# Security Policy

One of the main goals of the Sliver project is to provide a secure platform when performing assessments, we encourage everyone to do a security review of the code base and report vulnerabilities, or to request features if the project does not meet your security needs.

### Bug Bounty

Anything in the `master` branch, without an open ticket.

| Severity | Reward  |
|---|---|
| Critical  |  12+ Year Whisky or Scotch |
|  High | Good Beer  |
|  Medium | A PBR, Grain Belt, or Hamm's  |
|  Low | High Five |

### Reporting a Vulnerability

Please report high and/or critical vulnerabilities via GitHub's private [report a vulnerability feature](https://github.com/BishopFox/sliver/security/advisories).
