Hall of fame
Credit where it's due.
We don't pay bounties yet (see the home page for why). Public credit is what we can offer today. If you opt in when we acknowledge your report, your name — or handle, your call — goes up here once the fix is deployed.
How to get listed
1Report a real, in-scope vulnerability through the form or email.
2Give us time to fix it before going public.
3Tell us you want credit, and how you want to be listed.
Nobody listed yet.
Could be you. Find something, report it, and we'll add you after the fix ships.
Report a vulnerability