
Syfe
Bounty Range
$50 - $1,000
external program
Please do not discuss any vulnerabilities (even resolved ones) outside of the program without express consent from the organization.
Follow HackerOne's disclosure guidelines.
Please provide detailed reports with reproducible steps. If the report is not detailed enough to reproduce the issue, the issue will not be eligible for a reward.
Submit one vulnerability per report unless you need to chain vulnerabilities to provide impact.
When duplicates occur, we only award the first report received (provided it can be fully reproduced).
Multiple vulnerabilities caused by one underlying issue will be awarded one bounty.
Social engineering (e.g., phishing, vishing, smishing) is prohibited.
Make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our service.
Ask the program team before submitting vulnerabilities on unscoped subdomains
Only interact with accounts you own or with the explicit permission of the account holder.
Access the primary test environment using the provided test credentials. New researchers on the platform may not be able to claim credentials as per Hackerone guidelines and we will not be able to provide the same via email.
Test environment: https://uat-bugbounty.nonprod.syfe.com/
Note: Findings on the test environment need to be reproducible on the production environment for the finding to be eligible.
Typically, the following types of bugs and activities are not eligible for a bounty:
For production environments, researchers should add headers to requests such as:
If you signup on production, use only @wearehackerone.com email address to be eligible for bounty and avoid any blocks.
| Severity | Reward Range |
|---|---|
| Low | $50–$75 |
| Medium | $150–$250 |
| High | $500–$750 |
| Critical | $1,000–$1,500 |
Our rewards are based on severity per CVSS (the Common Vulnerability Scoring Standard). Please note these are general guidelines, and reward decisions are at the discretion of Syfe.
Thank you for helping keep Syfe and our users safe!