Bug bounties

We run fully funded Bug Bounty programs to help charities and NGOs find and fix vulnerabilities in their infrastructure. This entails a few stages:

Preliminary research

Our skilled team of internal, vetted researchers will analyse your infrastructure to securely inform you of any easy-wins such as outdated software.

Bug bounty program

The next stage invites external, vetted researchers to find additional vulnerabilities. To incentivise their support, they will be financially compensated based on the severity of the findings. All of the prize money is paid by CSIRT.global.

Remediation

We will work with your IT/Security team(s) to help you resolve all the findings and secure your systems.

Optional promotion

Congratulations, your organisation is more secure than it was yesterday. Some organisations are instinctively ashamed that they weren’t always totally secure. Don’t be, everyone has problems, not everyone finds and fixes them :) We will assist in promoting your success and the skills of the associated researchers.

To nominate your organisation as a beneficiary please contact our Bug Bounty team.