Percona Bug Bounty Program

Bug Bounty Scope

The following websites are within the scope of the program:

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

General Requirements:

Percona reserves all legal rights in event of non compliance with the following General requirements and Testing requirements.

- You may test only against an account for which you are the owner.
- Account holders wishing to authorize a third party agent must first request authorization for testing from Percona and obtain this in writing prior to any testing taking place.

Reporting:

Reports should be sent to security {at} percona.com (replacing {at} with @ and removing the spaces);
we'll work with you to ensure we fully understand the scope of the issue reported and that it is addressed in a timely manner.

PLease see requirements at https://www.percona.com/security

Testing Requirements:

Prohibited testing list:

Any tests which could lead to potential interruption of service such as DDoS or DoS attacks.
Fuzzing without prior authorization from Percona.

Uploading/distributing malicious payloads (e.g. browser exploitation, request redirection, phishing, webshells, etc.).

Testing which would yield unauthorized access, junk mail, spam, phishing and all other unsolicited mail.

Testing from any country presently under U.S. Sanctions.

Testing which would degrade the performance, reliability and/or availability of services.

Targeting individuals (e.g. Phishing, Spear phishing, social engineering, man in the middle, malicious hid devices, etc).

Testing which targets Percona DNS names wich front third-party SaaS

Possible Awards:

ad-hoc $ reward based on level of effort and criticality of issue,
T-Shirts, Stickers, other promotional branded items.

Special Notes:

Web-scraping does not a vulnerability report make, please ensure your report is thorough.

We are not accepting reports for DMARC, jira.percona.com;

Other Submissions Handling