Participate in the Borderless Bug Bounty Program

The program requirements include the following:

‍

1. Research must be done on the Test environment: app.borderless.ninja
   
   1. Testing on the production site (app.hireborderless.com) will only be allowed if it is testing configuration specific to that environment.
   2. Fake resources (users, contracts, legal entities) should NOT be created in production for the purposes of testing. Researchers may create one real user account, which will be used to pay them (see below), and one legal entity, for themselves.
2. No proprietary data for other customers must be accessed from the production environment: app.hireborderless.com
3. No damage must be done to production data.
4. No causing downtime to the production site is allowed.
5. No harm to Borderless, its business, its customers, or its partners is allowed.
6. Reports must not be disclosed to others until Borderless has had 12 months to complete remediation in all systems.
7. The incident reports must not be used to tarnish Borderless’ public reputation.
8. All reported bugs must be reproducible on an up-to-date device assuming the customer follows best practices for that device,