Rewards. Simbase does not pay cash bounties. Valid, in-scope reports may receive Simbase platform credit and/or free SIM cards, at our discretion, plus acknowledgment. There is no monetary payout of any kind and no exceptions are made based on severity. Please do not submit if a cash payout is a condition for your report.
We will not respond to reports that are out of scope, that consist of automated scanner output without manual validation, or that duplicate an existing report.
Timeline. Submissions are acknowledged automatically. A human assessment follows within 10 business days. Our coordinated disclosure window is 90 days.