Omarchy launches $100,000 bug bounty program on HackerOne

Omarchy now has an official bug bounty program on HackerOne! The Omacom Foundation has funded it with $100,000 for bounties, so researchers who find a real vulnerability and report it privately can now get paid for their work.

HackerOne gives researchers a familiar place to submit their findings, follow along as we work on a fix, and collect their bounty. It also gives the Omarchy Security Team a proper workflow for triaging all the reports coming in. If you’d rather not create a HackerOne account, you can still email security@omarchy.org. The security page has all the details on what we consider a vulnerability and how to report one.

To lead all of this, I’m thrilled to announce that Mehmet İnce is joining Omarchy Core as our head of security! Mehmet has been a key member of the Omarchy Security Team, and now he’ll be setting the direction for how we keep Omarchy safe, from running the bounty program to making sure security is built into everything we ship.

Thanks to our patrons, we can put real money behind making Omarchy secure. We’re grateful for their patronage.

Welcome to Omarchy Core, Mehmet! Let’s make Omarchy as secure as it is beautiful.