CROWDSOURCED SECURITY, ON PRATIMĀNA'S STANDARD

Every vulnerability,
measured before it's paid.

Pratimāna Bounty connects your programs to a vetted community of researchers — with the same rigor, triage discipline, and continuous baseline as the rest of Pratimāna.

The audiences

Built for both sides of the report.

A program that's easy to run and worth researching — that's the whole design brief.

FOR COMPANIES

Run programs that don't drown your team

Launch a private or public program in days, not quarters — with triage, deduplication, and SLA tracking built in.

  • Built-in triage tools — validate reports before they hit your queue
  • Private, invite-only or fully public programs
  • SLA dashboards for first response and time-to-resolution
  • Direct integration with your ticketing and CI pipeline
Launch a program
FOR RESEARCHERS

Get paid for what you find, fast

Clear scope, transparent bounty tables, and payouts that don't wait on a quarterly finance cycle.

  • Public bounty ranges — no guessing what a finding is worth
  • Reputation and points that carry across every program
  • Fast payouts once a finding is triaged and confirmed
  • Leaderboards, badges, and invite-only program access as you rank up
Create a researcher profile
How it works

Submit. Triage. Resolve.

The same three-step standard Pratimāna runs everywhere else — applied to every report that comes through the platform.

01 — SUBMIT

Researcher reports a finding

A structured report against a published scope — asset, severity, reproduction steps, and impact, all in one format.

02 — TRIAGE

The program validates it

The program's triage team reproduces and rates the finding before it ever reaches engineering — no noise, no duplicates.

03 — RESOLVE

Fix, pay, and re-test

You fix on your timeline, we re-test to confirm, and the researcher gets paid the moment it's closed out.

Program directory

Live programs, open scope.

A sample of what's currently running on the platform — public programs anyone can research, private ones by invite.

Program
Type
Bounty range
Response
OL
abc Logistics
Web, API, mobile
Public
$100 – $8,000
4.1h median
VH
abc Health
Patient portal, API
Private
$250 – $15,000
3.6h median
AM
abc Manufacturing
Corporate network, IoT
Public
$50 – $5,000
8.4h median
KA
abc Air
Booking platform, mobile app
Private
$200 – $12,000
5.0h median
Inside the platform

Reads like an instrument panel, not a ticket queue.

Researchers track rank and payouts; companies track SLA and open findings — same console, two views.

  report.pratimana.com — top researchers
01
pentester_1412 reports · 98.6% accuracy
18,420 pts
02
pentester_2388 reports · 97.1% accuracy
17,905 pts
03
pentester_3301 reports · 99.0% accuracy
16,220 pts
04
pentester_4276 reports · 96.4% accuracy
14,860 pts
05
pentester_5259 reports · 95.8% accuracy
13,510 pts
  report.pratimana.com — live activity
14:02
Paid — $3,200 to pentester_1, abc Logistics (High)
13:47
Triaging — report #8841, abc Health (Critical)
13:31
Submitted — pentester_3, abc Air (Medium)
13:12
Resolved — report #8798, re-test confirmed fixed
12:58
Escalated — report #8790 flagged Critical, engineering paged
Rewards

Payouts scale with severity, not guesswork.

Every program publishes its own range — this is a representative table so you know what to expect before you start hunting.

Severity
Typical payout
Response target
Critical
$2,500 – $15,000
< 4 hours
High
$800 – $4,000
< 12 hours
Medium
$250 – $1,000
< 24 hours
Low
$50 – $250
< 48 hours

Bring your program to the standard.

Whether you're launching a program or hunting for one — get set up in a week, not a quarter.