# Bug Bounty Program? **URL:** \ **Category:** Informal\ **Created:** [July 13, 2026, 11:14pm UTC](https://forum.infinityfree.com/t/bug-bounty-program/119717 "2026-07-13T23:14:12Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![BugHunter](https://forum.infinityfree.com/letter_avatar/bughunter/32/6_22734026db12803ebb3e059622ac3534.png) [@BugHunter](https://forum.infinityfree.com/u/BugHunter)\ **Post date:** [July 13, 2026, 11:14pm UTC](https://forum.infinityfree.com/t/bug-bounty-program/119717/1 "2026-07-13T23:14:12Z")
Hello There, Do you have bug bounty program that finding any vulnerability here will report to you and gain bounty? ---
**Author:** ![dan3008](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/dan3008/32/68577_2.png) [@dan3008](https://forum.infinityfree.com/u/dan3008)\ **Post date:** [July 13, 2026, 11:19pm UTC](https://forum.infinityfree.com/t/bug-bounty-program/119717/2 "2026-07-13T23:19:24Z")
Welcome to the forum No there isn’t a bug bounty program. This is free hosting, and as such, there isn’t the cash flow to be able to offer a boutny for finding bugs\vulnerabilities. ultimately the reward for finding bugs\vulnerabilities is that once they are fixed, your site here runs better and your account is more secure. All that being said, given that you are responsible for building and securing your own site, the only thing you could really look to find bugs and vulnerabilities in are the security system and the client area. ---
**Author:** ![Admin](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/admin/32/36437_2.png) [@Admin](https://forum.infinityfree.com/u/Admin)\ **Post date:** [July 14, 2026, 10:57am UTC](https://forum.infinityfree.com/t/bug-bounty-program/119717/3 "2026-07-14T10:57:44Z")
For you: no, there is no bug bounty program. For actual security researchers, we have a security.txt file on our website referencing a page on our website for more information. But since you were not able to find these obvious pages, I have very little faith in your “research” skills. Please pay very close attention to the page with additional information, mainly the parts where it says what we do and don’t consider valid vulnerabilities. ---
**Author:** ![Aera23](https://forum.infinityfree.com/letter_avatar/aera23/32/6_22734026db12803ebb3e059622ac3534.png) [@Aera23](https://forum.infinityfree.com/u/Aera23)\ **Post date:** [July 24, 2026, 4:58pm UTC](https://forum.infinityfree.com/t/bug-bounty-program/119717/4 "2026-07-24T16:58:03Z")
[https://www.infinityfree.com/security.txt](https://www.infinityfree.com/security.txt) seems to be 404 rn ---
**Author:** ![dan3008](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/dan3008/32/68577_2.png) [@dan3008](https://forum.infinityfree.com/u/dan3008)\ **Post date:** [July 24, 2026, 5:23pm UTC](https://forum.infinityfree.com/t/bug-bounty-program/119717/5 "2026-07-24T17:23:48Z")
That’s because that’s not where it is stored. There is a standard directory these files are often stored in that is well known to security experts but not the general public ---
**Author:** ![Admin](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/admin/32/36437_2.png) [@Admin](https://forum.infinityfree.com/u/Admin)\ **Post date:** [July 24, 2026, 8:10pm UTC](https://forum.infinityfree.com/t/bug-bounty-program/119717/6 "2026-07-24T20:10:32Z")
> [@Aera23](#): > > seems to be 404 rn And it has always been, because that’s not the URL where a security.txt file is published. The actual URL is here. Fully working, as it always has. [https://www.infinityfree.com/.well-known/security.txt](https://www.infinityfree.com/.well-known/security.txt) For more information, please read the official security.txt file website, that has more information about what the file contains, and where it can be found: > **[security.txt](https://securitytxt.org/)** > > A proposed standard that allows websites to define security policies. ---
**Author:** ![Aera23](https://forum.infinityfree.com/letter_avatar/aera23/32/6_22734026db12803ebb3e059622ac3534.png) [@Aera23](https://forum.infinityfree.com/u/Aera23)\ **Post date:** [July 26, 2026, 12:29pm UTC](https://forum.infinityfree.com/t/bug-bounty-program/119717/7 "2026-07-26T12:29:08Z")
thanks for letting me know, I forgot about the .well-known/ convention. ---
**Author:** ![system](https://infinityfree-forum-uploads.s3.dualstack.eu-central-1.amazonaws.com/original/3X/b/0/b024fd3fa88bae093c9576e55c2c94e33f890206.svg) [@system](https://forum.infinityfree.com/u/system)\ **Post date:** [August 10, 2026, 12:29pm UTC](https://forum.infinityfree.com/t/bug-bounty-program/119717/8 "2026-08-10T12:29:23Z")
Closed on August 10, 2026, 12:29pm UTC This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.