01
More eyes on risk
Researchers bring different skills and approaches to finding weaknesses in your approved systems.
LOCAL TALENT. SHARED SECURITY.
Good hunters.
Stronger
defences.
Bring fresh eyes to your security. A private bug bounty programme connecting Jamaican businesses with security researchers.
+
+
01 / DISCOVER
Look closer.
Look closer.
PERMISSION FIRST. ALWAYS.
A STRONGER SECURITY COMMUNITY
Different perspectives.
One shared purpose.
Every business sees its systems one way. A researcher sees what might have been missed.
Bug Bounty Jamaica helps businesses work with local security talent to identify weaknesses and support their resolution. Researchers get an opportunity to apply their skills and receive rewards under agreed programme terms.
FOR BUSINESSES
Put your security
under a different lens.
Invite fresh perspectives into an agreed testing environment, with clear boundaries from the start.
02
Keep looking closer
An ongoing programme can help you uncover issues as systems and services change.
03
Reward useful findings
Set clear eligibility and reward terms so researchers understand what makes a valid submission.
Start with your systems, goals and testing boundaries.
Discuss a programme ↗
01 curiosity .start()
02 permission .confirm()
03 scope .respect()
04 evidence .collect()
05 findings .report()
A good finding starts with
a responsible approach.
a responsible approach.
FOR SECURITY RESEARCHERS
Your curiosity.
A positive impact.
Help Jamaican businesses find security weaknesses while building your practical experience.
- Apply your skills to real security challenges.
- Provide clear evidence and practical explanations.
- Earn rewards where programme terms provide for them.
Participation, access and rewards depend on the programme’s agreed terms.
HOW IT WORKS
Clear scope.
Better collaboration.
A shared understanding helps businesses and researchers work together responsibly.
Agree the boundaries
Define approved assets, testing methods, exclusions, reporting routes and reward terms.
Invite researchers
Give approved participants the information they need to test within the agreed scope.
Report and review
Document the issue, evidence and impact so the business can assess the finding.
Fix and follow through
Address confirmed weaknesses and manage eligible rewards under the programme rules.
What is a private bug bounty programme?
It is an invitation-based arrangement where approved researchers look for security weaknesses in specified systems. The business sets the testing rules and any rewards in advance.
Can I start testing a business now?
No. You need explicit written authorisation for the assets and methods involved. An interest in the programme, or a link on this website, is not permission to test.
What can a business include in the scope?
Potential assets include websites, web applications and other systems the business owns or is authorised to include. Scope and exclusions must be agreed before testing begins.
How much can a researcher earn?
There is no universal reward amount. Availability, eligibility and amounts depend on the programme’s published or agreed terms. Contact the team for details before participating.
Does this replace a penetration test?
The two serve different purposes. A penetration test is a planned assessment with an agreed scope and reporting period. A bug bounty programme invites ongoing contributions under its own rules. We can help you decide what fits your needs.
BUSINESSES. RESEARCHERS. ENTHUSIASTS.
Let’s make Jamaica
harder to compromise.
Tell us what you want to protect, or how you would like to contribute.
FOR YOUR BUSINESS
Discuss your bug bounty programme.
Tell G5 about your organisation and the systems you want to protect. Please do not include passwords or sensitive vulnerability evidence in this enquiry form.