How to Earn Your Way Onto a Private Bounty Program

We are consistently asked “How Do I Earn Private Program Invitations?” Since 2015, we have used performance and activity markers to choose program participants. The criteria include Quality, Impact, Activity, (+1 to Skills), and Trust. For a private program invitation, researchers must meet the following guidelines: Consistently submit valid findings (at least 50% in the last 90 days) with an average submission priority score between 1.0 and 3.99; actively submit bugs in the last 90 days; demonstrate specific skills; and maintain trust by staying within the scope of bounty briefs. To maximize potential, researchers should carefully review each bounty brief, validate findings before submitting, and consider submitting critical issues to level up their skills.