GHANA'S SOVEREIGN VDP & BUG BOUNTY PLATFORM

Vulnerability Disclosure, Professional Triage, & Direct Bounties for Ghana's Critical Infrastructure

Scope Hunter connects verified security researchers with Ghanaian financial institutions, telecom providers, state utilities, and educational networks to discover, triage, and remediate software vulnerabilities before exploitation.

Coordinated with CSA Ghana GuidelinesTransparent Payouts in GHSStrict Non-Destructive Testing Rules
Platform Telemetry & Scope Overview
Live Sync
Active Programs8 Verified
Max Bounty CeilingGHS 25,000
Vetted Researchers1450 Registered
Disclosures Processed440 Submissions
Featured Infrastructure Targets
MTN GhanaBounty
Up to GHS 20,000
Bank of GhanaPrivate Tier 3
Up to GHS 25,000
Electricity Co. of Ghana (ECG)Critical VDP
Hall of Fame
Strict Coordinated DisclosureBounty Payouts: GHS

8

Active Programs

1,450

Registered Researchers

440

Disclosures Triaged

GHS 25,000

Top Bounty Ceiling

Coordinated Disclosure Pipeline

How Scope Hunter Powers Responsible Disclosure

A standardized four-step workflow ensuring legal safe harbor for researchers and actionable, high-signal reports for security teams.

01Target Selection

Discover In-Scope Targets

Select from public VDPs or private bug bounties across Ghanaian universities, financial institutions, and telecommunication networks.

Phase 1 Protocol
02Safe Harbor

Test Within Published Rules

Follow explicit testing boundaries, scope assets, and excluded targets. Conduct non-destructive research using designated test accounts.

Phase 2 Protocol
03Structured Payload

Submit Standardized Report

File structured findings specifying vulnerability title, severity (Critical/High/Medium/Low), steps to reproduce, CVSS score, and attachments.

POST /api/reports Payload
"title":string
"severity":string
"stepsToReproduce":string
"cvssScore":string
Phase 3 Protocol
04Verified Payout

Triage & Bounty Settlement

Security analysts verify your submission against the program scope. Valid vulnerabilities earn GHS bounty payouts or Hall of Fame recognition.

Phase 4 Protocol
Active Targets & Scope

From University Portals to Interbank Settlement Systems

Pick where you want to hunt. Explore live vulnerability disclosure programs and cash bug bounties backed by Ghanaian organizations.

View All Programs (8)
GCTU Vulnerability Disclosure Program 2026
VDP

GCTU Vulnerability Disclosure Program 2026

Ghana Communication Technology University is inviting security researchers to help identify vulnerabilities across its online student portal, learning management systems, and public-facing web infrastructure.

Bounty Range

N/A

93%30060
FinSecure Public Bug Bounty
Bounty

FinSecure Public Bug Bounty

FinSecure Bank is inviting security researchers to help identify vulnerabilities across its online banking platform, mobile applications, and merchant payment gateway.

Bounty Range

GHS 100-15,000

33%10060
ECG Critical Infrastructure VDP
VDP

ECG Critical Infrastructure VDP

The Electricity Company of Ghana is launching a vulnerability disclosure program to protect its power distribution systems, customer portals, and prepaid vending infrastructure.

Bounty Range

N/A

78%15035
MTN Ghana Security Bounty
Bounty

MTN Ghana Security Bounty

MTN Ghana invites security researchers to test its mobile money platform, self-service portals, and telecommunications APIs for vulnerabilities.

Bounty Range

GHS 200-20,000

88%450120
GhanaPost Digital VDP
VDP

GhanaPost Digital VDP

GhanaPost GPS is seeking security researchers to evaluate its digital address system, address verification APIs, and public mapping services.

Bounty Range

N/A

65%8022
Bank of Ghana Security Program
Bounty

Bank of Ghana Security Program

The Bank of Ghana is launching a private security program for vetted researchers to assess its regulatory portals, interbank settlement systems, and public APIs.

Bounty Range

GHS 500-25,000

95%5018

Are you a verified security researcher in Ghana?

Submit disclosures, earn reputation points, and unlock access to private Tier-3 financial programs.

Join Scope Hunter
Payout Transparency & Severity Matrix

Clear, Predictable Rewards Scale for Valid Disclosures

Bounties are calculated transparently according to technical severity (P1–P4) and target criticality. Here is how payouts scale across top active Ghanaian programs.

Bank of Ghana Security Program

Private Tier 3

Central Bank & Interbank Settlement

P1 CriticalGHS 15,000 – 25,000

Impact: Unauthorized GIS interbank settlement or RCE

P2 HighGHS 6,000 – 14,000

Impact: Privilege escalation on compliance reporting

P3 MediumGHS 2,000 – 5,500

Impact: IDOR exposing regulatory institution filings

P4 LowGHS 500 – 1,800

Impact: Verbose error information disclosure

Direct GHS SettlementFast SLA Triage

MTN Ghana Bug Bounty

Public Bounty

Mobile Money (MoMo) & Telecom APIs

P1 CriticalGHS 12,000 – 20,000

Impact: Unauthorized MoMo transfer or unverified SIM swap

P2 HighGHS 5,000 – 11,000

Impact: Auth bypass on self-care or stored XSS in merchant portal

P3 MediumGHS 1,500 – 4,500

Impact: IDOR exposing subscriber account data

P4 LowGHS 200 – 1,000

Impact: Reflected XSS requiring interaction

Direct GHS SettlementFast SLA Triage

FinSecure Bank Bounty

Public Bounty

Core Banking & Merchant Gateway

P1 CriticalGHS 8,500 – 15,000

Impact: Balance modification or RCE on core banking

P2 HighGHS 4,000 – 8,000

Impact: Stored XSS on main banking dashboard

P3 MediumGHS 1,500 – 3,500

Impact: CSRF on non-critical balance settings

P4 LowGHS 200 – 1,000

Impact: Information disclosure via verbose error messages

Direct GHS SettlementFast SLA Triage
FOR ENTERPRISES & GOVERNMENT AGENCIES

Launch a Sovereign Vulnerability Disclosure Program in Days

Protect your organization with continuous, crowdsourced security testing. Scope Hunter provides standardized triage workflows, researcher vetting, legal safe harbor policies, and compliance alignment with Ghana's Cyber Security Authority (CSA).

Custom Scope & Rules Definition
Professional Report Triage Queue
Vetted Researcher Access Tiers
Direct GHS Payout Management
Organization Operations Dashboard
preview (/org)
Program StatusACTIVE & AUDITED

MTN MoMo Settlement API

Avg Triage SLA4.2 Hours
Resolution Rate94.8%
Coordinated Disclosure Status CSA Aligned