SecurityBoat Researchers

Hunt where your work gets paid, not filed.

Join SecurityBoat's vetted researcher community and hunt on real programs through TriNetra — where every submission gets a fair triage, every accepted finding earns severity-scored reputation, and every payout runs on rails, not promises.

Apply to hunt View public programs

TriNetra bug bounty programs list with live status pills — The program console · Illustrative sanitized demo data — not customer results.

Why hunt here

Built by people who submit reports, not just read them.

TriNetra's Bug Bounty module was built around a simple idea: the researcher experience is the program quality. Sloppy triage, silent rejections, and payout limbo drive good hunters away — so we engineered them out.

Fair, fast triage

Every submission enters a transparent state machine — triage → accepted → fix-in-progress → ready-for-retest → resolved — with a human-readable ID and CVSS v4.0 scoring you can see. No black holes.

Payouts on rails

Rewards resolve automatically from each program's per-severity tiers, then move through approval, verified bank transfer, and tracking — with an auto-generated invoice at the end. Your bank details stay encrypted; your payout dashboard shows exactly where every rupee or dollar is.

Reputation that compounds

Accepted findings earn severity-weighted points that build your rank on live leaderboards and your public profile — a portable record of real, validated work.

A profile that protects you

PII-safe public profiles show your display name, headline, skills, and certifications — with identity-verification and signed-agreement trust badges — and nothing you didn't choose to share.

How it works

Five steps from application to payout.

01
Apply
Tell us who you are and what you hunt. One short form, and a human on the SecurityBoat team reviews every application.
02
Get vetted
We verify identity and review your track record. Sensitive private programs may ask for additional ID or background verification — you'll always know before you opt in.
03
Get invited
Once vetted, invitations open up: private and public bug bounty programs matched to your skills, plus paid PTaaS engagements you can bid on through TriNetra's researcher marketplace.
04
Submit
Report findings straight into the platform: steps to reproduce, evidence, severity. Triage is transparent — duplicates and severity calls are grounded in program history and confirmed by humans.
05
Get paid
Accepted findings resolve their reward from the program's severity tiers and flow through the payout pipeline automatically — approval, verified transfer, tracking, invoice. Reputation points land on the leaderboard at the same time.

The work

Programs, engagements, and disclosure — one platform.

Bug bounty programs

Public, private (invite-only), and points-only VDPs, each scoped to a real asset inventory with rules of engagement and safe-harbor policy published up front. Per-program chat and an announcements feed keep you close to the program team.

Pentest engagements

Vetted researchers can bid on scoped PTaaS engagements across 13 asset classes — web, mobile, API, cloud, network, IoT, and more — and join teams as lead or researcher, with real-time client collaboration built in.

Coordinated disclosure

When a program allows it, resolved findings can go through the coordinated-disclosure workflow and land on public disclosure pages and the hacktivity feed — public proof of your work, on your profile.

What you earn

Real payouts, not points-only theater.

Bug Bounty programs pay per-severity reward tiers in INR or USD once a submission clears validation. VDP programs earn reputation on the same platform — points that build the rank programs recognize publicly.

TriNetra bug bounty reward tiers by severity, P1 through P5 — Real per-severity reward tiers · Illustrative sanitized demo data — not customer results.

Community

The hunt is here. The community is bigger.

Meetups, city chapters, talks, CTFs, and the people behind the handles — SecurityBoat's researcher community lives independently at securityboat.community.

Explore the community →

Where to go next

See the marketplace mechanics, in detail.

Opportunities

A blind-bid marketplace for pentest work — sanitized scope first, the client's identity revealed only once your bid is accepted.

Leaderboard

Ranked by what you find, not how often you show up — see how severity-weighted ranking is actually computed.

Apply to hunt

Ready when you are.

One form. A human on the SecurityBoat team reviews every application by hand.

Field	Required?	Notes
Full name	Required	Never shown publicly — profiles use your display name.
Email	Required	Where your decision lands.
Username	Required	Your public handle on programs and leaderboards.
LinkedIn	Optional	Link your professional profile if you'd like.
Years of experience	Required	From under a year to 5+.
Skills	Required (pick at least one)	Web · API · Mobile · Cloud · Network & Infrastructure · AI/LLM · Code Review · Hardware/IoT.

Start your application

We use this information only to review your application and manage your researcher account. Public profiles are PII-safe by design.

Start where the programs are.

Public programs are open now — no application needed to look.

View public programs Apply to hunt

Or explore Opportunities and the Leaderboard.