Skip to main content
Bug Bounty Program

Find a vulnerability, earn a reward

AftPak rewards responsible disclosure of security vulnerabilities in our own systems. Every report is triaged by our security team, and confirmed findings are rewarded based on severity.

Submissions are encrypted in transit

Reward Tiers

  • Critical$2,000 – $10,000
  • High$750 – $2,000
  • Medium$150 – $750
  • Low$25 – $150

Scope

  • In scope: aftpak.com and its subdomains, the Client Portal, and public API endpoints
  • Out of scope: social engineering, physical attacks, and denial-of-service testing
  • Full rules of engagement are in our Vulnerability Disclosure Policy