Kcell has enhanced the security of its systems and services.

Kcell, a mobile operator in Kazakhstan, has joined the BugBounty research programme and is inviting 'white hat hackers' to identify bugs and errors in its digital systems and services. Kcell is willing to pay a monetary reward for each vulnerability found.

In Kazakhstan, Tumar.One is one of the first and well-known BugBounty platforms. Earlier this year, Kcell tested one of its systems using this platform. Independent cybersecurity researchers registered on Tumar.One can prove themselves and receive monetary rewards for confirmed bugs and gaps in information systems.

Kcell highlights the benefits of BugBounty platforms in reducing information security risks in the long term. While the company has ample in-house expertise and human resources, involving external researchers in BugBounty programmes enables more thorough product testing and enhances security levels.

Researchers can get acquainted with program rules on tumar.one!

Dear TumarOne Bughunters!

We're thrilled to announce that Kcell's public BugBounty program is expanding its scope of research objects!

Please review the updated program guidelines and scope documentation available on our platform to familiarize yourself with the new research objects.

We're excited to see the innovative ways you'll approach these new challenges and look forward to continuing our partnership in making Kcell's systems more secure.

Thank you for being part of our bughunting community!

Kcell Expands Its Bug Bounty Program on the Tumar.One Platform: Up to $1,000 per Vulnerability and Full Access to All Subdomains

In its first year participating in the Bug Bounty program, Kcell received around 60 vulnerability reports from security researchers—each one contributing to the strengthening of the company’s digital infrastructure.

Following this successful start, the program is now entering a new phase. Kcell has expanded the scope of assets eligible for testing to include all Kcell and activ subdomains. This significantly broadens the range of targets available to researchers and increases the potential for meaningful impact.

The maximum reward has also been raised: up to $1,000 for critical vulnerabilities, and up to $500 for issues found in subdomains. This move aims to attract more experienced researchers and incentivize deeper analysis.

Learn more on our website.

Starting today, all reward amounts on the platform are displayed as Gross.

This means the numbers you see in the "Payouts" section now represent the full reward amount before any applicable tax or fee deductions.

Why? Because it’s important to see the full worth of your finding before any tax deductions.

Everything else works exactly the same. You hunt, you report, you get paid. Simple as that! 🚀

Fresh look for Report & Payout Statuses

To streamline the user experience, we have updated the naming conventions for both Report and Payout statuses on the platform.

These changes are designed to make your dashboard clearer and more intuitive. The underlying workflows and processes remain exactly the same.

For a complete overview of the new status names and their definitions, please check our updated rules.

The hunt just got more rewarding! 🏆

To keep the competition fresh, our leaderboard year now runs from October to September each year, divided into 4 intense Seasons.

The 2026 Season Calendar:
• Season 1: Oct 2025 – Dec 2025
• Season 2: Jan 2026 – Mar 2026
• Season 3: Apr 2026 – Jun 2026
• Season 4: Jul 2026 – Sep 2026

To kick things off, we want to celebrate the elite bughunters who dominated 2026 Season 1:
🥇 zeus
🥈 Mayakovsky
🥉 n1ghth7r1can6xcenti

And here’s the twist: From now on, we aren’t just giving away bragging rights. The Top 3 hunters of every single season will now receive exclusive Tumar.One branded merch! 👕🔥

As for the rest of the community: Season 2 is already underway. The question is... will we see your name next?

Hunt Now