Terms of Service

1Definitions

• "OOOSEC" refers to OOOSEC Pte. Ltd., a company incorporated in Singapore.
• "User" refers to any individual or entity that accesses or uses the Platform.
• "Researcher" refers to a User who participates in bug bounty programs by identifying and reporting security vulnerabilities.
• "Program Owner" refers to a User who creates and manages a bug bounty program on the Platform.
• "Submission" refers to a vulnerability report submitted by a Researcher through the Platform.
• "Reward" refers to monetary or other compensation paid to Researchers for valid Submissions.

2Eligibility

To use the Platform, you must:

• Be at least 18 years of age or the age of majority in your jurisdiction
• Have the legal capacity to enter into binding agreements
• Not be located in, or a citizen or resident of, any country subject to comprehensive sanctions
• Complete any required identity verification (KYC) procedures

Researcher Guidelines

As a security researcher, you agree to:

• Only test against systems and assets explicitly listed in scope
• Not access, modify, or delete data belonging to other users
• Not perform denial of service attacks, social engineering, or physical attacks
• Report vulnerabilities promptly and not disclose them publicly until authorized
• Provide clear, detailed reproduction steps in your reports
• Use rate limiting (max 1 request per second) for any automated testing
• Comply with all applicable laws and regulations

Program Owner Guidelines

Organizations running bug bounty programs agree to:

• Provide clear scope definitions and reward structures
• Respond to submissions within stated timeframes
• Pay bounties as specified in their program policies
• Not retaliate against researchers acting in good faith
• Maintain accurate program and contact information

Safe Harbor

When conducting security research within scope and in accordance with these terms, participating organizations agree not to pursue legal action against researchers.

Payments and Rewards

Bounty payments are processed through multiple payment methods including cryptocurrency and traditional banking. Payment amounts are determined by Program Owners based on vulnerability severity and impact.

• Rewards are determined solely by Program Owners
• OOOSEC does not guarantee any specific reward amount
• You are solely responsible for applicable taxes on rewards received
• OOOSEC may report payments to tax authorities as required by law

7Intellectual Property

Vulnerability reports and their contents remain the intellectual property of the researcher until a bounty is paid. Upon payment, the Program Owner receives a non-exclusive license to use the report for remediation purposes.

The Platform and its contents are owned by OOOSEC or its licensors and are protected by intellectual property laws. You may not copy, modify, or distribute Platform content without our express written permission.

Limitation of Liability

IN NO EVENT SHALL OOOSEC'S TOTAL LIABILITY EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID TO OOOSEC IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED SINGAPORE DOLLARS (SGD 100).

9Indemnification

You agree to indemnify, defend, and hold harmless OOOSEC and its officers, directors, employees, and agents from any claims, damages, losses, or expenses arising from: (a) your use of the Platform; (b) your violation of these Terms; (c) your violation of any third-party rights; or (d) your Submissions or content.

Dispute Resolution

11Modifications

OOOSEC reserves the right to modify these Terms at any time. We will notify you of material changes by posting the updated Terms and updating the "Last updated" date. Your continued use of the Platform after changes constitutes acceptance of the updated Terms.

12General Provisions

• Entire Agreement: These Terms, together with our Privacy Policy and Responsible Disclosure Policy, constitute the entire agreement between you and OOOSEC.
• Severability: If any provision is found unenforceable, the remaining provisions continue in full force.
• Waiver: Failure to enforce any right does not constitute a waiver of that right.
• Assignment: You may not assign these Terms without OOOSEC's written consent. OOOSEC may assign without restriction.

Contact

For questions about these Terms, contact us at: