About ZerohuntCompanies ⇄ Researchers

One trusted marketplace for real security work.

Zerohunt is the workflow that sits between companies and the researchers who protect them — bringing platform engineering and offensive-security expertise together in one marketplace.

Read the manifesto
01Why we built it

Security testing is only as good as the trust between the two sides of it.

Between them sits a gap that engineering and security teams have spent years working on from different ends.

02The core promise

What happens when those ends meet.

Companies

They need
Real researchers, actionable findings and a clean path to closure.
They get
Access to researchers, actionable vulnerabilities, and a clean, auditable workflow that manages them to closure.

Researchers

They need
Real targets, unambiguous scope, fair decisions and reputation they can carry.
They get
Legitimate security opportunities, strong reports, fair decisions and earnings — while building reputation you carry everywhere.

Zerohunt

The trusted marketplace, workflow, reputation and payment layer that sits fairly between both sides.

Platform engineering × offensive security

03What we are

What we are: the platform and the security work

The platform

The marketplace, program tooling, report lifecycle, payments and the learning ecosystem that turns skill into reputation.

  • Platform engineering
  • Marketplace
  • Payments

The security work

Offensive research, managed triage, vulnerability validation, and the trust-and-safety judgment that keeps a money-moving marketplace honest.

  • Offensive security
  • Managed triage
  • Trust & safety

Zerohunt

One marketplace for both.

04What we bring

Built in from day one.

  1. Program engineering

    Scope, rules and reward tooling that make authorization impossible to misunderstand.

  2. Expert triage

    Human-led validation with assistive AI — never automated decisions on real findings.

  3. Two-sided reputation

    Researchers and programs are both scored — responsiveness, fairness and quality.

  4. Trust & safety

    Verification, anti-abuse controls, secure evidence and a full audit trail.

  5. Payments & payouts

    A provider-abstracted payout layer with KYC controls before real money moves.

  6. Learning ecosystem

    A path from labs and challenges into real bounty participation and verified skill.

05The vision

Start focused.
Grow deliberately.

The first product is a focused bug bounty marketplace. The broader vision — continuous testing, security intelligence and AI-assisted triage — is treated explicitly as later phases, once the core lifecycle is proven.

  1. Today: Bug bounty programs, later: Continuous security programs
  2. Today: Researcher marketplace, later: Researcher matching engine
  3. Today: Vulnerability reports, later: Security intelligence
  4. Today: Human triage, later: AI-assisted triage
  5. Today: Rewards & reputation, later: Researcher career ecosystem
  6. Today: Basic learning & labs, later: Full security academy
06Roadmap

Four phases, in order.

  1. Phase 1

    Bug bounty core

    Researcher and company portals, programs, scope, reports, triage, bounty, remediation, retest and admin.

  2. Phase 1.1

    Marketplace growth

    Payments, verification, leaderboards, public profiles, organization ratings and appeals.

  3. Phase 2

    Learning ecosystem

    Labs, challenges, paths, achievements and research skill progression.

  4. Phase 3+

    AI & advanced security

    Report and triage assistance, attack-surface intelligence and continuous testing.

Zerohunt

Built by security people, for security work.

For companiesStart a programFor researchersHunt for bounties