Buckaroo
Top 1M siteHybridActiveBounty Full Safe Harbor
Program Details
Responsible disclosure policy for the Dutch payment service provider. Reports go to [email protected], assessed within two working days, with no criminal or civil action against researchers who follow the conditions. A reward may be offered depending on risk and report quality, currently only payable to EU/EEA citizens.
- Allows Disclosure
- Yes
- Response SLA
- 2 business days
Rules & Testing
Excluded Methods
DosSocial EngineeringPhysical Access
Out of Scope
Third-party applications, Missing or misconfigured SPF, DKIM or DMARC records, Reports of old software versions without a working proof of concept, Automated scanner output without a demonstrable proof of concept, AI-generated reports without proof of manual human validation
Security
- PGP Key
- https://www.buckaroo.nl/media/0xrn552s/public-pgp.txt
security.txt
- Contact
- mailto:[email protected]
- Encryption
- https://www.buckaroo.nl/media/0xrn552s/public-pgp.txt
- Policy
- https://www.buckaroo.nl/media/fwdj2uvv/responsible-disclosure-policy-eng.pdf
- Expires
- Nov 1, 2026