These terms and conditions (the "Agreement") govern your participation in our bug bounty program (the "Program"). By participating in the Program, you agree to be bound by this Agreement.
Our Program is designed to encourage security researchers to report vulnerabilities in our services and products. The Program is open to all security researchers who comply with the terms and conditions of this Agreement.
To report a vulnerability, you must submit a report to us via the required provisions on the platform. The report must include a detailed description of the vulnerability and the steps required to reproduce it. Reports should be made in good faith and should not involve any illegal or unauthorized activity.
To be eligible for a reward, your report must be the first time we have received a report of the vulnerability. Duplicate reports will not be eligible for a reward. Additionally, you must not be an employee or contractor of our company or any of our affiliates.
We, or our clients, may offer rewards for eligible vulnerability reports at our [their] discretion. The amount of the reward will depend on the severity of the vulnerability and the quality of the report. Rewards will be paid out in a timely manner, subject to any legal or regulatory requirements.
You must comply with all applicable laws and regulations in connection with your participation in the Program, including but not limited to laws relating to data privacy and cybersecurity.
You agree to keep all information related to the Program confidential, including but not limited to the existence of the Program, any vulnerabilities you discover, and any rewards you receive. You may not disclose any information about the Program to any third party without our prior written consent.
You agree to indemnify and hold us harmless from any and all claims, damages, expenses, or liabilities arising out of your participation in the Program, including but not limited to any claims by third parties related to your conduct in connection with the Program.
We may terminate the Program or your participation in the Program at any time and for any reason, without notice.
We may modify the terms and conditions of this Agreement at any time, in our sole discretion. Any modifications will be effective immediately upon posting on our website.
This Agreement will be governed by and construed in accordance with the laws of Kenya, without giving effect to any choice of law or conflict of law provisions.
This Agreement constitutes the entire agreement between you and us with respect to the Program and supersedes all prior or contemporaneous communications and proposals, whether oral or written, between you and us with respect to the Program.
If you have any questions or concerns about this Agreement, please contact us at info[at]hitbounty.com