Payouts scale with severity, not guesswork.

Bounties are held in escrow at a 0% fee, released when a report is resolved, and every disclosed finding is numbered on the Grid under a safe harbor with a version.

Programs on Matrix

Every public program: what is in scope, what it pays, and how fast it answers.

Loading…

View all programs

Submit. Triage. Resolve.

The same three-step standard Pratimāna runs everywhere else — applied to every report that comes through the platform.

  1. Researcher reports a finding

    A structured report against a published scope — asset, severity, reproduction steps, and impact, all in one format.

  2. The program validates it

    The program's triage team reproduces and rates the finding before it ever reaches engineering — no noise, no duplicates.

  3. Fix, pay, and re-test

    You fix on your timeline, we re-test to confirm, and the researcher gets paid the moment it's closed out.

Standings

The top five by reputation.

Loading…

Latest activity

The last five things that happened on Matrix.

Loading…

What a severity pays

Every program publishes its own range — this is a representative table so you know what to expect before you start hunting.

SeverityTypical payoutResponse target
Critical$2,500 – $15,000< 4 hours
High$800 – $4,000< 12 hours
Medium$250 – $1,000< 24 hours
Low$50 – $250< 48 hours