KINOPIO

Because Kinopio is an extremely small, non-VC funded organic business right now that is still finding sustainability, so the bug bounties payouts to white hat reporters I can offer at this time are relatively limited.

The vast majority of reports I receive (>95%) are the result of automated LLM scans from non-users so the effort floor appears to be dramatically lower than it used to be. In rare cases, these still may result in a novel and useful report which may be awarded as follows:

• $20 Critical, high-urgency, novel report.
• $5 Non-critical, low-urgency, but still novel report.
• $0 As designed, or an already known and considered issue. If I’m busy with feedback from users or messages from customers, I may not have the time to reply to these reports (apologies in advance).

Please keep in mind that which level a report falls into is judged solely at my discretion, but I’ll try and keep things as transparent as possible.

I only do payouts to bank accounts via wise, or paypal (no crypto).

Instead of cash, successful reporters can choose to apply the 50% academic discount to their Kinopio account as their reward.

You can report bugs to security@kinopio.club