PowerDNS bug bounty programs

PowerDNS programs compared: top reward per severity, safe harbor, identity check, first response and status. Amounts are in the currency each program pays.

Program	Critical	High	Medium	Low	Top reward	Safe harbor	KYC	First response	Status
PO PowerDNS Sorona · Bug bounty	–	–	–	$100	$1,500	Partial	–	–	Open

• PO

  PowerDNS

  Sorona · Bug bounty

  Open

  Top reward

  $1,500

  Critical

  –

  High

  –

  Medium

  –

  Low

  $100

  Safe harbor

  Partial

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

• https://www.powerdns.com

  Web

• dnsdist in full, the most network-exposed component, covering its Lua policy engine, DoH, DoT and DoQ termination, and dynamic-block logic

  Products and areas

• DNSSEC signing and the pdnsutil tooling that manages keys and zone state

  Products and areas

• Packet and record parsing across all three products, where a crafted query or response is decoded on a daemon facing the open internet

  Products and areas

• Reports go through the channel named in the repository's SECURITY.md and cover the upstream GPL-2.0 monorepo: the Authoritative Server, the Recursor and dnsdist. Open-Xchange's hosted and commercial platform products sit outside it

  Products and areas

• The Authoritative Server in full, including every backend it ships, and particularly the SQL backends where zone data crosses a query boundary

  Products and areas

• The Recursor in full: its cache and resolution logic, cache poisoning, the record-count and Rebirthday class, and the deferred-resolution machinery

  Products and areas

• The web API and the dnsdist console, which are administrative but frequently exposed further than their operators intend

  Products and areas

No target matches. Try part of a host name, such as the company name.