Security · Hall of Fame

Recognition for those who make the web safer.

We thank the researchers who responsibly report the vulnerabilities they discover in CAI-Deceneu. With their consent, we list them publicly under their chosen name/handle, with a short note about their contribution.

🛡️

The Hall of Fame is just getting started

We have not received any vulnerability reports yet. You can be the first! Read the VDP policy, set up PGP, report responsibly, and get public recognition.

VDP policy → Download PGP key
Recognition for the first researcher: The first researcher to report a critical bug gets a mention by name next to the logo in the CAI-Deceneu footer for 12 months.

How to get into the Hall of Fame

✓ Eligible for recognition

  • Valid, reproducible vulnerability
  • Medium / high / critical severity (CVSS score of 4.0 or higher)
  • Responsible report (no disclosure before the patch)
  • Within the scope of the official VDP
  • Consent to be mentioned publicly
  • Timeline coordinated with our team

✗ Not eligible

  • Cosmetic bugs / SEO / typos
  • Spam / brute-force / DoS
  • Public disclosure before the patch
  • Phishing / social engineering
  • Vulnerabilities in third-party providers
  • Actions with malicious intent (extracting real data, blackmail)

Financial bug bounty

For now CAI-Deceneu offers public recognition as the only form of reward.

This page is updated manually whenever a validated report comes in. To be listed, explicitly include your consent to be mentioned publicly in your report: preferred name (real, handle, or anonymous), personal/portfolio URL (optional), a short sentence (max 140 characters) about your contribution.