Bug Bounty Program

At PeaceWeb, security is a top priority. Our Bug Bounty Program invites ethical hackers and security researchers to identify vulnerabilities in our platform. By working together, we can make PeaceWeb safer for everyone while rewarding your contributions.

What is the PeaceWeb Bug Bounty Program?

PeaceWeb’s Bug Bounty Program is an initiative to reward security researchers and ethical hackers for responsibly disclosing vulnerabilities in our platform. By partnering with the security community, we can proactively identify and fix issues before they can be exploited.

1 Find Vulnerabilities: Identify potential security issues in PeaceWeb’s platform or infrastructure.
2 Submit a Report: Use our Bug Bounty submission form to disclose vulnerabilities responsibly.
3 Earn Rewards: Depending on the severity and impact of the vulnerability, you’ll receive a reward for your findings.

What’s Covered?

The Bug Bounty Program is focused on vulnerabilities that directly impact the security and integrity of PeaceWeb’s systems. Below are the key areas included in the program:

PeaceWeb’s customer-facing website and platform.
APIs used by customers or resellers.
Infrastructure affecting data center and hosting services.
PeaceWeb-hosted applications and tools.
Third-party services not directly managed by PeaceWeb.
Social engineering attacks, phishing, or physical intrusion.
Denial-of-Service (DoS) attacks or automated spam testing.

Frequently asked questions

Can’t find the answer you’re looking for? You can contact us here.

Who can participate in the Bug Bounty Program?: Anyone who has the skills and interest to find vulnerabilities responsibly can participate. You don’t need to be a professional hacker or researcher.
How long does it take to review a report?: Reports are typically reviewed within 7-14 business days, depending on the complexity of the issue.
Can I disclose the vulnerability after reporting it?: No. Public disclosure of vulnerabilities before PeaceWeb resolves them is against program rules.
Are there limits on how much I can earn?: There’s no limit on total rewards—you can submit multiple valid reports and earn for each one.
What happens if my submission is out of scope?: If your submission is out of scope, our team will inform you, but it won’t be eligible for a reward.