soluidc.net & direct internal impact
We receive reports about soluidc.net and resources with a demonstrable direct impact on its internal network. Testing permission depends on asset ownership and the program rules.
NYA LABS / SECURITY COMMUNITY
Better security.
Built together.
We welcome responsible reports about security incidents, vulnerabilities, and product bugs. Help us protect the services our customers rely on.
RESPONSIBLE DISCLOSURE & BUG BOUNTY
A private place to report.
A clear set of rules.
Start with our scope and reporting requirements. Submit your findings privately with a clear impact statement and enough information for our team to investigate.
Security issues and product bugs
Choose the type of report that fits your finding. Non-security bugs are accepted for review but are not automatically bounty-eligible.
Impact comes first
We assess scope, reproducibility, severity and duplicates. A submission is not a promise of payment or a commitment to a fixed response time.
Before you submit
Reflected XSS, missing security headers, and cookie-flag findings such as a missing HttpOnly flag are excluded. Read the full rules for other exclusions and testing boundaries.
Review exclusions