● Coordinated disclosure

Every account on RootBounty is protected by two factors. No exceptions, no opt-out.

Your password alone never opens a session. After it, we ask for a code from your authenticator app or one sent to your email.

Create your account

Already registered? Sign in

I am joining asResearcherFind and report vulnerabilities.CompanyRun a bug bounty or VDP. Reviewed by our team.

An account has one role for good. A company and a researcher need separate accounts.

UsernamePublic. Letters, numbers, - and _.

Display name

Email

PasswordAt least 12 characters. A passphrase works well.

I accept the terms and the disclosure policy.