🛡️ Ourscolrio Bug Bounty Program

🛡️ Help make Ourscolrio safer — earn recognition, not rewards.

At Ourscolrio, security is a top priority. We welcome the contributions of ethical hackers, cybersecurity researchers, and curious developers who help us identify vulnerabilities in our platform. While we do not offer monetary rewards, we deeply value your time and expertise — and we’ll proudly acknowledge it with an official certificate of appreciation, issued directly by our development team.

🎓 What You’ll Get

If your submission meets our criteria and leads to a confirmed fix, you will receive:

• ✅ A personalized Certificate of Acknowledgment from the Ourscolrio Developers.
• ✅ Recognition on our Wall of Fame (coming soon).
• ✅ Priority access to beta testing or future collaborations.

This is a certificate-only bounty program — perfect for students, cybersecurity learners, and those seeking to strengthen their portfolio or résumé.

🔍 What to Test

We invite you to test:

• User authentication & session management
• Access control flaws
• Data exposure vulnerabilities
• Cross-Site Scripting (XSS)
• Cross-Site Request Forgery (CSRF)
• API misconfigurations or improper data handling

❌ Out of Scope

To keep our program efficient, the following are not eligible:

• UI/UX issues or spelling errors
• Rate limiting or brute-force protection
• Clickjacking (on non-sensitive pages)
• Reports from automated tools with no proof-of-concept
• Denial of Service (DoS) or social engineering attacks

📝 How to Submit

Send your report to: [email protected] or linkedin.com/in/obaidullahrion

Include:

• A detailed description of the issue
• Steps to reproduce (with screenshots or video, if possible)
• Your name (for the certificate and Wall of Fame)
• Optional: Proof-of-concept (PoC) or suggested mitigation

We aim to respond within 5 business days. If the report is valid and within scope, we’ll notify you once it’s confirmed and patched — and send your certificate shortly after.

👨‍💻 Rules of Engagement

• Do not exploit the vulnerability beyond what is necessary to prove its existence.
• Do not disrupt or harm real users, data, or infrastructure.
• Always act in good faith and within ethical boundaries.

💬 Questions?

Reach out to us at [email protected] with any queries or clarifications about the program.

🔐 Together, We Build Securely

Security is a shared responsibility. Thank you for being part of the solution and helping improve Ourscolrio for everyone.