Done

Bug bounty

Security is not provided by an internal team alone. In our bug bounty programme, security researchers responsibly report vulnerabilities they find in the apps and infrastructure and are rewarded. Reports are reviewed through a process, fixed and, if needed, announced.

What is included?

What this service includes

  • Clear disclosure process and scope
  • Rewards for researchers
  • Responsible disclosure policy
  • security.txt and security contact address

Who it is for

Who it suits

  • Companies that question their supplier's security maturity
  • Organisations that go through security audits
  • Those who want to rely on the infrastructure as a white label brand

How it starts

Get started in three steps

  1. 01

    Review the documents

    The security whitepaper, open-source code and the Trust Centre are public.

  2. 02

    Send your questions

    You send your security team's questions and questionnaires by email.

  3. 03

    Written answer

    Our technical team prepares the answers and the required agreements during the quote process.

Opportunity

Launch your own VPN brand

Anyone with an audience can sell a VPN. We operate the apps, servers and panel; the brand, price and customers are yours.

FAQ

Frequently asked questions

Are vulnerabilities that are found reported to customers?

Where there is an impact, we publish an announcement under our responsible disclosure policy.

Can we run our own security test?

Yes, provided we discuss the scope in advance; we make a plan that does not affect live users.

Can I buy Business from the plans on the site?

No. Colitu Business is not among the plans on the site. You fill in the form or write to support@colitu.com; our team asks about your needs and sends the quote by email.

Security and compliance

Other services in this group

Get a quote

Let's talk about your company

Business is not sold through the plans on the site. Fill in the form; our team will ask about your needs and send the quote by email.

  • We do not ask for card details
  • Correspondence in Turkish, English or Russian
  • Your details are not added to a newsletter list

If you prefer email: support@colitu.com

Team size
Service you are interested in

Your details are used only for the quote; they are not added to a newsletter list.