Sentinel

Program updates

Every scope change, reward change and policy revision, newest first. Check here before you start testing an old target.

  1. HS HUSTack

    Program published

    Scope is the HUSTack online judge at hustack.soict.ai. Primary targets are sandbox escape and submission isolation.

  2. GH HUST Giving

    Program published under written authorisation

    Scope is the giving portal only. Reports go to platform triage at admin@bugbounty-program.com, which validates and forwards them to the university.

  3. AA Arbor AI

    Write-capable connectors start at High

    A tool that can change something now scores from the High band up, whatever the injection path looked like. Read-only tool misuse stays where it was.

  4. DG Driftline Games

    Submissions paused until Monday 2 November

    We are between testing windows while the Season 9 economy backend finishes rolling out. Reports sent during the pause are timestamped on arrival, queued, and read in order the week the window opens.

  5. IF Ironvale Foundation

    ivpkg 4.0 signature format shipped

    The old detached format is accepted until 1 December 2026 and leaves scope that day. Anything you find in the new verifier before then is the most useful thing you could send us.

  6. SM Stratamesh

    Image signing now pays at the Critical band

    Registry findings used to cap at High because the registry sat beside the platform rather than in it. It has been on the admission path since the 2024 consolidation, so the band now matches what a forged signature actually buys an attacker.

  7. WM Wayfare Mobility

    Loaner waiting list cleared

    Everyone who applied for a TCU-6 or HU-4 bench kit before August now has one in the post. The queue had run to five months after the Season of the Van talk; it is back to three weeks.

  8. VP Velo Payments

    Payout rails testable in sandbox

    Payout initiation and bank-instrument management are open at the Critical band. Every sandbox merchant now gets its own payout ledger so a failed test cannot disturb anyone else's reconciliation.

  9. MC Meridian Civic Systems

    Authorisation language re-approved by every member

    The safe harbor section was re-read and signed off by the legal department of all nineteen municipalities. A researcher now has one set of protections rather than nineteen slightly different ones.

  10. CH Cadence Health

    SMART launch sequences in scope at Critical

    Both the standalone and EHR launch flows on the gateway are testable, and sandbox client credentials are issued on request within a day. Two scoping errors were fixed during the closed phase before this opened.

  11. DG Driftline Games

    Season 9 economy rewrite hit the public test branch

    The ledger behind trading, crafting and escrow was rebuilt from nothing. It is the single highest priority target on reopening day and we have put four engineers on the reports.

  12. WM Wayfare Mobility

    Head unit build 11 opens the sandbox boundary to testing

    The new application sandbox on HU-4 build 11 is the surface we most want looked at. Escapes out of it are Critical for as long as the build is in staged rollout.

  13. SM Stratamesh

    Terraform provider brought into scope

    The provider repository is eligible at Medium. A report that arrives with a patch we can merge earns a flat 1,500 USD on top of the band.

  14. MC Meridian Civic Systems

    Resident notification service entered scope

    The service that sends permit and fare alerts is now testable at High severity. It can reach real residents, so only recipients you registered yourself are fair game.

  15. CH Cadence Health

    Prescribing gateway added to scope

    The prescribing surface is in at High with a sandbox formulary that terminates inside our network. Nothing you submit reaches a pharmacy, a directory or a real prescriber.

  16. IF Ironvale Foundation

    Anvil sandbox rewritten on a different primitive

    Build scripts are now confined with the same mechanism the registry builders use. The old confinement is gone, so old escape reports no longer apply and we would love new ones.

  17. AA Arbor AI

    Enterprise gateway in scope, sandbox escapes at the ceiling

    The per-tool policy gateway is testable at High, and an escape from the interpreter sandbox to the host now pays the full 20,000 USD. That is the single most expensive finding on this program.

  18. DG Driftline Games

    Escrow chain paid 11,400 USD

    Three steps through the escrow release path produced unlimited duplication of tradeable items. Largest single payout we have made, and the reporter found it on the test branch before a single live trade was affected.

  19. WM Wayfare Mobility

    Medium band raised to 2,200 USD

    Pairing and session-key findings were landing at the top of the old band far too often, which meant the band was wrong rather than the reports.

  20. SM Stratamesh

    Duplicate window now runs from triage

    We closed a report as a duplicate of a queue item nobody had looked at for nine days, which was our failure and not the reporter's. The window is measured from the moment the earlier report was triaged. Two closures from 2025 were reopened and paid the same week.

  21. IF Ironvale Foundation

    ivpkg has a new lead maintainer

    After six years and 2,100 commits, the founding maintainer of the package manager handed the project over and stayed on as a reviewer. The security contact address and the signing quorum are unchanged.

  22. AA Arbor AI

    Second workspace issued on request

    Cross-tenant work needed two paid workspaces, which priced out exactly the researchers we wanted. Ask and you get a second one within a day, tagged so our detection team knows what it is.

  23. VP Velo Payments

    Critical ceiling raised to 50,000 USD

    Report VP-2025-118 replayed a webhook against a reused idempotency key and credited a sandbox balance twice. The band it landed in was worth less than the bug, so the ceiling went from 30,000 to 50,000 for reports triaged on or after today.

  24. MC Meridian Civic Systems

    Membership reached nineteen

    Two more councils joined in January and their permit data finished migrating in March. Every new member inherits this policy on the day they join.

  25. DG Driftline Games

    Version 1 player services capped at Medium

    The old API keeps running for two partner integrations until June 2027. It is still in scope, it no longer pays above Medium, and the notes on it say why.

  26. CH Cadence Health

    Synthetic population rebuilt and reseeded weekly

    Sandbox tenants are reseeded every Sunday from a generated population of 40,000 patients with realistic coding and document history. No real clinical record has ever been loaded into a sandbox tenant.

  27. WM Wayfare Mobility

    Safety rule restated after a parked-vehicle test

    A researcher sent a remote climate command to a parked vehicle with a person inside it. Nobody was hurt. The rule now has no exception and we will end participation over it.

  28. VP Velo Payments

    Webhook signing v2 shipped, with credit

    The replay finding from October is fixed by a signing scheme that binds the merchant, the event identifier and the delivery attempt. The reporter is named in the release note and reviewed the design before it shipped.

  29. SM Stratamesh

    Triage is back in-house

    The firm that ran first-line triage for us since late 2023 finished in October. Same queue and same targets, but the person reading your report now works on the service you are reporting against.

  30. AA Arbor AI

    Model artifact storage opened for testing

    The signed-URL service in front of the weight store is in scope. Two access-control findings were fixed during the closed phase before this went public.

  31. IF Ironvale Foundation

    An embargo leaked, so we published early

    Details of a pending certificate parsing advisory appeared on a public mailing list four days before the release date. We published the advisory and the fix within three hours and dropped one member from the pre-notification list.

  32. DG Driftline Games

    Anti-cheat driver added to scope for privilege escalation only

    The Ridgeback kernel component is eligible for local privilege escalation findings and nothing else. Detection evasion is excluded and those reports are closed unread.

  33. WM Wayfare Mobility

    wayfare-os 3.x and the TCU-4 left scope

    The last operator finished migrating to 4.x on 29 August, and the older branch stopped receiving fixes two days later. Reports against it are closed with a pointer to this entry.

  34. MC Meridian Civic Systems

    Guidance added for researchers contacted by an agency

    A reporter working inside this policy was questioned by a municipal police department after an intrusion alert fired. We confirmed the authorisation in writing the same afternoon, and the safe harbor section now says exactly what to do when it happens again.

  35. SM Stratamesh

    Critical ceiling raised to 25,000 USD

    Cross-tenant findings had been paying out near the old 20,000 cap for two years, which meant the cap was doing the scoring. It now tops out at 25,000 for reports triaged on or after this date.

  36. CH Cadence Health

    Critical ceiling raised to 18,000 USD

    A four-step escalation from a patient account into a care team took a researcher six weeks and paid less than it cost her to find. Critical now tops out at 18,000 and the Low floor moved from 150 to 250.

  37. AA Arbor AI

    Injection reports must state attempts and successes

    After a long argument about a finding that reproduced twice in fifty tries, every non-deterministic report carries its success rate. We pay at the rate the exploit actually achieves, not at its best run, and we say so in the award note.

  38. IF Ironvale Foundation

    Hardware signing tokens, two signatures of three

    Release artifacts now need two detached signatures from three maintainers holding hardware tokens. The single key that signed everything until then was revoked the same week.

  39. DG Driftline Games

    A duplication bug reached live, and the rules changed

    A report was closed as a duplicate in error, the underlying bug shipped with Season 6, and we rolled back 41 hours of trades. The duplicate window is now measured from triage rather than submission, and every close-as-duplicate gets a second reviewer.

  40. WM Wayfare Mobility

    Report quality checklist rewritten around bench topology

    Half of the reproduction delays last year came from not knowing how a rig was wired. A photograph or a sketch of the harness is now the first thing we ask for.

  41. VP Velo Payments

    Script integrity on the payment page is a named target

    PCI DSS 4.0 requirements 6.4.3 and 11.6.1 take effect today. Injection of third-party script into the hosted payment page is explicitly Critical from now on, and the token vault moved to report-only at the same time because it is assessed under the PCI programme rather than here.

  42. MC Meridian Civic Systems

    Patch window moved to the second Tuesday

    An Authority-wide change window removed most of the scheduling delay between a triaged report and a deployed fix. Median resolution fell from 71 days to 38.

  43. AA Arbor AI

    Injection taxonomy published

    Sixty-one percent of everything we closed in 2024 was a refusal bypass with no boundary crossed. The three questions below are now published so nobody spends a weekend on a report we close in a minute.

  44. DG Driftline Games

    Economy scope frozen for the Season 5 launch

    Market and trading endpoints were closed to testing for three weeks while the season landed. Everything else stayed open and the freeze ended on the day we said it would.

  45. IF Ironvale Foundation

    Distributor pre-notification list opened

    Packagers who ship our libraries can apply for embargoed advance notice. Two maintainers review each application and every member is named on the list page.

  46. DG Driftline Games

    Critical band raised to 12,000 USD

    Economy and matchmaking findings were repeatedly landing at the ceiling, which meant the ceiling was wrong. The band moved up and the Medium band moved with it.

  47. AA Arbor AI

    Jailbreaks moved out of scope in writing

    Prompts that only change what the model says are not vulnerabilities and never were, but the policy had not said it plainly. It says it plainly now, and the queue halved in a fortnight.

  48. CH Cadence Health

    The HL7 v2 listener left scope

    The last two practices exchanging over the legacy listener moved to FHIR in September and the listener was retired on the 15th. Messaging bridge findings now belong on the Direct endpoint, which caps at Medium.

  49. MC Meridian Civic Systems

    Inspections workflow added to scope

    The field inspector application entered scope at High severity, along with the photographic evidence it stores against open enforcement cases.

  50. WM Wayfare Mobility

    Field safety campaign closed for the manifest finding

    The voluntary campaign opened with our type-approval authority after the 2023 forged-manifest report finished re-flashing 6,400 vehicles. The researcher was credited in the filing with their consent.

  51. IF Ironvale Foundation

    We are a CVE Numbering Authority

    Assignments for our own projects no longer route through an upstream authority. That removed about eight days from the median advisory timeline and one long email thread from every advisory.

  52. VP Velo Payments

    v3 API frozen and capped at Medium

    No further feature work on v3, and no finding against it pays above Medium regardless of score. Migration guidance went out to the 1,300 merchants still on it.

  53. SM Stratamesh

    The v1 API left scope

    v1 stopped taking new tenants in 2022 and came out of scope today. It was switched off in December; anything sent against the redirect since then has been closed as not applicable.

  54. AA Arbor AI

    Agent runtime and tool calling added to scope

    Tool calling arrived in the product in April and in the program in June, with the interpreter sandbox as its own scope line. Six of the first twenty reports were valid, which is a better rate than the inference API has ever managed.

  55. MC Meridian Civic Systems

    Public records caveat written into the policy

    A request under public records law sought the text of a submission. We asserted the security exemption and prevailed, then wrote the caveat on this page so nobody is surprised by the next one.

  56. DG Driftline Games

    Matchmaking rewritten, session tickets in scope

    Ticket issuing moved to a signed short-lived format. Forging one is Critical, and the old format stopped being accepted at the end of May.

  57. IF Ironvale Foundation

    Continuous fuzzing on the certificate path builder

    Roughly 900 core-hours a week now run against path building and certificate parsing, donated by a member. Four of this year's advisories started in that corpus.

  58. CH Cadence Health

    Reports containing real records are purged on sight

    Written down properly after a well-meant submission arrived with three unredacted documents attached. We purge the attachment, tell you what we purged, and score the finding from your description.

  59. WM Wayfare Mobility

    Duplicate window now measured from triage

    A Friday evening report lost a duplicate call to one sent on the Monday and read first. The window starts when a report is triaged, and we reopened the two cases affected.

  60. AA Arbor AI

    Retrieval pipeline in scope, Critical ceiling to 15,000 USD

    Indexing and recall join the program and the top band moves from 6,000. Retrieval is where injected content stops being a prompt and starts being data we trusted.

  61. AA Arbor AI

    Open to everyone

    Fifteen weeks of closed testing with eleven researchers ends today. Two of them are still in the top five.

  62. WM Wayfare Mobility

    First remote-reachable Critical paid at 15,000 USD

    A forged update manifest was accepted by a bench unit and then by a vehicle on our proving ground. It is still the report we hold up as the example of what the top band is for.

  63. SM Stratamesh

    Advisory SM-2023-07 published with credit

    A container escape reported in August was fixed in the June and July node images and disclosed on the 19th. Both reporters are named in the advisory at their request.

  64. MC Meridian Civic Systems

    Four municipalities joined and fares consolidated

    Four members moved onto the shared fare platform over the summer, which doubled the size of the fares surface and added two triagers to the team.

  65. AA Arbor AI

    Program launched on the inference API

    Inference only, four bands from 200 to 6,000 USD, and no idea yet how much of the queue would be people asking a model to swear.

  66. DG Driftline Games

    Public test branch opened to researchers

    Anyone with an accepted report can request test branch access with inventory and market credit. It ended most of the arguments about testing against live.

  67. CH Cadence Health

    Scanners banned on the FHIR gateway

    An unannounced weekend scan left two practices waiting on chart loads at Monday morning clinic. Nothing was breached and it was still the worst outcome of the year. Hand-driven requests only from now on.

  68. IF Ironvale Foundation

    The 1.x branch reached end of life

    Five years of support ended and the branch left scope with it. Two distributions kept shipping it for another year, which is their decision and not ours to fix.

  69. VP Velo Payments

    Mobile SDKs brought in-house

    The iOS and Android SDKs left the contractor who built them and are maintained by our own team. Both are in scope at High, release configuration only.

  70. WM Wayfare Mobility

    Update manifest service moved into scope

    The manifest endpoint can now be tested directly rather than only through a paired unit. Forged manifests pay at the Critical band whether or not a unit accepts them.

  71. CH Cadence Health

    Advisory CH-2023-02 published with credit

    A session-fixation chain in the portal message centre was fixed in the January release and disclosed with both reporters named. One of them wrote the regression test we still run.

  72. SM Stratamesh

    First response for Critical cut to one business day

    Critical reports were waiting behind a shared queue on Mondays. They now page the on-call platform engineer directly, and everything else keeps the two-day target.

  73. DG Driftline Games

    Triage moved in-house

    The platform vendor handed triage to our own security team. First response got slower for a month, then settled faster than it had been, and the engineer who wrote the code now reads the report.

  74. VP Velo Payments

    Sandbox merchant identifier is mandatory on every report

    Submissions without one are returned unread. This is the direct result of last month's incident and it is not waived for anybody, including researchers we have paid ten times.

  75. VP Velo Payments

    A live-account test triggered a card-brand notification

    A researcher exercised a refund flow against a live merchant account and pasted a real primary account number into the report. Nothing was stolen and nobody acted in bad faith. It still cost four weeks of remediation and a notification we could not avoid making.

  76. IF Ironvale Foundation

    Conference travel grant added for Critical findings

    A recurring donation let us set aside a small travel line. It has sent four reporters to a conference of their choosing, and we will say yes until the line runs out.

  77. MC Meridian Civic Systems

    The old permit system went read-only

    Applications from before 2022 now live in an archive at legacy.meridiancivic.example. It stays in scope at Low severity until it is switched off in 2027.

  78. WM Wayfare Mobility

    Bench hardware loan programme opened

    Researchers with two accepted reports can ask for a TCU or head unit development kit. The units are theirs to keep and we have never asked for one back.

  79. CH Cadence Health

    Policy rewritten around the hard stop

    The February incident produced the rules that now open this page: stop at the first plausibly real record, minimum proof, no retention anywhere, and a sandbox tenant issued before you touch anything.

  80. CH Cadence Health

    A report reached 4,100 real records

    An object reference flaw on the document endpoint was confirmed by incrementing an identifier four thousand one hundred times. We paid the Critical band because the finding was real and the disclosure was honest, then spent four months on notification.

  81. IF Ironvale Foundation

    Publishing tokens replaced after a near miss

    A maintainer pasted a registry token into a public issue. Nothing was published with it, every token was rotated inside the hour, and tokens are now scoped to a single package.

  82. CH Cadence Health

    Clinician workspace added to scope

    Charting and scheduling join the portal. Care-team role boundaries are new ground here and the first three months produced eleven valid escalation reports.

  83. VP Velo Payments

    First response cut to two hours

    Triage moved to a follow-the-sun rotation across two offices. Reports that arrive overnight in Europe are read before European business hours start.

  84. SM Stratamesh

    Reopened on the new control plane

    v3 is live in every region and the scope table points at it. The v2 surface stayed eligible until the last tenants finished moving in September.

  85. DG Driftline Games

    Programme opened three weeks after launch

    Tidebreak shipped in April 2021 with a tradeable economy and no way to tell us it was broken. Two duplication reports arrived in the first week.

  86. MC Meridian Civic Systems

    Prohibited systems restated after a question in good faith

    A researcher asked, reasonably, whether dispatch infrastructure was testable. It is not, and the prohibition now appears in three separate places on this page.

  87. SM Stratamesh

    Submissions frozen for the control-plane migration

    The rewrite moves tenants region by region between 19 April and 4 June and the surface changes under you while it runs. Nothing new is accepted in that window; reports already in triage carry on as normal.

  88. VP Velo Payments

    Disputes and chargebacks added to scope

    The dispute lifecycle, evidence upload and representment endpoints are testable in sandbox. Evidence documents are the interesting part: they are the only file upload a merchant can reach.

  89. WM Wayfare Mobility

    Programme opened to the public

    Our product security incident response team took over an invitation-only pilot that had run through the previous spring. Eleven operators carried our hardware then; twenty-three do now.

  90. CH Cadence Health

    Program opened on the patient portal

    Portal only, bands from 250 to 6,000 USD, two people reading reports on rotation between other work. Everything else on this page came later and most of it came the hard way.

  91. VP Velo Payments

    Open to everyone

    Eight months of private testing with nineteen researchers ends today. The queue takes submissions from anyone who can register a sandbox merchant.

  92. MC Meridian Civic Systems

    Identity service rebuilt after the first Critical

    A session fixation finding in the original single sign-on implementation led to a full rebuild rather than a patch. The reporter reviewed the replacement before it shipped.

  93. SM Stratamesh

    Reward table raised for the first time

    Critical moved from 4,000 to 9,000 USD and Medium doubled. The launch table was written for a platform with under three hundred tenants and had stopped being honest about a year earlier.

  94. VP Velo Payments

    Program launched, sandbox only

    One triager, four bands, and a Critical ceiling of 8,000 USD. The sandbox-only rule was written on the first day and has never been relaxed.

  95. MC Meridian Civic Systems

    Policy published with eight founding municipalities

    The Authority opened this programme four months after it was chartered, with eight members and one part-time triager. Both numbers have grown since.

  96. IF Ironvale Foundation

    Security policy published

    Written on a Sunday afternoon by three of us, after a reporter spent a fortnight trying to work out who to tell about a heap overflow. That should never have been difficult.

  97. SM Stratamesh

    Program opened, invitation only

    Twenty-two researchers, four bands topping out at 4,000 USD, and one engineer reading everything. Public submissions opened the following February.