REGISTRATIONS CLOSED · 30 SPOTS FILLED · BENGALURU

LIVE BUG BOUNTY

30 HACKERS 24 HOURS

A 24-hour, on-site adversarial event at Juspay HQ. Thirty of the sharpest security researchers, one live target surface, and a ₹3,50,000 pool on the table. Registrations are now closed — stay tuned for the next Live Bug Bounty.

// what's the arena?
TOTAL BOUNTY POOL₹3,50,000
30 HACKERS
24 HOURS
1 LIVE TARGET
Juspay OfficeBengaluru, India
12 – 13 September24 hours, on-site
RegistrationsClosed
SCROLL TO ENTER
01 — The Arena

What you're walking into

No CTF props, no staged boxes. One live production-grade target, hardened and monitored, opened up for 24 hours to a hand-picked room of researchers hunting real, reproducible impact.

// SCOPE

A real target

Payment-grade web and API surface. Full scope, rules of engagement, and test credentials handed to selected hackers on arrival.

// PACE

24 hours, live

Triagers on the floor the whole time. Valid reports are reviewed and rewarded as they land — the leaderboard moves in real time.

// STAKES

₹3.5L pool

Split by severity and originality. Top hunters take home the biggest cuts — plus swag, cred, and a standing invite to what's next.

// ROOM

30 researchers

Curated, capped, in-person. Meals, workstations, and a full night with people who break things for a living.

// APPLICATIONSRegistrations
are closed

Applications closed on 05 September. The 30 seats are being allocated from that pool — selected researchers are emailed by 08 September.

02 — If you're in

Before you arrive

You'll get an email with your MakeMyPass entry and full venue details. Four things to sort out before the doors open.

// ENTRY

Laptop, toolkit, ID

Bring your own machine, your own tooling, and a government ID. No ID, no entry — the desk can't make exceptions.

// NDA

Sign before scope

The NDA goes out with your confirmation and must be signed before scope is handed out. Do it early — it gates your kickoff packet.

// TRAVEL

Travel & Accommodation

Travel support is not available. Please make your own travel arrangements for the event.

// LOGISTICS

Size, food, contact

Hoodie size, dietary preference and an emergency contact — send all three in that same reply so we can set your desk up.

Power, network, meals and caffeine are on us. Scope, rules of engagement and test credentials are handed out at kickoff.

03 — Next time

If you didn't make it this time

1000+ applied for 30 seats, so a lot of strong researchers didn't get one. This won't be the last. Keep an eye out for the next Juspay live hacking event — we'll announce it here and by email.

APPLICATIONS RECEIVED1000+
30 SEATS
1 ROOM
MORE TO COME

In the meantime, our scope is always open. Found something? Report it through our Vulnerability Disclosure Program — it runs year-round, and it's the same team reading.

Report a vulnerability
04 — FAQ

Good to know

I applied — how do I check my status? +
You don't need to. Selected researchers are emailed by 8 September. No email by then means you weren't selected this round.
Can I still apply? +
No. Applications closed 5 September and the 30 seats are being allocated from that pool.
I found a bug in the meantime — where do I send it? +
Our Vulnerability Disclosure Program. It runs year-round, and it's the same team reading.
Something else? +
Email bugbounty@juspay.in and we'll get back to you.