Bug Bounty & Responsible Disclosure
At Nirvana, security is at the heart of everything we do. We deeply appreciate the work of the security community and welcome responsible disclosures of vulnerabilities that help us keep our platform and customers safe.
Found a Vulnerability?
If you believe you’ve discovered a security issue in our systems, products, or services, we want to hear from you. Please share the details with us so we can investigate and address it promptly.
We encourage responsible disclosure and are committed to working with security researchers in good faith.
What We Ask From You
To qualify for recognition and/or reward, please:

Avoid privacy violations, data destruction, or service disruption

Do not exploit the vulnerability beyond what’s necessary to prove its existence

Refrain from publicly disclosing the vulnerability until we’ve resolved it

Respect out-of-scope systems and testing boundaries (e.g., phishing, DDoS)
How to Submit
Please email us at security@nirvanatech.com with the following
A detailed description of the issue
Steps to reproduce the vulnerability
Any relevant screenshots, logs, or proof-of-concept code
Rewards
Eligible submissions may receive a monetary reward
Please note: Only issues that are new, reproducible, and within scope are eligible for reward. Duplicate or low-impact issues may not qualify.
Based On
Please note: Only issues that are new, reproducible, and within scope are eligible for reward. Duplicate or low-impact issues may not qualify.
Thank you
For helping us protect our customers and our mission. We’re grateful for your contributions to a safer internet.
