Keep bounty rules separate from ordinary help requests and vulnerability-report intake.
Researcher Program
Bug Bounty Program
Program rules, eligible targets, rewards, and safe-harbor expectations.
Eligible targets
Publish in-scope services and explicit exclusions.
Severity and rewards
Describe triage expectations, severity rubric, and reward decisions.