Bug Bounty Program Rules
Note: We are in early access and are not offering monetary rewards at this time.
DO'S
- Conduct testing only on systems provided by us.
- Report vulnerabilities such as arbitrary code execution, SQL injection, privilege escalation, authentication bypass, circumvention of permission models, CSRF, and cross-site scripting (within reported limitations).
- Provide detailed, responsible reports of your findings.
- Report any design errors or suggest improvements for better usability and performance.
- Allow us a reasonable time to assess and address the reported issues.
- Follow the guidelines to help improve our security.
DON'TS
- Do not attempt non-technical attacks such as social engineering, phishing, or physical attacks against our employees, users, or infrastructure.
- Do not perform DDoS or spam attacks.
- Do not use scanners, scrapers, or any other automated tools in your testing.
- Do not publicly disclose a bug before it has been fixed.
Contact
For submissions, feedback, or questions, please contact us at support@mondsuechtig.com or join our Discord server at discord.gg