Free Bug Bounty / Responsible Disclosure Checker
Enter any website URL and get a plain-English Bug Bounty Score — 12 automated checks for a findable disclosure link, a security.txt at the standard path, a security contact for reports, explained reporting steps, a stated scope, safe-harbor language, a stated response timeline, researcher acknowledgment, stated reward terms, no login wall, and no placeholder copy. Heuristics are stated as heuristics throughout. This is markup analysis of the public disclosure destination — not a penetration test and not legal advice.
Privacy: we fetch the URL you enter to run the checks, but we never store it. The only things recorded are an anonymous pageview and, on a scored result, an anonymous "grader run" for our own stats. Public websites only.
What the checker checks
Can researchers find the program?
A disclosure link on the homepage, a destination that resolves, a security.txt at the standard path, and a security contact for reports.
Does the program have the goods?
Explained reporting steps, a stated scope, safe-harbor language, a stated response timeline, and researcher acknowledgment.
Does the program read finished?
Stated reward terms, no login wall on the disclosure page, and no placeholder copy.