18F / tts-buy-bug-bounty

Solicitation and acquisition documents created for the TTS Bug Bounty program that can be reused by other government agencies and organizations.

Other

19 stars 15 forks source link

Elaborate on "all costs paid directly to the researchers" #6

Closed reedloden closed 7 years ago

reedloden commented 7 years ago

Question/Comment on TTS Bug Bounty draft RFO

Name and affiliation

Reed Loden Director of Security HackerOne, Inc.

Section of RFO documents

Section 4.0 Type of Contract

Question/Comment

Can you please elaborate on what you mean by "all costs paid directly to the researchers"?

MichelleMcNellis commented 7 years ago

The bounty pool funds 100% represent rewards -- money paid out as bounties. Fees associated with this contract should be represented within other CLINs, if applicable.