We value the help of security researchers in finding vulnerabilities. If you discover an issue — report it and receive a reward.
The reward amount is discussed individually and depends on the severity of the vulnerability and its impact on system security.
General Terms
The program is open to all researchers
Only vulnerabilities in the production environment are considered
Reward is paid for the first report of a vulnerability
Disclosing vulnerability information before it is fixed is prohibited
We guarantee a response within 3 days
Payments are only possible to accounts in the Russian Federation
Reward Amounts
The payout amount is determined individually with the report author based on the severity of the vulnerability and its impact on system security. The maximum payout amount is 100,000 rubles.