Legal
Developer Terms & Conditions
Last updated: 24 April 2026. These terms form a binding agreement between you (the Developer) and VibeBounty Ltd ("VibeBounty", "we", "us").
1. Definitions
"Platform" means the VibeBounty web application and associated services. "Program" means a bug bounty program you create on the Platform. "Report" means a vulnerability submission made by a Researcher against your Program. "Researcher" or "Hacker" means a registered hacker-role user who submits Reports.
2. Eligibility
You must be at least 18 years old and have the legal authority to bind the entity or individual you represent. By creating a Developer account you confirm that you meet these requirements.
3. Subscription & Fees
Access to Developer features requires an active paid subscription (Basic, Pro, or Elite). Subscription fees are billed monthly in advance. Failure to maintain an active subscription will result in suspension of your Programs. Developers pay the configured bounty amount for accepted reports. Researcher payouts are paid net of estimated Stripe processing fees, and accepted bounty payouts are final inside VibeBounty.
4. Payment Obligation (Key Term)
When you accept a Report as valid, you are legally committing to pay the configured bounty amount for the relevant severity tier at the time of submission. Payment must be initiated within 48 hours of marking a Report as accepted. Researcher payouts are paid net of estimated Stripe processing fees. Accepted bounty payouts are final inside VibeBounty; bank disputes or chargebacks are handled by admin review. Repeated failure to pay accepted Reports within this window may result in suspension or permanent removal of your account and Programs.
5. Program Scope & Accuracy
You are responsible for keeping your Program scope, bounty tiers, and acceptance criteria accurate and up to date. Retroactively reducing bounty amounts for an already-submitted Report is not permitted. You must not configure scope that you do not own or have explicit written permission to include.
6. Fair Triage
You agree to triage Reports in good faith. Rejecting a clearly valid Report without reasonable justification, or refusing to communicate with a Researcher after submission, constitutes a breach of these Terms. VibeBounty may review disputed triage decisions and take action, including escalating to mandatory payment, where bad-faith rejection is evidenced.
7. Responsible Disclosure Cooperation
You agree to work with Researchers toward a reasonable remediation timeline. Once a vulnerability has been remediated (or 90 days have elapsed since acceptance, whichever is sooner), you agree not to object to the Researcher making a factual, non-sensitive public disclosure of the finding.
8. Prohibited Conduct
You must not: use the Platform to collect Reports with no intention to pay; create Programs as a honeypot to identify security researchers; share Researcher personal data obtained through Reports with third parties; or take legal action against a Researcher for activity that falls within your Program scope.
9. Intellectual Property
Reports submitted by Researchers are provided to you under a limited licence for remediation purposes only. You do not acquire ownership of any intellectual property contained within a Report. VibeBounty retains all rights to the Platform.
10. Limitation of Liability
VibeBounty is a marketplace that facilitates connections between Developers and Researchers. We do not guarantee that any Program will receive Reports, nor that Reports received will be actionable. To the fullest extent permitted by law, VibeBounty's aggregate liability to you shall not exceed the total subscription fees paid by you in the three months preceding the claim.
11. Termination
We may suspend or terminate your account if you breach these Terms, fail to pay Researchers, or engage in conduct detrimental to the Platform community. Upon termination, outstanding payment obligations to Researchers remain enforceable.
12. Governing Law
These Terms are governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.
13. Changes to These Terms
We may update these Terms from time to time. Material changes will be notified by email at least 14 days before they take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated Terms.
14. Contact
Questions about these Terms? Email legal@vibebounty.com.