sorona.xyz bug bounty programs

sorona.xyz programs compared: top reward per severity, safe harbor, identity check, first response and status. Amounts are in the currency each program pays.

Program	Critical	High	Medium	Low	Top reward	Safe harbor	KYC	First response	Status
RS rsyslog Sorona · Bug bounty	–	–	–	$100	$1,500	Partial	–	–	Open

• RS

  rsyslog

  Sorona · Bug bounty

  Open

  Top reward

  $1,500

  Critical

  –

  High

  –

  Medium

  –

  Low

  $100

  Safe harbor

  Partial

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

• https://www.rsyslog.com

  Web

• Framing and connection handling on those inputs, including the optional regex-based framing and the octet-counted and newline-delimited paths

  Products and areas

• RainerScript and the template engine, including property replacers, the string handling that builds output records, and the configuration parser itself

  Products and areas

• SECURITY.md asks for security vulnerabilities through GitHub Private Vulnerability Reporting, with direct email to the maintainer as the alternative. It names no excluded component, so the whole upstream rsyslog tree is in bounds

  Products and areas

• The daemon's own privilege handling: it starts as root, and how and when it drops or confines that privilege is part of the surface

  Products and areas

• The local input modules, including imuxsock, imjournal, imklog and imfile, which pull records from other processes and from files on disk

  Products and areas

• The message parsers: the RFC5424 and RFC3164 syslog parsers, plus the message-modification modules such as mmpstrucdata, mmjsonparse and mmnormalize applied to untrusted records

  Products and areas

• The network input modules, including imtcp, imudp, imptcp, imhttp and imrelp, which accept data pre-authentication from any host that can reach the port

  Products and areas

• The output modules that hand data to another system, including omfwd, omfile, the database outputs, omelasticsearch and omprog, where an injected field crosses into someone else's parser or process

  Products and areas

• The project's build and release machinery, including its GitHub Actions workflows, which are what an attacker would target to reach the artefact rather than the code

  Products and areas

• The queue and disk-assisted queue subsystem, where a spool file is written and read by a privileged daemon

  Products and areas

• TLS handling on the network inputs and outputs, including certificate and peer-name verification

  Products and areas

No target matches. Try part of a host name, such as the company name.