Request Assessment — Reverse Bug Bounty

Company name

Your name

What should we test?

Web application API Mobile app Cloud / infrastructure AI / LLM integration CI/CD pipeline Other

Target URLs or domains

List the domains, URLs, or IP ranges you'd like tested. One per line.

Ownership verification

We require proof that you're authorized to request testing on these targets. Choose one method:

DNS verification (recommended)
After submission, we'll provide a unique TXT record to add to your domain's DNS. This proves domain control without sharing credentials. WHOIS email verification
We'll send a verification code to the email address listed in the domain's WHOIS record. File verification
Place a verification file at a specific URL on your server (e.g. example.com/.well-known/rbb-verify.txt). KvK number (Netherlands only)
Provide your Dutch Chamber of Commerce registration number for business verification.

KvK number

8-digit Dutch Chamber of Commerce registration number.

Additional context (optional)

How did you find us? (optional)

By submitting this form, your data will be processed to respond to your inquiry and assess the feasibility of security testing (Art. 6(1)(b) GDPR). We retain your data for 12 months after last contact, then delete it. You can request access, correction, or deletion of your data at any time through this form. Read our full privacy policy.

✓

Scope received

One more step — verify you control the target domain.

Verification instructions

DNS changes can take up to 15 minutes to propagate. You can close this page and we'll check automatically.

← Back to homepage

Request an assessment

Scope received

Verification instructions