Security Research
Responsible Vulnerability Disclosure
Bug Bounty Program
We welcome security researchers to help us maintain the security of Honesty Stands. If you discover a security vulnerability, please report it to us responsibly.
Scope & Rewards
C
Critical - $500-$2,000
RCE, SQL injection, authentication bypass, payment manipulation
H
High - $200-$500
XSS, CSRF, privilege escalation, sensitive data exposure
M
Medium - $50-$200
Information disclosure, broken access control
Recognition
Security researchers who report valid vulnerabilities will be acknowledged in our Hall of Fame (with permission) and receive swag from Honesty Stands.
Safe Harbor
We will not pursue legal action against security researchers who act in good faith and follow responsible disclosure practices. We ask that you do not publicly disclose the vulnerability until we have had adequate time to address it.