We care tremendously about the security of our products and value working with independent security researchers.
While we have many products, the bug bounty system covers the following products:
The Glow team will decide on reward eligibility along with reward sizing.
We restrict bugs to the following categories:
For a bug to be valid, the following conditions must be met:
Rewards may be up to $250,000 and will be based on:
By submitting your report, you grant Glow all rights to validate, disclose and mitigate the vulnerability. All reward decisions are up to the discretion of the Glow team.
If you are rewarded for your reported bug, you will need to share some personally identifiable information with us for compliance purposes. We will not share this information with anyone else.
This terms and conditions may be altered at any point.
You can submit a bug by emailing firstname.lastname@example.org.