Report a security vulnerability
The Mellowtel bug bounty program is not active yet.
We have not launched the program and are not currently paying bounties. The scope, rules, and reward tiers below are planned and may change before launch. We will update this page when the program officially opens.
In the meantime, private security reports are still welcome. If you believe you have found a security vulnerability, please let us know right away in private at info@mellowtel.com or reach out to us on Discord.
Once launched, the program will initially focus on the mellowtel-js library. We are still defining the full scope and response targets and will publish them here when they are ready.
Planned bounties will range from $25 to $15,000 once the program is live.
The bug bounty program is not active yet and no bounties are being paid at this time. Security reports are still accepted.