Discord-Bug-Hunters

Discord Security Bug Bounty

At Discord, we take privacy and security very seriously. As such, we encourage EVERYONE to participate in our open bug bounty program, which incentivizes researchers and hackers alike to responsibly find, disclose, and help us resolve security vulnerabilities. As with many bug bounties out there, Discord has a fairly straightforward and simple set of rules that help protect both us and those looking to disclose. Thanks for participating and happy bug hunting!

How we approach security issues:

Discord will not take legal action against users for disclosing vulnerabilities as instructed here. Vulnerability reports will always be responded to as fast as possible—usually within 24 hours. We will provide a full write-up of steps we've taken to resolve any issues you reported. Based on the validity, severity, and scope of each issue, we'll reward you with awesome shtuff (or just cold, hard cash if you prefer). Program Rules:

Only use and test on accounts and servers you directly own. Testing should never affect other users. Testing should be limited to sites and services that Discord directly operates. We will not accept reports for third-party services or providers that integrate with Discord through our APIs.