|
Bug Bounty
Bringing Caribbean businesses and security researchers together to uncover weaknesses, share knowledge and reward responsible discovery.
A weakness is easier to fix when someone helps you find it. We create a private space for businesses and Caribbean researchers to work together.
Invite researchers to look for weaknesses in agreed systems. Get verified reports and practical help to address what they find.
Explore business programmes ↗Help protect the region with your knowledge. Join a private programme, report responsibly and earn rewards for eligible findings.
Explore researcher opportunities ↗Clear scope, careful reporting and human support keep everyone working towards the same outcome.
Businesses define the systems, testing rules and reward terms with G5.
Verified researchers receive private access to approved programme details.
Researchers submit evidence. Reports are reviewed to confirm the issue and its impact.
Businesses receive guidance. Eligible findings earn rewards under the programme terms.
Only test systems explicitly authorised in your programme. Keep findings confidential and follow its disclosure rules.
Each programme has its own scope. Researchers can bring different skills to the weaknesses that matter to your business.
Sensitive information that has been unintentionally made accessible.
Settings that leave systems or services open to misuse.
Security issues affecting approved websites and applications.
Overlooked systems and information visible online.
Problems with the way encryption has been implemented.
Evidence that may indicate a system has already been affected.
Caribbean researchers bring local understanding and a broad range of experience. Whether based in the region or overseas, they can help businesses here build better protection.
Find your place in the community ↗Explore local pages for Jamaica, Trinidad and Tobago, Barbados, Guyana and the rest of our Caribbean coverage.
Explore Caribbean coverage ↗Approved target details are shared with verified researchers invited to the programme, rather than published for everyone.
Caribbean professionals, freelancers, students and enthusiasts can express interest. Participation depends on verification and the requirements of each programme.
Rewards depend on the programme, the validity of the report and its agreed terms. Payment options and eligibility are confirmed before participation. There is no guaranteed payment for every report.
Support with programme design, report verification, remediation guidance and researcher rewards. The scope and pricing are agreed for your organisation.
No. Applying is not authorisation to test. Wait for acceptance and written confirmation of the assets and methods permitted by your programme.
Bug Bounty Caribbean is a service delivered by G5 Cyber Security (USA), Inc.