Infosec Institute

Open Bug Bounty mentioned in the
Top 6 Bug Bounty programs of
2022 by the InfoSec Institute

The Hacker News

Open Bug Bounty named among the
Top 5 Bug Bounty programs of 2021
by The Hacker News

Platform update: please use our new authentication mechanism to securely use the Open Bug Bounty Platform.
For security researchers
Report a Vulnerability
Submit, help fixing, get kudos.
For website owners
Start a Bug Bounty
Run your bounty program for free.
1,600,552 coordinated disclosures
1,250,083 fixed vulnerabilities
1,861 bug bounty programs, 3,729 websites
40,034 researchers, 1,612 honor badges

Al Imran Technical Services Bug Bounty Program

Al Imran Technical Services runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of Al Imran Technical Services

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between Al Imran Technical Services and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:


Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

- Always include a working proof-of-concept (PoC) with a CVSS score that indicates the severity and impact of the issue.
- Attach screenshots that illustrate the steps and outcomes of your PoC. Screenshots can help us confirm and understand the issue more easily and quickly.
- Provide brief remediation guidelines that propose how to fix or mitigate the issue.

Testing Requirements:

- Do not test on any domains or subdomains other than the ones we have explicitly authorized for testing.
- Do not test on any live or production systems or data.
- Do not test for any vulnerabilities that could result in denial-of-service, such as SYN floods, HTTP floods, or buffer overflows.
- Do not test for any vulnerabilities that could involve accessing, modifying, or deleting any data that does not belong to you, such as customer information, user accounts, or payment details.
- Do not test for any vulnerabilities that could require social engineering, such as phishing, vishing, or impersonation.

Possible Awards:

- A personalized thank-you letter from our CEO, acknowledging your contribution and expressing our appreciation.
- A certificate of recognition, signed by our security team, validating your skills and expertise.
- A free subscription to our premium services, giving you access to exclusive features and benefits for a limited time.
- A shout-out on our social media platforms, highlighting your achievement and promoting your profile to our followers and customers.
- An invitation to join our security hall of fame

Special Notes:

- You need to be the first person to report the vulnerability to us. We will not reward duplicate or previously known issues.
- You need to follow our vulnerability disclosure program guidelines and testing requirements. We will not reward any reports that violate our policies or cause any harm or disruption to our systems, customers, or users.
- You need to provide us with a valid email address and a preferred method of contact. We will use this information to communicate with you and deliver your awards.
- You need to agree to our terms and conditions and sign a non-disclosure agreement. We will not reward any reports that are disclosed to anyone else without our permission or consent.

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

Response Time  Information How quickly researchers get responses to their submissions.
Remediation Time  Information How quickly reported submissions are fixed.
Cooperation and Respect  Information How fairly and respectfully researchers are being treated.

Researcher's comments

No comments so far.

  Latest Patched


  Latest Blog Posts

21.09.2023 by Open Bug Bounty
Top 10 Ways to Get Started with Bug Bounty Hunting
21.09.2023 by Open Bug Bounty
Top 10 Bug Bounty Resources
18.09.2023 by Open Bug Bounty
What Is OpenBugBounty and How It Works
18.09.2023 by Open Bug Bounty
Coordinated Vulnerability Disclosure
20.07.2023 by W4H33D_
Learn Command Injection Vulnerabilities

  Recent Recommendations

    22 September, 2023
Thank you for pointing out the vulnerability. Your report was very helpful!
    6 September, 2023
Much appreciated the notice from Dipu1a about our website. He provided clear guidelines to resolve and I'm looking forward to working with him in the future.
    5 September, 2023
Thank you very much for reporting the vulnerability. Good luck with your everything!!!
    4 September, 2023
Your report was very helpful! Thank you very much !
    25 August, 2023
Thank you for your help in ensuring the security of our domain and its visitors! Your contributions are invaluable.