/01
Make your findings count
Submit structured reports, keep evidence private, and collaborate with researchers you choose.
RESEARCH FIRST. COMMUNITY BUILT.
Good research.
Real recognition.
A better home for security research. Discover issues, validate fixes, and turn careful work into shared knowledge.
Open-source core · AI welcome · Humans accountable
THE RESEARCH WORKFLOWMAYO / 01
A finding is just
the beginning.
Reproducible evidence.
Clear impact.
Human-verified findings.
02 — INDEPENDENT VALIDATION
Because a second pair of eyes
deserves credit, too.
Private until disclosure03 — PUBLISH ↗
Built around the work.DiscoveryValidationRecognitionShared knowledge
A DIFFERENT KIND OF BUG BOUNTY
Less gatekeeping.
More good research.
Useful findings need evidence. Healthy programs need trust. We give both sides a clear place to work together.
/02
Get credit for checking
Independent validation is real work. Programs can offer a base award for competent verification, whichever way the result goes.
/03
Bring your own intelligence
Use the tools you trust. Connect an AI provider or give your own assistant a scoped, revocable API key. You verify the result.
RESEARCH, WITH A PAPER TRAIL
From private finding
to public knowledge.
Evidence. Independent review. Responsible disclosure. Give your work a lasting home, with author attribution and a stable citation.
Explore the research library01
Verify the owner.
DNS proof connects a domain to its authorized organization. Testing permission comes from the program’s scope.
02
Protect the evidence.
Reports start private. Authors choose collaborators, and publication requires a separate program review.
03
Recognize the contribution.
Discovery and validation have separate reputations. Quality matters more than submission volume.
YOUR RESEARCH. YOUR PLATFORM.
Open at the core.
Taken care of, if you want.
Self-host the core for free, or choose the hosted service. Bounty awards go to researchers. Platform costs stay visible.
Find your fit