We use cookies for analytics and to serve ads. Accept to enable Google Analytics and AdSense. You can decline to stay opt-out.
Bug bounty/disclosure program pages with WebPage + Offer, FAQs, and breadcrumb navigation.
Defines the disclosure page and its summary.
Expresses the bounty or disclosure offer terms.
Answers scope, timeline, and safe harbor questions.
Provides navigation context for the bounty page.
Ensure every applicable required property is present in your implementation. Nested props reference their parent objects (for example, `offers.priceCurrency`).
Paste as a single script tag. Keep product details, offer data, shipping/returns, and FAQ answers in sync with the page.
[
{
"@context": "https://schema.org",
"@type": "WebPage",
"@id": "https://www.example.com/security/bug-bounty#page",
"name": "Bug Bounty Program",
"description": "Report security vulnerabilities and earn rewards under our disclosure policy.",
"url": "https://www.example.com/security/bug-bounty",
"inLanguage": "en-US",
"dateModified": "2025-08-18"
},
{
"@context": "https://schema.org",
"@type": "Offer",
"@id": "https://www.example.com/security/bug-bounty#offer",
"name": "Security Bug Bounty",
"description": "Rewards for eligible vulnerabilities based on severity and impact.",
"price": "0.00",
"priceCurrency": "USD",
"availability": "https://schema.org/InStock",
"eligibleRegion": "Worldwide",
"url": "https://www.example.com/security/bug-bounty#submit"
},
{
"@context": "https://schema.org",
"@type": "FAQPage",
"mainEntity": [
{
"@type": "Question",
"name": "What is in scope?",
"acceptedAnswer": {
"@type": "Answer",
"text": "Production web apps, APIs, and mobile apps listed in the scope section are eligible."
}
},
{
"@type": "Question",
"name": "How quickly do you respond?",
"acceptedAnswer": {
"@type": "Answer",
"text": "We acknowledge reports within 3 business days and provide updates weekly."
}
},
{
"@type": "Question",
"name": "Do you provide safe harbor?",
"acceptedAnswer": {
"@type": "Answer",
"text": "Yes. Researchers following the policy are protected from legal action."
}
}
]
},
{
"@context": "https://schema.org",
"@type": "BreadcrumbList",
"itemListElement": [
{ "@type": "ListItem", "position": 1, "name": "Home", "item": "https://www.example.com" },
{ "@type": "ListItem", "position": 2, "name": "Security", "item": "https://www.example.com/security" },
{ "@type": "ListItem", "position": 3, "name": "Bug Bounty", "item": "https://www.example.com/security/bug-bounty" }
]
}
]If reward tiers are published, add a separate Offer entry or include tiers in the Offer description.
Yes. Keep the main policy on your domain and link to the submission platform in the Offer URL.