Omarchy opens a HackerOne bug bounty and names a head of security
Omarchy opened an official bug bounty on HackerOne, funded with $100,000, and named a head of security, in this post.
Researchers who find a vulnerability and report it privately can now be paid for it, the announcement says. Anyone without a HackerOne account can still report by email to security@omarchy.org.
Mehmet İnce, a member of the Omarchy Security Team, joins Omarchy Core as head of security and will run the program, David Heinemeier Hansson wrote.
İnce said the project had received good reports in the six weeks since version 4.0.0 and already works well with the researchers. The bounty now lets it reward their findings, he said.
Correction
Replaced a first paragraph that repeated the summary with facts from the announcement, removed a clock time, and paraphrased İnce's reply instead of quoting it with its slips.