Terms of Service

Version 2026-10-28 · effective 2026-10-28

1. Who can use Zerohunt

You must be 18 or older and able to enter a binding contract. If you use Zerohunt for a company, you confirm you are authorised to bind it, and “you” includes that company.

2. Your account

Give accurate information and keep it current. Keep your password secret, and tell us at [grievance email address] if you think someone else has used your account. You can see and end your sign-ins in Settings. You are responsible for what happens under your account.

3. Rules for researchers

• Test only assets a program lists as in scope, and follow that program's own rules, which add to these terms.
• Use your own test accounts. Do not access, change, keep or share data that belongs to others beyond the minimum needed to show an issue.
• No denial-of-service, spam, social engineering or physical testing unless a program expressly allows it.
• Report through Zerohunt, and do not disclose a finding publicly until the company agrees or the program's disclosure policy allows it.
• Do not demand payment outside a program's published rewards, or threaten disclosure to get one.

Testing that follows a program's scope and rules in good faith is what that program authorises. Anything outside them is not authorised by the company or by us.

4. Rules for companies

• Publish only programs for assets you own or are authorised to have tested, and keep scope and rules accurate.
• Respond to reports in good faith and within the times you publish.
• Pay the bounties and send the rewards you award, as your program states.
• Do not take legal action against a researcher for testing that followed your program's scope and rules in good faith.

5. Bounties and rewards

Bounties are set and awarded by the company running the program. We record awards and relay payment, but a bounty is owed by the company, not by us. You are responsible for taxes on what you receive. We may withhold or reverse an award obtained by breaking these terms or a program's rules.

6. Your content

You keep ownership of the reports, posts and other content you submit. You give us a licence to store, process and show it as the platform needs — for example, delivering a report to the company concerned, or publishing a post you publish. A company receiving a report may use it to fix the issue. Do not submit content you have no right to submit, or content that is unlawful.

7. Community conduct

Be civil. No harassment, hate, doxxing, malware, or posting of vulnerabilities in someone's systems before they are fixed and disclosure is agreed. We may remove content and limit accounts that break this.

8. Privacy

How we handle personal data is set out in the Privacy Notice, which you also agree to.

9. Suspension and closing your account

We may suspend or close an account that breaks these terms, puts others at risk, or where the law requires it, and we will tell you why unless the law prevents it. You can close your account at any time by withdrawing consent in Settings → Privacy & consent.

10. Disclaimers and liability

The platform is provided as is. We do not guarantee that a program is free of risk, that a report will be accepted, or that a vulnerability will be fixed. To the extent the law allows, we are not liable for indirect or consequential loss, and our total liability to you is limited to the fees you paid us in the twelve months before the claim. Nothing here limits liability that cannot be limited by law.

11. Changes

We may update these terms. Each version is dated, and we ask you to agree to a new version before you continue using your account.

12. Law and disputes

These terms are governed by the laws of India. Courts at [city] have exclusive jurisdiction, subject to any right you have under consumer protection law to go to a forum where you live.

13. Contact

[Registered company name], [Registered office address, India]. Email: [grievance email address].

See also: Terms of Service · Privacy Notice