Every Bug Hasa Price on Its Head
The bounty board for serious security researchers. Post vulnerabilities, claim rewards, build your reputation. No middlemen, no delays.
Critical authentication bypass in OAuth 2.0 token refresh flow. Affects all endpoints behind /api/v3/admin.
Open ContractsActive Bounties
Every vulnerability posted is verified, scoped, and funded before it hits the board. Hunters get paid within 48 hours of accepted submission. No haggling, no fine print.
Remote Code Execution via Malformed WebSocket Handshake
A specially crafted WebSocket upgrade request can trigger arbitrary command execution on the application server. Affects the real-time collaboration engine in production. Full PoC required with remediation guidance.
IDOR in Organization Billing API
Enumerable invoice endpoints expose cross-tenant financial data through sequential ID patterns.
Stored XSS in Markdown Preview
User-controlled markdown in project descriptions is rendered without proper sanitization in the team dashboard.
Stake Your Claim
Companies post verified bounties with pre-funded escrow. Every dollar is locked before it hits the board.
Hunt the Vulnerability
Researchers pick their targets. Each bounty includes scope definitions, test credentials, and safe harbor agreements baked in.
Submit Your Proof
File your report with full reproduction steps, impact analysis, and remediation advice. Our triage team reviews within 24 hours.
Collect the Bounty
Accepted reports trigger immediate payout from escrow. Wire, crypto, or platform credit.
We found three critical vulnerabilities in our payment stack within the first week. Deadlock paid out $87,000 to the researchers before our internal team even finished their coffee.
“I left HackerOne after six months of pending payouts. First bounty on Deadlock, paid in 19 hours. This is how it should have always worked.”
“Our previous bug bounty program attracted noise. Deadlock's escrow model means only serious researchers engage. We went from 200 junk reports a month to 12 actionable findings that actually made our platform safer. The ROI is incomparable.”
“Made $140K last year hunting exclusively on Deadlock. The scope docs are clear, triage is fast, and there's none of that "informative, won't fix" nonsense.”
Bounty Rewards
Choose your program tier. All plans include escrow-backed payouts, safe harbor agreements, and dedicated triage support.
- Unlimited bounty submissions
- 48-hour triage guarantee
- Public hunter profile
- Wire & crypto payouts
- Hall of Fame listing
- Up to 10 active bounties
- Managed triage team
- Pre-funded escrow wallet
- Private scope & safe harbor
- Vulnerability dashboard
- Slack & Jira integrations
- Priority hunter matching
- Unlimited active bounties
- Dedicated triage lead
- Custom SLA agreements
- Compliance reporting
- Pentest coordination
- SOC 2 artifact export