August 2026
Acceptable use
Researchers may only test assets that are explicitly listed in scope of a program's policy. Testing out-of-scope assets, performing destructive testing, or exfiltrating data beyond what is necessary to demonstrate a vulnerability is prohibited.
Safe harbor
Research conducted in good faith and in accordance with a program's policy is protected by that program's safe harbor provisions. Each program defines its own rules; always read the program policy before testing.
Bounties
Bounty amounts and eligibility are determined by each program's reward tiers. Validation and payout decisions are made by the program owner.
Termination
We may suspend or terminate accounts that violate these terms or a program's policy. Users may delete their account at any time.