We appreciate responsible disclosure and respond to initial reports within 48 hours.
Rewards: $25 BTC (Low), $50 BTC (Medium), $125 BTC (High) severity findings.
Scope: Security vulnerabilities only - not general bugs. Volumetric DDoS and /blog are off-limits.
For complete details, see the full policy below.
We appreciate responsible disclosure of security vulnerabilities. If you believe you've found a security issue in PeacefulMindfulPocket, please report it to us before disclosing it publicly so we have a chance to address it.
When reporting a vulnerability, please include:
We aim to provide an initial response to all reports within 48 hours. Resolution time will vary depending on severity and complexity of the issue.
The same person may claim all three tiers across separate, distinct findings. Only the first reported instance of a given issue wins the prize - this page will be updated to reflect claimed tiers.
This program covers genuine security vulnerabilities only - not general bugs, UI issues, or feature requests. Automated scanning is not permitted without prior permission.
Off-limits:
To report a security issue, please reach out using the contact below:
Past confirmed security reports, listed with researcher consent.
No disclosures yet - check back here as the program matures.