Every Program. Every Scale.
From startup MVP to enterprise platform — BugRakshak offers managed, private, and public bug bounty programs with expert triage, structured reporting, and direct payouts.
Program Types
Choose Your Program Model
Start small with a private program and scale to public as your security posture matures.
Private Program
Invite only a select group of vetted researchers to test your product before going public. Control the pace, scope, and researcher count. Perfect for early-stage companies.
- Up to 25 invited researchers
- Full scope control
- NDA-protected findings
- Priority triage support
- 48-hour activation
Public Program
Open your program to thousands of vetted researchers worldwide. Maximum coverage, maximum findings. Ideal for mature products with established security teams.
- Unlimited researcher access
- Continuous testing 24/7
- Leaderboard & recognition
- Full triage + dedup service
- Public Hall of Fame
Managed Program
A fully managed end-to-end service. BugRakshak handles scope design, researcher recruitment, triage, remediation tracking, and compliance reporting on your behalf.
- Dedicated security manager
- Custom SLA agreements
- Compliance reporting (SOC 2, ISO)
- Researcher retainer available
- Executive dashboard + briefings
Triage Workflow
How We Process Every Report
Our 5-step triage process ensures only verified, high-signal vulnerabilities reach your engineering team.
Report Submitted
Researcher submits vulnerability with PoC, reproduction steps, and CVSS estimate.
Initial Review
BugRakshak triage team reviews within 4 hours. Duplicate detection runs automatically.
Validation
Security analyst reproduces the vulnerability and assigns official CVSS severity.
Client Notification
You receive a clean, actionable report with fix recommendations and business impact.
Reward Paid
Upon your approval, researcher is paid within 7 days via UPI, bank transfer, or crypto.
Report Quality
Every Report Includes
BugRakshak standardizes all researcher submissions into structured, executive-quality security reports.
Reward Ranges
Transparent Bounty Guidelines
Our recommended reward ranges ensure researchers are motivated and programs remain sustainable.
| Severity | Reward Range | Triage SLA | Payout SLA |
|---|---|---|---|
| Critical | ₹50k – ₹2L | 4 hours | 72 hours |
| High | ₹20k – ₹75k | 24 hours | 5 days |
| Medium | ₹5k – ₹25k | 48 hours | 7 days |
| Low | ₹1k – ₹8k | 72 hours | 10 days |
| Info | ₹500 – ₹2.5k | 5 days | 14 days |
Ready to Launch Your Program?
Set up your bug bounty program in 48 hours. Our team will help you every step of the way.