
Quiver
External Program
Submit bugs directly to this organization
While Quiver has designed and built its technology with strong security and privacy in mind, we do know that security is always evolving and total security is impossible to reach. Quiver believes that working with skilled security researchers across the globe is crucial in identifying any remaining weaknesses in our technology. If you believe you've found a security issue in our product or service, we encourage you to notify us. We welcome working with you to resolve the issue promptly.
Because of the constant and massive amount of scans being performed against our environment we have to add the following rule: Any kind of automated scans are not permitted. Reports stemming from automated scans will not be eligible for a bounty and risk being marked as Not Applicable or Spam (even if you rewrote the finding in your own words).
To show our appreciation of responsible security researchers, Quiver offers a monetary bounty for reports of qualifying security vulnerabilities. Reward amounts will vary based upon the severity of the reported vulnerability, and eligibility is at our sole discretion. To receive rewards, you must be the first reporter of a vulnerability. Reporters who do not comply with the rules stated on this page will not be eligible for any rewards. Note: We are currently still in private mode on HackerOne, to be added to our program, please send an email to [email protected]
While researching, we'd like to ask you to refrain from:
Thank you for helping keep Quiver and our users safe!