Help Us Make Broctagon Safer

You’re invited to test and report vulnerabilities related to:

• https://broctagon.com and all subdomains
• Broctagon’s trading CRM systems and any infrastructure or APIs
• Servers and environments hosted or owned by Broctagon

Reports outside this scope may still be reviewed at our discretion.

To submit a vulnerability:

1. Download the Bug Bounty Submission Form.
2. Email your report to: security@broctagon.com
3. Include:
   
   
   • A clear, reproducible description
   • Affected URLs or endpoints
   • Screenshots, logs, or video if helpful
   • Any attachment or sample payloads
   • You’ll receive an acknowledgment within 15 working days.
4. Reports outside this scope may still be reviewed at our discretion.

We value detailed, well-structured reports. Submissions that allow us to verify and fix the issue faster may be eligible for higher rewards.

To qualify for a reward, you must:

• Avoid disrupting our services or data
• Not publicly disclose the bug before we fix it
• Not access or modify other users’ data
• Not use social engineering or physical access
• Submit only original discoveries (no duplicates)

Broctagon does not pursue legal action against researchers who follow these rules.

The following are typically not rewarded:

• Bugs requiring unlikely user interaction
• Missing security headers or best practices
• Rate limit bypass with no real impact
• Vulnerabilities on third-party platforms we don’t control
• Denial of Service (DoS), brute-force, or spam tests