cleanshot.com
Top 1M siteBug BountyActiveBounty RecognitionUSD $50 - $4,000
Program Details
CleanShot team looks forward to working with independent security researchers. As long as you comply with this policy, you are welcome to test and report any vulnerabilities you find in our services. We offer rewards for valid reports to encourage ethical hackers to help us keep our users safe.
Payout Structure
Critical USD $4,000
High USD $2,000
Medium USD $1,000
Low USD $500
In-Scope Domains
- The following components are in scope:
- CleanShot X macOS app:
- The latest version of CleanShot X desktop app downloaded from cleanshot.com or installed through Setapp.
- CleanShot Cloud and CleanShot license management web apps, backend and infrastructure:
- cleanshot.com/*
- *.cleanshot.cloud/*
- share.cleanshot.com/*
- cln.sh/*
- updates.getcleanshot.com/*
- Any custom domain you connect in Advanced settings on a Pro account.
- licenses.cleanshot.com/*
- legit.maketheweb.io/*
- S3 buckets, CloudFront distributions, and other asset URLs referenced by the domains above, where the context indicates that we own and operate them.
security.txt
- Contact
- mailto:[email protected]
- Policy
- https://cleanshot.com/disclosure
- Languages
- en, pl
- Expires
- Dec 9, 2026