The place to protect open source

Make money for finding or fixing security vulnerabilities in any open source project.

Protect packages that are used over 1 billion times each day

The truly open bounty platform

No more redactions

Say goodbye to suspicious backroom conversations.

Save the world

See how many people you're protecting.

Share with friends

Share your open source success!


Dive into open source, and discover new vulnerabilities.


Browse vulnerabilities, choose your bounty and write your fix.


Review community code. Contact us to find out more.