Mediation Process for Bounties

At Cantina, we strive to create a collaborative environment where researchers and clients can work together to enhance security. Our mediation process is designed to handle disputes that arise during the evaluation of bug bounty submissions. This document outlines the steps involved in the mediation process, the roles of each party, and the guidelines for resolving disagreements.

Mediation Process

1. Submission of Finding

• Researcher: Submits a finding through the Cantina platform.

• Client: Reviews the finding and provides initial feedback/decision.

2. Disagreement

Disagreements may arise in the following scenarios:

• The client disagrees with the finding or its severity.

• The researcher disagrees with the client's decision.

3. Escalation to Cantina

If a resolution cannot be reached between the researcher and the client, either party can escalate the finding to Cantina for mediation.

4. Triage and Solution Proposal

• Cantina Triaging Team: Reviews the finding and comments from both parties.

• Proposal: Proposes a fair solution based on triaging guidelines.

• Decision: The team adds their decision on the finding's validity.

5. Final Decision

• Client: Has the final say on whether to accept or reject the proposed solution.

Handling Client Disagreements

Default to Client's Perspective

While we respect the client's perspective, we also ensure that our platform maintains high standards of fairness and integrity.

Respectful Public Disclosure

We encourage all parties to resolve disputes amicably and encourage respectful public disclosure if allowed. Our goal is to maintain a professional and respectful environment for all participants.

Client Rejection Policy

If a client rejects more than five findings in one year that we believe are valid, we reserve the right to take the following actions:

• Review: Conduct a thorough evaluation of the client's participation on our platform and take appropriate action to ensure platform integrity is maintained for all participants.

Communication Guidelines

During Mediation

• Direct Communication: Cease direct communication with the other party during mediation.

• Reporting: All concerns and additional information should be reported directly to Cantina in the report page.

Status Updates

• Researcher: Can request status updates by reaching out to Cantina directly in the relevant bug report thread.

Conclusion

Our mediation process is designed to ensure a fair and transparent resolution to disputes. By following these guidelines, we aim to create a win/win outcome for both researchers and clients, fostering a collaborative and secure environment.