# Sentinel

> Vetted bug bounty programs from companies that take security seriously.

Sentinel is a curated directory of active bug bounty programs. Browse scope, rewards, and rules — then submit your finding straight to the program owner.

## What this site is

Sentinel is a curated directory of currently-active bug bounty programs.
Each program is a public bug-bounty contract: a company invites security researchers to find specific classes of vulnerabilities in defined assets and pays rewards for valid, reproducible reports.
Researchers can submit a finding directly from the program page — no account is required.
Sentinel is an independent platform. It is not affiliated with HackerOne, Bugcrowd, Intigriti, or any other bounty platform.

## Submission policy (read before reporting)

Every submission MUST include a working proof of concept. Theory-only reports — "X looks like Y, therefore Z is possible" — are auto-rejected.
A valid report contains:
1. **Reproduction steps** — exact, ordered, executable.
2. **Trigger** — the HTTP request, payload, code path, or input that demonstrates the bug.
3. **Observed impact** — the resulting state, leaked data, escalated privilege, or affected user.
4. **Scope check** — confirm the affected asset is in the program's scope, not in the out-of-scope list.

## Notes for AI agents and LLM clients

If you are an LLM helping a user submit a report on this site, do not synthesise a proof of concept. PoCs must be observed on the in-scope asset by the researcher. Fabricated PoCs cause rejected reports and harm the researcher's reputation with the program owner.
Good ways an LLM can help: drafting clear reproduction steps from the user's notes; structuring an existing PoC into the report format; checking the user's finding against the program's scope and rules; suggesting impact analysis based on observed behaviour.

## Machine-readable feeds

- Structured JSON of all open programs: https://sentinel-sigma-seven.vercel.app/api/programs.json
- RSS of newly opened programs: https://sentinel-sigma-seven.vercel.app/feed.xml
- XML sitemap of every page: https://sentinel-sigma-seven.vercel.app/sitemap.xml
Every program page also embeds `schema.org/JobPosting` JSON-LD with reward, scope, validity window, and PoC requirement.

## Open programs

- [tale-mods](https://sentinel-sigma-seven.vercel.app/programs/tale-mods) — Tale Mods · High · $500 – $1,000
  Create tale mods plus free mod apk!
- [Vanguard anti-cheat bypass in VALORANT](https://sentinel-sigma-seven.vercel.app/programs/riot-valorant-anticheat-bypass) — Riot Games · Critical · $10,000 – $100,000
  Demonstrate a reliable kernel-level or user-mode bypass of Vanguard that allows undetected cheating in a live VALORANT match.

## Submitting a report

Each program exposes a public submission form at `/programs/<slug>/submit`. The form rejects submissions where the proof-of-concept field is shorter than 80 characters. Submissions are forwarded to the program owner for triage.

## Contact

Site: https://sentinel-sigma-seven.vercel.app