Yes — Nylas offers monetary rewards for qualifying security vulnerabilities, but only through its private Bug Bounty Program (BBP) hosted on BugCrowd.
🏆 Rewards & Recognition
Depending on how a vulnerability is submitted and its impact, researchers may receive:
-
Monetary rewards (bounties) through the Bug Bounty Program.
-
Public or internal recognition for submissions via our Vulnerability Disclosure Form.
Submissions made through our Vulnerability Disclosure Form may also receive recognition, though bounties are typically reserved for submissions through BugCrowd.
🚀 How to Join the Program
The Bug Bounty Program is invite-only. If you're interested in participating:
-
Send an email to security@nylas.com to request an invite
🔍 Report Handling
All reported vulnerabilities are:
-
Triaged by our Security Team
-
Reviewed for impact and validity
-
Eligible for credit or bounty, depending on submission path and severity
If you’re a security researcher and would like to work with us to help keep Nylas secure, we’d love to hear from you!
Updated
Comments
0 comments
Please sign in to leave a comment.