Severity
Bug Bounty Severity Chart
Priority & severity definitions based on impact and exploitability.
| Priority | Severity | Description | Example Vulnerabilities |
|---|---|---|---|
| P1 | Critical | Complete system compromise | RCE, SQL Injection (auth bypass), Account Takeover (no auth), SSRF → internal access |
| P2 | High | Significant impact, limited constraints | Stored XSS, IDOR (sensitive data), Privilege Escalation |
| P3 | Medium | Moderate risk, user interaction needed | Reflected XSS, CSRF (non-critical), partial info disclosure |
| P4 | Low | Minor impact, hard to exploit | Clickjacking, rate limit issues, verbose errors |
| P5 | Informational | No real security impact | Missing headers, best practice issues |
Bounty amounts determined by severity + tier scope
Rewards
Bounty Payment Chart
Three program tiers — from Standard to VIP — each with tailored rewards. Higher tier, higher bounties.
Tier 1
🔵 Standard Program
$100 – $500
P1 · Critical$500
P2 · High$400
P3 · Medium$300
P4 · Low$200
P5 · InformationalHall of Fame
Hall of Fame recognition for all validated P5 submissions. Focus: core web assets.
Tier 2
⚪ Silver Program
$250 – $2,000
P1 · Critical$2,000
P2 · High$1,500
P3 · Medium$800
P4 · Low$400
P5 · Informational$50
Expanded scope — API, cloud infrastructure, higher reward caps.
Tier 3
🟠 Elite VIP
$500 – $5,000
P1 · Critical$5,000
P2 · High$4,000
P3 · Medium$2,500
P4 · Low$800
P5 · Informational$100
Maximum impact targets: zero-day class, blockchain infra, VIP researcher support.
📌 Program Notes
All bounties are paid in USD / crypto (USDC) upon validation. Duplicate reports follow standard disclosure policy. Tier selection depends on scope & criticality of target. The Ezekiel team reserves the right to adjust rewards based on exploit complexity. Hall of Fame recognition for all validated P5 submissions in Tier 1.
⚡ Fast payouts via crypto / wire transfer
📆 30-day average payment time
🎫 Private program invitations by request
🔒 Private Researcher Hub
Submit vulnerabilities via encrypted channel or join our private Telegram group for real-time discussion & submission guidelines.
🔒 PGP Available
📋 Disclosure Policy
🏆 Hall of Fame
📧 bbp@ezekielsec.com — Submit encrypted reports (PGP fingerprint on request)
✉️ For secure communication, use our official channel.
✉️ For secure communication, use our official channel.
🛡️ Responsible disclosure only. Never test on production without explicit authorization.
⚡ Ezekiel//sec Private BBP — v2.0