RaiderIO, Inc.
Vulnerability disclosure program on security.txt raider.io
- Top reward
- No cash rewards
- Top severity paid
- Not published
- Assets in scope
- 6
- Public CVEs
- 0
- Last change
- No changes yet
At a glance
What to know before you start testing.
- No cash rewards
- A disclosure program: you report for credit, not money.
- Report by email
- [email protected]
- Full safe harbor
- Good-faith research is authorised; no legal action.
- Replies within 5 days
- As the policy promises.
- Publish after a fix
- Coordinate the timing with the company.
Rewards
What the company's own policy page says it pays.
This program does not pay cash rewards.
- Pays cash
-
No
This is a vulnerability disclosure path, not a paid bug bounty program. We do not offer guaranteed compensation, rewards, or bounty payments for submitted reports
- Response
-
Within 5 days
We aim to acknowledge receipt within 5 business days.
- Safe harbor
-
Full
If you make a good-faith effort to follow this policy, we will treat your research conducted in accordance with under this policy as authorized.
Summarised with AI from the company's policy, read 12 Nov 2026, and checked word for word against it. Read the original
Scope
6 assets you may test, 2 excluded.
Domains 5
- classic.raider.io
- era.raider.io
- keystone.guru
- raider.io
- raiderioapp.com
Products and areas 1
- Other web properties and services that Raider.IO clearly presents as Raider.IO-controlled
Out of scope (2)
- Issues that belong to a vendor unless the vulnerability is caused by Raider.IO's integration or implementation
- Third-party vendors, platforms, or services that Raider.IO uses
Rules
What the policy asks of you, and the bug types it won't reward, quoted from RaiderIO, Inc.'s policy.
While testing
-
Test only what is necessary to confirm the issue.
-
Do not access, alter, or retain more user data than is reasonably necessary to demonstrate the issue.
-
Do not use social engineering, phishing, physical intrusion, spam, denial of service, or destructive testing.
-
Do not establish persistence, plant payloads, or exfiltrate data.
-
Stop and report immediately if you encounter sensitive data that you were not intending to access.
-
Please give Raider.IO a reasonable opportunity to investigate and remediate a reported issue before public disclosure.
-
If you are unsure whether a target is in scope, ask before testing it.
Summarised with AI from the company's policy, read 12 Nov 2026, and checked word for word against it. Read the original
Changes
Tracked since 12 Nov 2026. Last checked 3 hours ago.
No changes yet. When the rewards or scope move, you will see it here and in the RSS feed.
Public CVEs
Published vulnerabilities in this vendor's products, from the NVD.
No CVEs matched yet. We match NVD records by vendor name, so products sold under another name can be missing.