FIS

  • Points – $20,000 per vulnerability
  • Safe harbor

Updates to program rules

Happy Friday Eve!

After careful consideration and with input from you, the researcher, we are refining the Multiple Vulnerabilities Rule. In cases where multiple vulnerabilities arise from a single underlying issue against the same asset, we will individually review each finding, and each will remain eligible for payout.

Furthermore, targets that achieve $50,000.00 in rewards within a 30-day period are still subject to scope removal for internal evaluation. However, any valid reports submitted before scope removal will still be eligible for payout as well.

We deeply appreciate your ongoing efforts and responsible disclosure in ensuring the security of FIS and our clients.

As always, please be sure to review the program brief in detail. If you have any questions, please visit Bugcrowd Support and create a support ticket.

Happy Hunting!

Emily and the FIS Team.