X-Road Bug Bounty

Effective June 28, 2026, the X-Road Bug Bounty Program will temporarily suspend monetary rewards for new submissions. We greatly appreciate continued responsible vulnerability reporting, and all confirmed vulnerabilities will continue to be publicly credited to their submitters in the corresponding security advisory and release notes.