Program Not Started Yet

Our bug bounty program is launching soon. Reach out to our team to get notified!

Get Launch Notification

We don't have a mailing list yet -- reach out via our contact form and we'll let you know when the program launches.

Bug Bounty Program

Help us keep Apzion secure and earn rewards

Bounty Rewards

Rewards based on severity and impact

Critical

$5,000 - $25,000

Remote code execution, authentication bypass, data breach

High

$1,000 - $5,000

XSS, CSRF, privilege escalation, SQL injection

Medium

$250 - $1,000

Information disclosure, insecure direct object references

Low

$50 - $250

Security misconfigurations, minor vulnerabilities

Scope

What's in scope and what's not

In Scope

Main web application (apzion.com)

API endpoints

Mobile applications (iOS & Android)

Smart contracts (audit rewards)

Out of Scope

Third-party services

Social engineering attacks

Physical security

DDoS attacks

Program Rules

Follow these guidelines when participating

Provide detailed steps to reproduce the vulnerability

Do not exploit the vulnerability beyond verification

Do not access, modify, or delete user data

Do not publicly disclose the issue before it is fixed

Report vulnerabilities through our secure channel

One vulnerability per report

Give us reasonable time to fix (90 days)

Act in good faith and follow responsible disclosure

How to Report

1️⃣

Find a Vulnerability

Identify a security issue in our platform

2️⃣

Document It

Detailed steps to reproduce with screenshots

3️⃣

Submit Report

Send via secure channel to security team

4️⃣

Get Rewarded

Receive bounty after verification and fix

Ready to Help Us?

View Security Policy