sorona.xyz bug bounty programs

sorona.xyz programs compared: top reward per severity, safe harbor, identity check, first response and status. Amounts are in the currency each program pays.

Program	Critical	High	Medium	Low	Top reward	Safe harbor	KYC	First response	Status
SW Swift Sorona · Bug bounty	–	–	–	$100	$1,500	Partial	–	–	Open

• SW

  Swift

  Sorona · Bug bounty

  Open

  Top reward

  $1,500

  Critical

  –

  High

  –

  Medium

  –

  Low

  $100

  Safe harbor

  Partial

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

• https://www.swift.org

  Web

• Codable and the decoding path, which reconstructs typed objects from bytes

  Products and areas

• Foundation and swift-corelibs-foundation, including the property list, JSON and XML decoders that parse untrusted data

  Products and areas

• SIL, the optimiser and the code generation path down to LLVM, where a miscompilation can remove a bounds check or an exclusivity check the language guarantees

  Products and areas

• swift-syntax and the macro plugin protocol, which runs a compiled plugin process during every build that uses a macro

  Products and areas

• SwiftPM: manifest evaluation, dependency resolution, checkout, binary target handling, the plugin system and the build commands a package can declare

  Products and areas

• The C and Objective-C interoperability layers and the bridging code between them

  Products and areas

• The compiler front end: the parser, the type checker and the macro expansion machinery, which runs macro plugin code during compilation

  Products and areas

• The concurrency runtime, actors and the isolation checking that is supposed to prevent data races

  Products and areas

• The Swift runtime: reference counting, metadata handling, dynamic casting and the reflection machinery

  Products and areas

• The Swift standard library, covering String, Array, the Unsafe pointer family and the runtime functions behind them

  Products and areas

• The swift.org security process asks for vulnerabilities in the open-source toolchain by email, with a published key for sensitive material, and offers credit in the resulting advisory. It declares no component carve-out inside the toolchain, so the swiftlang repositories as shipped are the target

  Products and areas

• The toolchain distribution itself: the installers, the signature verification on downloaded toolchains and swiftly

  Products and areas

No target matches. Try part of a host name, such as the company name.