Dashboard · demo session
Welcome back, @saltmarsh
Earned, last 12 months
$558k
Rank · 90d
#2
Pending bounties
$5,000
floor of agreed bands
Reputation
16,930
signed by programs
Signal
7.1
Streak
18w
SLA watch
- Treasury export job runs with the requesting user's SAML attributes from a stale assertionTriagedBounty due · 20 Nov 2026, 15:00 UTC7d left
When a program misses a clock you see it here first, and its response score drops on its public page the same minute.
Your reports · 3
Public profile →- highPGN-10307· undisclosed
Treasury export job runs with the requesting user's SAML attributes from a stale assertion
Under remediation.
—Triaged - criticalPGN-10482
SAML assertion accepted after signature element is relocated under a wrapped Response
A second Assertion placed before the signed one was processed by the relying-party parser while the signature check ran against the original. Proof used two researcher tenants.
$96,000Resolved - highPGN-10416· undisclosed
Open-banking consent screen approves scopes beyond those displayed
Not disclosed. Private program.
$20,000Resolved
Last resolved
critical$96,000
SAML assertion accepted after signature element is relocated under a wrapped Response
Stratos ID · triage 3.5h
Your specialties
SAMLOAuthSession
Programs below are matched on these. Change them in settings to retune recommendations.
Recommended for you
Where your specialties pay best right now
Stratos ID
Identity
Identity provider and passkey infrastructure for 3,000 SaaS products.
Critical
$30k – $120k
Median triage
5h
Response efficiency99%
Escrowed · $2.1Mqueue 1
Ledgerline
Fintech
Treasury and payment rails for mid-market finance teams.
Critical
$15k – $50k
Median triage
9h
Response efficiency97%
Escrowed · $420kqueue 4
Meridian Health
Healthcare
Patient scheduling and records exchange for 1,900 clinics.
Critical
$12k – $40k
Median triage
22h
Response efficiency91%
Escrowed · $260kqueue 7