FAQ

+ Why are you doing this?

+ Who are you?

+ Where do I report bugs or feature requests?

+ Where can I see previously verified submissions?

+ Where can I report new vulnerabilities?

+ Where can I find your Privacy Policy?

+ What is the best way to contact a maintainer?

+ What is in scope?

+ What are your plans in the near future?

+ What are the implications when the maintainer is unresponsive?

+ How is the bounty reward calculated?

+ How do you assign CVEs?

+ How do I know if my disclosure or fix has been rewarded?

+ How do I get a CVE for my verified advisory?

+ How do I fund a project?

+ How do I cash out my rewards/bounties?

+ How can I get in touch?

+ Do you support custom security policies?

+ Can I edit the details of a report?

+ Are reports public or private by default?