Continuous security from the network that doesn't charge to show up.

No. Listing a programme on AuditOne is free. There are no monthly fees, no SaaS subscriptions, and no charges to top up your bounty pool. The only fee is 5% on each payout — and that 5% is deducted from the hunter's reward, not from your pool. Every dollar in your pool reaches a hunter.

For Web3, we generally recommend a critical bounty of 5–10% of TVL (capped if the TVL is very large), with high findings at 1–3% of TVL and lower severities sized in absolute terms. For Web2 and AI systems, we work in absolute USD figures based on the data and business impact at stake. The matrix in the section above is the starting point for most programmes — we refine it with you in the onboarding call.

AuditOne handles initial triage: reproducibility, scope verification, severity classification, deduplication. Confirmed findings are forwarded to your team with our recommended classification and payout. You retain final approval authority on every payout — we never pay out without your sign-off. Critical findings are escalated to your team immediately, regardless of where they are in the triage queue.

Not by default. You can choose to fund payouts directly on each confirmed finding (most common) or pre-fund an escrow held by AuditOne. Escrow signals strong commitment to hunters and tends to attract more participation, but it ties up capital. Most projects start without escrow and add it later as the programme matures.

Payment can flow either through AuditOne (we receive your transfer and disburse to the hunter, less the 5% platform fee) or directly from you to the hunter (we send the wallet address or bank details after KYC verification). The flow is configurable in your programme agreement. Web3 payouts are typically in stablecoins; Web2 and AI payouts are commonly USD or EUR via bank transfer.

Yes. The programme can be paused, scope-changed, or fully cancelled at any time. Pre-existing valid submissions in the triage queue at the time of cancellation are still eligible for payout under the original terms. You retain full discretion over which findings to pay out, subject to the agreement you signed.

If you've completed a smart contract audit with us, your bounty programme is already partly funded: 20% of your audit fee is automatically allocated to the bounty pool, listed and live the day your contract deploys. You can top up the pool over time at zero platform fee. This handoff exists for smart contract audits today; we are extending it to other audit types in 2026.

Three things. Fee structure — free to list, 5% on payout paid by the hunter, vs. industry-standard 10–20% paid by the project. Cross-domain coverage — our hunter network covers Web3, Web2 and AI under one programme, vs. specialising in only one domain. Lifecycle integration — we are the only platform that automatically funds bounty pools from completed audit engagements. We are the right choice when fees matter, when you have multi-stack exposure, or when you want audit and bounty under one provider.

Only under the terms of your programme. The default agreement gives the project sole discretion over disclosure, with a recommended 90-day post-patch window before public write-ups are permitted. Many projects encourage disclosure as social proof; some require permanent NDA. Both are supported.