Digital Armaments confirms the importance of undisclosed vulnerabilities and exploit code that are discovered and not disclosed by security experts and security groups (crew). Today the amount of these undisclosed vulnerabilities and exploit code is constantly increasing. For this reason of the Digital Armament goal is involving leading experts in its Digital Armaments Contribution Program.

The Digital Armaments Contribution Program offers a new way to involve security experts. Digital Armaments wants to involve leading security experts in a constant collaboration and make them be part of Digital Armaments Team. For this reason Digital Armaments recognize the highest fee for submitted vulnerability.

How does it work?

1. The researchers submits to Digital Armaments Team the vulnerability and/or exploit code for a evaluation
2. Researchers will receive confirmation with a submission ID that will help them to recognize the specific vulnerability
3. Digital Armaments will make an offer within the next 5 working days
4. Researchers will accept the offer and assign the exclusivity of information to Digital Armaments
5. Researcher either will be paid (with available method).
6. Digital Armaments will eventually notify product vendor of the vulnerability.
7. When a patch is available Digital Armaments can decide to release a security advisory. Full credit is given to the researcher.

Vulnerability Evaluation Criteria

1. Amount of detail provided
2. Kind of information shared: vulnerability, exploit code, both
3. Diffusion of the affected product.
4. If the affected product is high value (example: DNS, routers, firewalls)
5. The attack is direct or need some action from the victim.
6. Kind of applications, devices, operating systems are affected.
7. The gain that vulnerability gives: command execution, privilege escalation, partial access, data access.

Payment Method
Digital Armaments will make an offer for any vulnerability or exploit code submitted.

Two methods of paymenth - Paypal and Western Union - are available. Availability and preferences are detailed in the following scheme: