# BugHunter AI by Qyntraix Global Cyber Defense

Canonical website: https://bughunterai.qyntraix.in/
Legacy entry point: https://bugbounty.qyntraix.in/
Publisher: https://qyntraix.in/

## Product Overview
BugHunter AI is an offensive cybersecurity research platform and bug bounty workspace developed by Qyntraix Global Cyber Defense. It provides structured security methodology covering 10,150 vulnerability checks, 21 attack surface reconnaissance modules, 30 curated security tools, an AI offensive assistant, and an automated vulnerability disclosure report builder.

## What is BugHunter AI?
BugHunter AI is designed for ethical hackers, independent bug bounty researchers on platforms like HackerOne and Bugcrowd, penetration testers, and offensive security teams who require comprehensive testing checklists and publication-ready disclosure documentation.

## Vulnerability Disclosure Program (VDP) & Safe Harbor
- Qyntraix operates an official good-faith Vulnerability Disclosure Program at https://bughunterai.qyntraix.in/vulnerability-disclosure
- Safe Harbor protects ethical security researchers testing in-scope assets (*.qyntraix.in) in good faith.
- Monetary bounties are not currently guaranteed (MONETARY_REWARD_ENABLED = false).
- Valid, verified responsible disclosures receive Hall of Fame credit, official Letters of Appreciation, and social media recognition with researcher consent.
- Hall of Fame: https://bughunterai.qyntraix.in/hall-of-fame

## Scope
- IN SCOPE: Approved Qyntraix-owned digital properties (*.qyntraix.in, api.qyntraix.in, bughunterai.qyntraix.in, vyrnex.qyntraix.in).
- OUT OF SCOPE: Cloudflare, Render.com, Razorpay, GitHub, third-party email providers, and customer environments.
- PROHIBITED: Denial of Service (DoS/DDoS), ransomware, malware, credential stuffing, brute-forcing, phishing, and physical security attacks.

## Security & Authentication Model
- Authoritative Single Sign-On (SSO) with PKCE (RFC 7636).
- Secure HttpOnly session management.
- Cryptographic signature validation for payments and entitlements.
- Private reports and customer findings remain strictly unindexed and private.

## Public Resources
- Home: https://bughunterai.qyntraix.in/
- Vulnerability Disclosure: https://bughunterai.qyntraix.in/vulnerability-disclosure
- Hall of Fame: https://bughunterai.qyntraix.in/hall-of-fame
- Security Policy: https://bughunterai.qyntraix.in/.well-known/security.txt
- Pricing: https://bughunterai.qyntraix.in/pricing
- Main Qyntraix Organization: https://qyntraix.in/