sr-banner-bg

Security Researchers

Single channel of vulnerability reporting and management

How is CESPPA Different?

As former security researchers, we understand that challenges such as long wait times for payment, non-responsiveness, and crowded programs can be frustrating. CESPPA solves these problems in several ways. First, we pay researchers when vulnerabilities are submitted, not when they are remediated by the customer. Second, we assign dedicated program managers to every program, which means that researchers interact directly with CESPPA. Lastly, the vast majority of our programs are not reserved for only “elite” researchers. Working with CESPPA means that researchers have greater accessibility to meaningful and lucrative programs.

Icon Payout
Payout

We pay on triage

Icon Responsive
Responsive

You interact with us, not the client

Icon Private Program
Private Programs

Most of our programs are private with more chances of finding vulnerabilities

Do you have what its takes to be
a security researcher with CESPPA?

At CESPPA, our vision is to secure the internet. We believe that ethical security research comes with operating with the highest standards of professionalism. We seek like minded researchers to uncover vulnerabilities and threats that can damage growing businesses. If you share our mindset, we want to hear from you.

Code of Conduct

SR Cartoon

Data integrity

Data is foundational for our client's business. Their current and future customers depend on them to not only protect their product, but also their data assets. In turn, our clients depend on CESPPA to help them in this cause. Researchers who defraud or steal our clients data will not be tolerated and will face legal recourse.

AN HONEST SELF-ASSESSMENT

Be honest and upfront about your experience, skillset, and competencies when you request invitations to both public and private programs, in order to ensure that all parties are set up for success, and so we deliver impactful results for our clients.

No Extortion

Extortion is never an option and will not be tolerated.

ACT LIKE A PROFESSIONAL

You are your own brand. We value researchers that present submissions that are well organized and documented, and presented clearly. High-quality submissions ensure quicker payments and invitations to more programs.

ONE TEAM, ONE DREAM

Lastly and most importantly, we are all in this for the same reason: #Securetheinternet

How it works?

How It Works
1. Create a Vulnerability Submission
2. CESPPA Program Managers will validate and deduplicate
3. Rewards are paid in a timely manner

Trusted By

Conversion Logic Logo
CreatorIQ Logo
Veritone Logo
The Black Tux Logo
Scholly Logo
SFOX Logo
Karuna Health Logo
The Oix Logo
Reelgood Logo
woman-with-pen

Join Our Team of Researchers

Subscribe to News & updates

Subscribe Success

You have successfully subscribed to news & updates