- Top reward
- No cash rewards
- Top severity paid
- Not published
- Assets in scope
- 2
- Public CVEs
- 0
- Last change
- No changes yet
At a glance
What to know before you start testing.
- No cash rewards
- A disclosure program: you report for credit, not money.
- Report by email
- [email protected]
- Partial safe harbor
- Some legal protection; read the terms.
- No public write-ups
- Keep findings private.
Rewards
What the company's own policy page says it pays.
This program does not pay cash rewards.
- Safe harbor
-
Partial
Cegeka undertakes to implement this policy in good faith and not to make legal claims against participants that comply with this policy.
Summarised with AI from the company's policy, read 12 Nov 2026, and checked word for word against it. Read the original
Scope
2 assets you may test, 1 excluded.
Domains 1
- cegeka.com
Web 1
- https://www.cegeka.com
Out of scope (1)
- IT systems that rely on third parties
Rules
What the policy asks of you, and the bug types it won't reward, quoted from Cegeka's policy.
While testing
-
The participant will not disrupt the availability of the services provided by the IT systems and not exploit the vulnerability beyond what is strictly necessary to demonstrate the security problem.
-
This policy does not allow the participant in any way to intentionally intercept, observe, inspect, read, record, store, or otherwise Process the content of Cegeka information technology, communication or Personal data.
-
Copying or changing data from the IT system or deleting data from that system
-
Changing the parameters of the IT system
-
Installing any malware (i.e.: viruses, worms, Trojan horses, etc) or similar software that disables functionalities of the Cegeka systems.
-
Carrying out any "denial of service" attacks (Distributed Denial Of Service - DDOS)
-
Carrying out any "social engineering" attacks
-
Carrying out any phishing attacks
-
carrying out any password theft or "brute force" attacks
-
Keep continuing with his actions when requested to stop by Cegeka
Summarised with AI from the company's policy, read 12 Nov 2026, and checked word for word against it. Read the original
Changes
Tracked since 11 Nov 2026. Last checked 6 hours ago.
No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.
Public CVEs
Published vulnerabilities in this vendor's products, from the NVD.
No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.