Your scope. Your rules.
Agree which assets can be tested, the methods permitted and how researchers should report findings.
FOR CARIBBEAN BUSINESSES
A fresh set of eyes.
A stronger business.
Give security researchers a clear, authorised route to help protect your organisation. G5 supports programme design, report verification and practical remediation guidance.
Discuss your programme ↗
A CLEAR WAY FORWARD
Protection with purpose.
Evidence you can act on
Receive reviewed findings with enough detail to understand the weakness and plan a response.
A programme that fits
Small, medium and large organisations can discuss a programme with pricing based on their requirements.
Built around your organisation.
Our programmes can support commercial organisations, public bodies and charities. We will discuss your assets, internal resources and reward budget before recommending an approach. All business packages use custom pricing.
Speak to the team ↗
FROM A REPORTED ISSUE TO A FAIR REWARD
Validate the risk.
Reward the research.
G5 triages reported findings before a reward is determined. We check the evidence, assess the real impact on your business and apply your programme’s agreed reward rules.
Check eligibility
We confirm that the affected asset and testing method are in scope, check for duplicate or previously known issues, and review the report for sufficient evidence.
Confirm the finding
We review reproduction steps and, where authorised and safe, reproduce the issue. We ask the researcher for clarification when needed and distinguish a confirmed weakness from an unsupported claim.
Understand the risk
We consider exploitability, access needed, affected information and services, existing safeguards and likely business impact to determine the finding’s severity.
Determine the payout
We map the validated finding to the agreed reward criteria and budget, confirm approval with the business, and communicate the outcome and payment arrangements to the researcher.
✓
Clear decisions, supported by evidence.
The business receives the validated finding, risk rating and recommended action. The researcher receives feedback on eligibility and the reward decision. Invalid, duplicate or out-of-scope reports may not qualify for a reward, depending on the programme terms.
JOIN THE PRIVATE PROGRAMME
Apply for a private business programme.
Tell us about your organisation and the systems you would like to include. We will discuss your scope, reward budget and programme requirements before onboarding.
What happens next?
Our team reviews your enquiry and contacts you to discuss suitability and the next steps. Programme scope, costs and reward terms are agreed before launch.
Please do not include identity documents, passwords or sensitive vulnerability details in this form.
DISCUSS YOUR BUSINESS PROGRAMME
Request a quotation.
Tell us about your organisation and the private bug bounty programme you would like to set up. Please do not submit sensitive vulnerability evidence.
Open the quotation form directly ↗