ooPoll Mobile App Bug Bounty Program

Notifications:

[email protected]

General Requirements:

ooPoll Mobile App Bug Bounty Program

Introduction:
The ooPoll Mobile App Bug Bounty Program is designed to encourage the responsible reporting of security vulnerabilities in the ooPoll mobile applications for Android and iOS.

Scope:

In-scope targets include the ooPoll mobile applications on Android and iOS platforms.

Vulnerabilities in scope include but are not limited to, Cross-Site Scripting (XSS), Open Redirect, Cross-Site Request Forgery (CSRF), and Improper Access Control specific to the mobile environment.
Out of Scope:

Vulnerabilities in third-party applications or services integrated with the ooPoll mobile app.
User interface bugs or typographical errors without a security impact.
Denial of Service attacks against the app or its infrastructure.

Testing Requirements:

Eligibility and Rules:

Participants must not disrupt any service or data and must not violate any law.
Employees and affiliates of ooPoll are ineligible.
Issues must be reported directly and privately to ooPoll.
Public disclosure before ooPoll's acknowledgment will disqualify the submission.
Submission Guidelines:

Submissions must specify the platform (Android/iOS) and app version.
Detailed steps should be provided to reproduce the issue.
Include screenshots, logs, or a video for clarity, if possible.

Legal:

By participating, researchers acknowledge they are responsible for complying with all applicable laws and regulations.
ooPoll can decide the submission reward and deem what constitutes a qualifying vulnerability.

Possible Awards:

Bug Bounty Rewards with ooPoints:

At ooPoll, we value the efforts of security researchers and understand the importance of rewarding their contributions. As a startup, we're leveraging our platform's unique offerings for the rewards.

Here's how it works:

Critical Vulnerabilities: We're open to negotiating a fair cash reward.
High Severity: 90,000 ooPoints
Medium Severity: 45,000 ooPoints
Low Severity: 18,000 ooPoints

Why ooPoints?

ooPoints are our in-app currency, which can be redeemed for a variety of rewards in our ooMall. Here, you can exchange points for gift cards, coupons, and exclusive deals. By contributing to our platform's security, you're not just helping us; you're earning points to spend on rewards you'll love. Remember, we're all about building a secure and rewarding community at ooPoll. Your expertise helps us achieve that, and we’re excited to thank you with rewards that matter.

Special Notes:

Researchers' participation in this program is an agreement to these terms. ooPoll is dedicated to collaborating with the security community to identify and remediate vulnerabilities in our mobile applications.