Skip to main content
Prevent hacks today

Security fueled by competition

Eliminate threats with competitively fueled cyber security monitoring for your organization. Secure your assets against even the latest attacks by enabling leading Azerbaijani researchers to test them 24/7 — and fix vulnerabilities before they become a problem.

Azerbaijan's first bug bounty platform

10+

Programs launched

500+

Ethical hackers

1,500+

Vulnerabilities found

Hackers

Put your skills to work with hundreds of bug bounty programs and hacking engagements.

Privacy

We are committed to ensuring the privacy of your data at every stage of the disclosure process.

Directory

Find new hackable targets and report vulnerabilities to the organisations that own them.

How do we work?

What is Qarabug?

Qarabug is a bug bounty platform launched by Azerbaijani security engineers, available to ethical hackers, private companies and public institutions. Local companies create and announce their own bug bounty programs, and ethical hackers participate by ethically exploiting and submitting vulnerabilities directly to those companies. For each valid vulnerability, hackers are awarded a bounty.

  1. A company publishes a program

    Define scope, rules of engagement and reward ranges.

  2. Researchers hunt and report

    Findings arrive with reproduction steps and CVSS scoring.

  3. Qarabug triages, you fix and reward

    Our team validates every submission before it reaches your queue.

Hack for good

Bug Bounty Services

Bug bounty programs are incentivised, results-focused programs that encourage security researchers to report security issues to the sponsoring organisation. They create a cooperative relationship between researchers and organisations, letting researchers earn rewards for identifying application vulnerabilities without the risk of legal action — and helping companies find and resolve issues they might never have discovered otherwise.

  • Private programs
  • Public programs
  • Vulnerability disclosure
  • Managed triage

Trusted by

Banks, government institutions and technology companies across Azerbaijan.

Ready to find your vulnerabilities first?

Launch a program, or tell us what you're trying to protect — our team will walk you through scope and rewards.