Coordinated and Responsible Vulnerability Disclosure Free Bug Bounty Program 421,465 coordinated disclosures
228,781 fixed vulnerabilities
571 bug bounties with 1112 websites
11,414 researchers, 932 honor badges

TradingView Bug Bounty Program

TradingView runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of TradingView

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between TradingView and researchers.

Bug bounty program allow all submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

*.tradingview.com

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

Our rules https://www.tradingview.com/bounty/

Testing Requirements:

You should not use automated tools and scanners to find vulnerabilities. We'll not review scanner-generated reports.
You should not perform any attack that could damage our services, our or client data. DDoS, spam, brute force attacks are not permitted.
You should not involve other users without their explicit consent.
You should not perform or try to perform non-technical attacks such as social engineering, phishing or physical attacks against our employees, users or infrastructure.

Possible Awards:

Your reward will depend on the discovered vulnerability as well as it’s security impact.

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

 
Response Time  How quickly researchers get responses to their submissions.
Remediation Time  How quickly reported submissions are fixed.
Cooperation and Respect  How fairly and respectfully researchers are being treated.

Researcher's comments

No comments so far.

  Latest Patched

 23.08.2019 customs.gov.ng
 23.08.2019 canon.co.uk
 23.08.2019 cvent.com
 23.08.2019 mejorenvo.org
 22.08.2019 cybrary.it
 22.08.2019 ohio.edu
 22.08.2019 vatgia.com
 22.08.2019 akc.org
 22.08.2019 scielo.org
 22.08.2019 gamer-info.com

  Latest Blog Posts

19.08.2019 by ismailtsdln
IBM - Cross site Scripting [XSS]
15.08.2019 by thevivekkryadav
HOW I WAS BYPASSED CLOUDFLARE WAF
13.08.2019 by Renzi25031469
XSSCon - XSS Tool @Kitploit
13.08.2019 by Cur1S3
I Found a multiple xss on https://clickmeeting.com
13.08.2019 by ZIKADS
xss at anghami.com

  Recent Recommendations

    23 August, 2019
     MarkJasonRAng1:
tnx for the help
    22 August, 2019
     trash803:
Helpfully reported site vulnerability. Thanks.
    22 August, 2019
     SelectLine_GmbH:
Thanks for pointing out a vulnerability on one of our websites. And for the professional support.
    22 August, 2019
     Untanux:
Thank you for the report! We appreciate it.
    21 August, 2019
     aaccomazzi:
One more XSS bug discovered and patched thanks to Gh05tPT. Much appreciated!