SevHunt

An Employee Only Bug Bounty

With SevHunt's Internal Bug Bounty platform, your coworkers act as security researchers, reporting security issues for points that can be exchanged for exclusive rewards.

Trust us, your employees know about some wild stuff - SevHunt gives them a place to speak up, collaborate, and become honorary members of your security team.

Already have a bug bounty program?

Think of SevHunt as a new vulnerability source that massively expands your existing scope. Instead of trying to find gold in a flood of low-signal reports, you'll be working with your coworkers to identify and fix real issues with internal systems and access.

Here be dragons

Internal Bug Bounties enable you to spot issues beyond your edge. Let your employees report problems like MFA-less shared logins, forgotten vendors, over permissioned users, and unlocked doors.

Stock up

Create and manage a store that your team can spend points in for merch, gear, or other benefits. The bigger the prize, the better the hunt.

It takes a village

The whole company can join the hunt for bugs! Invite everyone from Design to Maintenance, don't let Engineering have all the fun.

High scores

Recognize top awarded hunters in a leaderboard and let healthy competition guide your team to great findings.

Pretty darn private

Bug reports, uploads, and communications are encrypted client-side. Key rotation is supported via forward encryption, ensuring that new employees can't access old data.

Triage is typing...

Collaborate in real time on reports, both in triage and when drafting new submissions with your favorite internal hacking squad.