Algogator Bug Bounty Plan

Algogator is committed to ensuring the security and stability of our platform. We believe that fostering a strong security culture starts with engaging the community to help us identify and fix vulnerabilities. To encourage responsible disclosure and collaboration, we are launching the Algogator Bug Bounty Program.

The scope of the program includes all publicly accessible web applications, mobile applications, and APIs owned and operated by Algogator.

The following areas are out of scope for the bug bounty program:

Attacks that require physical access to devices or infrastructure.Social engineering attacks.Denial of Service (DoS) attacks.Vulnerabilities in third-party software, libraries, or tools not owned by Algogator.

To be eligible for a bug bounty reward, you must:

Be the first to report a previously unknown vulnerability.Provide sufficient information and a detailed description of the vulnerability, allowing Algogator to reproduce and verify the issue.Not disclose the vulnerability publicly or to any third party before Algogator has acknowledged and resolved the issue.

The reward for a qualifying vulnerability will be determined based on its severity and impact on the Algogator platform, as assessed by the Algogator security team. Rewards will range from $10 to $1,000 USD, with the following tiers:

Low Severity: $10 USD

Typographical errors or misspelled wordsMinor layout inconsistencies or alignment issuesMinor color contrast issuesMinor accessibility issues (such as unlabeled form fields)

Medium Severity: $25 USD

Broken or incorrect linksMajor layout inconsistencies or alignment issuesMajor color contrast issuesMajor accessibility issues (such as missing alternative text for images)

High Severity: $100 USD

Broken functionality (such as a form that doesn’t submit)Security vulnerabilities (such as cross-site scripting or injection attacks)Major usability issues (such as a navigation menu that doesn’t work)Design flaws that impact usability or user experience (such as poor mobile responsiveness or confusing user interface)

Low Severity: $500 USD

Vulnerabilities that could result in limited information disclosure, minor functionality issues, or other low-impact issues.

Medium Severity: $750 USD

Vulnerabilities that could lead to unauthorized access, information disclosure, or disruption of service to a limited extent.

High Severity: $1,000 USD

Vulnerabilities that could result in a significant compromise of user data, unauthorized access to sensitive information, or disruption of service on a larger scale.

To report a vulnerability, simply fill out the submission form https://algogator.finance/contact, or send an email to security@algogator.com with the following information:

Your name and contact information.A detailed description of the vulnerability, including the affected component(s) and any necessary steps to reproduce the issue.Any proof-of-concept code, screenshots, or other supporting materials.Your preferred method of receiving the bug bounty reward, if applicable.

The Algogator security team will acknowledge receipt of your report within 48 hours and will provide updates on the status of the issue as it is investigated and resolved. We aim to resolve all reported vulnerabilities within 90 days, depending on the severity and complexity of the issue.

Please note that Algogator reserves the right to modify the terms of this bug bounty program or discontinue it at any time, without prior notice.

Happy hunting!