- Report real problems only. Test, dummy or placeholder reports are rejected.
- Test by hand, only with your own accounts and data. No automated scanners, floods of requests or anything that slows our sites down.
- One account per person. Reports from extra accounts earn nothing.
- Only the first report of a problem is rewarded. Later reports of the same problem are not.
- Problems we already know about are not rewarded, even if they are not fixed yet.
- Tratok decides the severity and the reward for each report.
- Send the header X-Tratok-Bounty with your personal tag on every request while you test (your tag is on your dashboard). Testing without it cannot be told apart from an attack and may be blocked.
- Do not open support tickets while you test. If a test really needs one, start its subject with [BOUNTY-TEST]. Those tickets are set aside and get no reply.
- If you make an account on any Tratok site for testing, name it BountyTest followed by your hunter number (when you are signed in, your exact name is shown below). Test accounts are deleted 14 days after you last use them.
