All reports are welcome, but we do have a few terms that need to be followed in order to be eligible for the benefits. Please read the following guidelines before reporting a bug.

Scope:
  • This website (bittr.ee)
  • Terms:
  • Do not disclose the bug publicly until it has been fixed.
  • Do not exploit the bug for personal gain.
  • Do not use automated tools like Burp Suite, ZAP, etc. We already use tools like these to scan our website, so this will only cause duplicate reports and increased server load.
  • Reporting:
  • Report all issues to security@bittr.ee
  • Include a detailed description of the issue, steps to reproduce, and any other relevant information.
  • If you have a fix for the issue, please include it in your report. This will help us issue a fix faster.
  • Unfortunately, we cannot provide monetary rewards for bug reports at this point. However, we will be providing benefits to all valid reports, those benefits include the following: bug bounty badge, pro subscription (if the issue is severe enough) and a spot on our hall of fame.