Security fueled by competition
Eliminate threats with competitively fueled cyber security monitoring for your organization. Secure your assets against even the latest attacks by enabling leading Azerbaijani researchers to test them 24/7 — and fix vulnerabilities before they become a problem.
Azerbaijan's first bug bounty platform
10+
Programs launched
500+
Ethical hackers
1,500+
Vulnerabilities found
Hackers
Put your skills to work with hundreds of bug bounty programs and hacking engagements.
Privacy
We are committed to ensuring the privacy of your data at every stage of the disclosure process.
Directory
Find new hackable targets and report vulnerabilities to the organisations that own them.
What is Qarabug?
Qarabug is a bug bounty platform launched by Azerbaijani security engineers, available to ethical hackers, private companies and public institutions. Local companies create and announce their own bug bounty programs, and ethical hackers participate by ethically exploiting and submitting vulnerabilities directly to those companies. For each valid vulnerability, hackers are awarded a bounty.
A company publishes a program
Define scope, rules of engagement and reward ranges.
Researchers hunt and report
Findings arrive with reproduction steps and CVSS scoring.
Qarabug triages, you fix and reward
Our team validates every submission before it reaches your queue.
Bug Bounty Services
Bug bounty programs are incentivised, results-focused programs that encourage security researchers to report security issues to the sponsoring organisation. They create a cooperative relationship between researchers and organisations, letting researchers earn rewards for identifying application vulnerabilities without the risk of legal action — and helping companies find and resolve issues they might never have discovered otherwise.
- Private programs
- Public programs
- Vulnerability disclosure
- Managed triage
Trusted by
Banks, government institutions and technology companies across Azerbaijan.
Ready to find your vulnerabilities first?
Launch a program, or tell us what you're trying to protect — our team will walk you through scope and rewards.



