Report security vulnerabilities or suggest improvements to SocNet Store and earn a reward. See what's in scope and how to submit a report.
Bug Bounty Program What we accept: vulnerabilities affecting user account security (authorization bypass, session theft, XSS, CSRF) bypassing payment logic (double charging, incorrect balance crediting, payment bypass) SQL injections, IDOR, leakage of others' data API vulnerabilities (for resellers) What we DO NOT accept: vulnerabilities of social networks and third-party services (Instagram, TikTok, etc.) DDoS attacks, spam, brute force social engineering of employees absence of security headers without real impact vulnerabilities requiring physical access to the user's device Rules Do not disclose information about a vulnerability until it has been fixed. Do not cause harm to other users' data. Use only your own account for testing. One vulnerability — one report. Duplicates are not rewarded. Reward The reward amount is determined individually by the service administration, based on the severity of the vulnerability and the quality of the submitted report. The reward is credited exclusively as a bonus balance to the user's account. The reward for a discovered vulnerability is given only to the user who reported it first. Service improvement program We are always open to ideas that will make the service more convenient. What interests us: new features in the personal account and on the website interface improvements and convenience of placing orders new types of services or social networks API improvements and reseller panel any ideas that will save time for you and other clients How it works Describe your idea in detail. Explain what exactly you suggest improving, how it should work, and what benefit it will bring to users. Attach examples and screenshots if necessary. Wait for review. Each proposal is reviewed by the service team within 7 business days. Receive your reward. If your idea is implemented, you will receive the team's gratitude and a bonus credit to your account balance. We do not guarantee that every proposal will be implemented, but we guarantee that the team will review every idea individually. Reward The reward amount is determined individually by the service administration, taking into account the usefulness of the idea, its originality, the complexity of implementation, and the potential benefit to users. The reward is credited exclusively as a bonus balance to the user's account. How to submit a report or proposal: click one of the buttons below. For authorized users, the contacts will be pulled automatically, guests can provide any email for communication.