Security Researcher Programme
Photon Now runs actions, delivers files and opens sessions on our customers’ devices, so a flaw here matters more than in most software. We want to hear it from you first.
No cash, no vouchers, no gift cards. A qualifying report earns a signed letter of recommendation, your name below and a reference.
Recognition
Proof you can show an employer.
The first to report a qualifying vulnerability earns all three. The letter comes as a signed PDF, or on paper if you ask, once the fix has shipped or the 90-day disclosure window has passed.
A letter of recommendation
Signed by the owner: what you found, its severity, and that you handled it properly.
A Hall of Fame entry
Your name or handle, the month, the severity and one line on what you found.
A reference on request
An employer can email or call us, and we confirm what the letter says.
A report qualifies when it describes a real, in-scope vulnerability and was made privately and in good faith under the disclosure policy. Scanner findings and documented decisions do not. Duplicates and out-of-scope reports get a thank-you. Employees, contractors and their households are excluded. Our assessment is final, and we explain it.
Hall of Fame
The researchers who made Photon Now safer.
Each entry is here with the researcher’s consent and shows only what they chose to show.
- Nobody yet. The first qualifying report will be listed here.
Before you start
Everything else is in the disclosure policy.
It covers what is in and out of scope, how to report, our timelines and the safe harbour for research done under it.