Fresh Features Ahead: Your Bug Bounty Experience Just Got Better!
Hey Hackers,
We've rolled out some awesome updates to make your bug bounty experience smoother, more rewarding, and easier to navigate. Here's the scoop:
What's New?
1. New Home Base:
bugbounty.shopify.com
We launched a site dedicated to our program, so you can find everything you need in one place. Expect more resources, tips, and content to help you write those high-impact reports.
2. Better Severity Calculator
We've updated our severity calculator to give more weight to data impact when scoring confidentiality and integrity. Here's an example of how it breaks down:
Low confidentiality impact = $
High confidentiality impact = $$
High confidentiality + scales across Shopify = $$$
3. New Precedents Payout Structure
For certain tricky report types that don't fit into our usual calculator, we're introducing an additional reward structure to ensure fair payouts.
4. Increased Rewards
We noticed a big gap in our payout table, especially between a 9 and a 10, so we've spread that end cash around. Now, reports scoring 4.0 or above will see higher payouts across the board.
5. Bonuses!
We're adding new ways to reward you for top-notch work, including bonuses for high-quality reports and more.
We'd love to hear what you think—drop your feedback. This is just the beginning, so stay tuned for more updates!
Stay Connected
Follow us at @ShopifyEng or check out bugbounty.shopify.com for the latest updates.
Happy Hacking!