Bitnet

Bitnet encourages responsible disclosure of security vulnerabilities through this bug bounty program. If you believe you have found a security vulnerability that could impact Bitnet or our customers, we encourage you to let us know right away.

Responsible disclosure includes giving Bitnet a reasonable amount of time to fix an issue before you make it public or publish it elsewhere. In order to encourage responsible disclosure, we promise not to bring legal action against researchers who point out a problem provided that they do their best to discover and disclose of the vulnerability responsibly.

Bitnet may modify the terms of this program or terminate this program at any time. Any changes will affect the program going forward from the time of the change.

Scope of the Bitnet Bug Bounty Program

In scope for this program is the Bitnet API. Bitnet asks that tests are performed against our Test Environment, which runs the same code as production, in order to avoid potential privacy violations, destruction of data and interruption to or degradation of our service during your research. You will need to be registered with Bitnet and have your IP white-listed in order to access this environment.

The Bitnet Corporate Website and the Bitnet Developer Website are NOT in scope for this Bug Bounty Program.

Reporting A Vulnerability

If you think you have discovered a security vulnerability or problem, please contact us at [email protected] to be invited to our HackerOne program.

When reporting a suspected vulnerability, we ask that you be as precise as possible including detailed steps on how to recreate so that we can address it in a timely manner. If appropriate, please include a video or screenshots. Let us know how you believe the issue will affect Bitnet.