Dear TumarOne Researchers!

We would like to present our new Support Bot, which will facilitate the process of technical assistance on TumarOne.

@TumarOneSupportBot

The implementation of Support Bot will help the development and administrative teams to respond to your queries (technical issues, triage of reports, feedback and suggestions) in an efficient way.

Please, contact us through the bot to hassle-free help in no time!

Dear TumarOne researchers!

Good news, want to get doubled, or even tripled bounties?

Check out the program of Development Bank of Kazakhstan and get your desired bounty 2-3 times higher than usual (only this month!). We invite you to participate and get awarded for the vulnerabilities found.

Low severity: up to $320
Medium severity: $320-$850
High severity: $850 and higher

Check out more detailed information about the programs here: TumarOne Programs!

Kcell has enhanced the security of its systems and services.

Kcell, a mobile operator in Kazakhstan, has joined the BugBounty research programme and is inviting 'white hat hackers' to identify bugs and errors in its digital systems and services. Kcell is willing to pay a monetary reward for each vulnerability found.

In Kazakhstan, Tumar.One is one of the first and well-known BugBounty platforms. Earlier this year, Kcell tested one of its systems using this platform. Independent cybersecurity researchers registered on Tumar.One can prove themselves and receive monetary rewards for confirmed bugs and gaps in information systems.

Kcell highlights the benefits of BugBounty platforms in reducing information security risks in the long term. While the company has ample in-house expertise and human resources, involving external researchers in BugBounty programmes enables more thorough product testing and enhances security levels.

Researchers can get acquainted with program rules on tumar.one!

Dear TumarOne Bughunters!

We're thrilled to announce that Kcell's public BugBounty program is expanding its scope of research objects!

Please review the updated program guidelines and scope documentation available on our platform to familiarize yourself with the new research objects.

We're excited to see the innovative ways you'll approach these new challenges and look forward to continuing our partnership in making Kcell's systems more secure.

Thank you for being part of our bughunting community!

Kcell Expands Its Bug Bounty Program on the Tumar.One Platform: Up to $1,000 per Vulnerability and Full Access to All Subdomains

In its first year participating in the Bug Bounty program, Kcell received around 60 vulnerability reports from security researchers—each one contributing to the strengthening of the company’s digital infrastructure.

Following this successful start, the program is now entering a new phase. Kcell has expanded the scope of assets eligible for testing to include all Kcell and activ subdomains. This significantly broadens the range of targets available to researchers and increases the potential for meaningful impact.

The maximum reward has also been raised: up to $1,000 for critical vulnerabilities, and up to $500 for issues found in subdomains. This move aims to attract more experienced researchers and incentivize deeper analysis.

Learn more on our website.

Starting today, all reward amounts on the platform are displayed as Gross.

This means the numbers you see in the "Payouts" section now represent the full reward amount before any applicable tax or fee deductions.

Why? Because it’s important to see the full worth of your finding before any tax deductions.

Everything else works exactly the same. You hunt, you report, you get paid. Simple as that! 🚀

Fresh look for Report & Payout Statuses

To streamline the user experience, we have updated the naming conventions for both Report and Payout statuses on the platform.

These changes are designed to make your dashboard clearer and more intuitive. The underlying workflows and processes remain exactly the same.

For a complete overview of the new status names and their definitions, please check our updated rules.