Policy and restrictions
Disclosure needs written consent. Automation is bounded; disruption, social engineering, physical intrusion and brute force are prohibited.
Eligibility and submission status
Platform membership and researcher-identified accounts are required; findings must be original and validated. Internally known findings count as duplicates. Platform eligibility requires age 18, or 16 with guardian permission, plus legal and employer authorization.
Logged-out policy and login invitation do not independently establish current intake status.
Advertised rewards
No monetary bounty schedule; currency and numeric bounds remain null.
Advertised schedules and exceptional ceilings are not individual award evidence.
Published scope snapshot
Captured 2026-10-03. Check the current policy for changes before participating.
| Asset | Type | Group / eligibility |
|---|---|---|
*.app.spacelift.dev | Wildcard | Tier 2 |
app.spacelift.devPublished location: http://app.spacelift.dev | URL | Tier 2 |
spacelift.devPublished location: http://spacelift.dev | URL | Tier 5 |
| Asset | Type | Group / eligibility |
|---|---|---|
| No rows captured. This does not establish that the program has no assets or restrictions. | ||
Review limitations
- Policy acceptance language and recent activity do not verify the authenticated intake state.
- No announcement archive or complete revision history was established. Expanded safe-harbor terms and other incorporated documents remain unreviewed.
- Logged-out review; summaries omit inventories and procedures. Live terms prevail; this record grants no authorization.
Sources and provenance
- Spacelift Vulnerability Disclosure Program policy Spacelift / Intigriti · reviewed 2026-10-03
- Intigriti Researcher Terms & Conditions Intigriti · reviewed 2026-10-03
- Published Intigriti asset table Spacelift · reviewed 2026-10-03
Record reviewed 2026-10-03. Snapshot 53796974ace8. Open the complete JSON contract.