🎉 Here is a recap of what we've done!
What an incredible year for our community!
Your combined efforts made 2025 our biggest year ever, successfully defending our clients' ecosystems from thousands of threats.
To every researcher: Thank you for securing our clients and advancing our field.
See you in 2026 on tumar.one!
What an incredible year for our community!
Your combined efforts made 2025 our biggest year ever, successfully defending our clients' ecosystems from thousands of threats.
To every researcher: Thank you for securing our clients and advancing our field.
See you in 2026 on tumar.one!
🔥11🥰5❤3🎉3👏2👨💻1
The hunt just got more rewarding! 🏆
To keep the competition fresh, our leaderboard year now runs from October to September each year, divided into 4 intense Seasons.
The 2026 Season Calendar:
• Season 1: Oct 2025 – Dec 2025
• Season 2: Jan 2026 – Mar 2026
• Season 3: Apr 2026 – Jun 2026
• Season 4: Jul 2026 – Sep 2026
To kick things off, we want to celebrate the elite bughunters who dominated 2026 Season 1:
🥇 zeus
🥈 Mayakovsky
🥉 n1ghth7r1can6xcenti
And here’s the twist: From now on, we aren’t just giving away bragging rights.The Top 3 hunters of every single season will now receive exclusive Tumar.One branded merch! 👕🔥
As for the rest of the community: Season 2 is already underway. The question is... will we see your name next?
Hunt Now
To keep the competition fresh, our leaderboard year now runs from October to September each year, divided into 4 intense Seasons.
The 2026 Season Calendar:
• Season 1: Oct 2025 – Dec 2025
• Season 2: Jan 2026 – Mar 2026
• Season 3: Apr 2026 – Jun 2026
• Season 4: Jul 2026 – Sep 2026
To kick things off, we want to celebrate the elite bughunters who dominated 2026 Season 1:
🥇 zeus
🥈 Mayakovsky
🥉 n1ghth7r1can6xcenti
And here’s the twist: From now on, we aren’t just giving away bragging rights.
As for the rest of the community: Season 2 is already underway. The question is... will we see your name next?
Hunt Now
🔥9🎉5🏆3
We are preparing the launch of a major new program 🤫
But while we finalize everything, we want to hear from you.
If you could pick ONE company to launch a program on Tumar.One, who would it be?
👇 Tag them in the comments. We might just make it happen.
But while we finalize everything, we want to hear from you.
If you could pick ONE company to launch a program on Tumar.One, who would it be?
👇 Tag them in the comments. We might just make it happen.
🔥11🎉3❤2❤🔥1
Tumar.One is a sponsor at Jeanne d'Hack CTF 🇫🇷
Tumar.One is heading to France as an official sponsor of the 3rd edition of Jeanne d’Hack CTF. We are proud to support this international event bringing together the brightest minds to solve complex security challenges.
Taking place January 30th in Rouen, this Jeopardy-style CTF is a premier gathering for testing technical depth in Web, Pwn, Crypto, and Reverse Engineering. CTF skills are the foundation of professional bug hunting; the persistence required to capture a flag is the same drive needed to secure global ecosystems. Our mission is to help researchers transition from simulated challenges to real-world security impact.
Check out the event and start your hunt:
Jeanne d'Hack CTF
Tumar.One is heading to France as an official sponsor of the 3rd edition of Jeanne d’Hack CTF. We are proud to support this international event bringing together the brightest minds to solve complex security challenges.
Taking place January 30th in Rouen, this Jeopardy-style CTF is a premier gathering for testing technical depth in Web, Pwn, Crypto, and Reverse Engineering. CTF skills are the foundation of professional bug hunting; the persistence required to capture a flag is the same drive needed to secure global ecosystems. Our mission is to help researchers transition from simulated challenges to real-world security impact.
Check out the event and start your hunt:
Jeanne d'Hack CTF
🔥11❤3🎉2😁1🤯1💩1🐳1
Fresh Scope, Fresh Finds
February is officially in full swing — hope you’re fully locked in and back in the game. Perfect timing, because MBank updated their scope 👀
+3 mobile apps
+16 new web targets
Send your reports at Tumar.One!
February is officially in full swing — hope you’re fully locked in and back in the game. Perfect timing, because MBank updated their scope 👀
+3 mobile apps
+16 new web targets
Send your reports at Tumar.One!
🔥16❤🔥6❤2🎉2
🏔 Think you've reached peak bug hunting?
The Akimat of the Ulytau District just went public — and the scope is now open for all bughunters. See you at the top.
Good luck :)
The Akimat of the Ulytau District just went public — and the scope is now open for all bughunters. See you at the top.
Good luck :)
🔥9😁3❤2🤡2💯2❤🔥1
New Program Launch: Freedom Telecom Operations
We are pleased to welcome Freedom Telecom Operations to the Tumar.One platform.
Freedom Telecom Operations is a telecommunications operator developing high-speed connectivity and public Wi-Fi infrastructure across major cities in Kazakhstan. By launching a Bug Bounty program, the company is strengthening its proactive approach to cybersecurity and the protection of its digital services.
We are pleased to welcome Freedom Telecom Operations to the Tumar.One platform.
Freedom Telecom Operations is a telecommunications operator developing high-speed connectivity and public Wi-Fi infrastructure across major cities in Kazakhstan. By launching a Bug Bounty program, the company is strengthening its proactive approach to cybersecurity and the protection of its digital services.
🔥9🤯3❤2
🌸 Spring is here — and with it, a new chapter.
The sun is out, the birds are singing, and we're celebrating the Top 3 of 2026 Season 2.
🥇 nov3mber
🥈 m0rse
🥉 t0x4
Congratulations to all three — you earned it!
And to the rest of the community: good luck in Season 3, running Apr – Jun 2026.
🔗 Start now
The sun is out, the birds are singing, and we're celebrating the Top 3 of 2026 Season 2.
🥇 nov3mber
🥈 m0rse
🥉 t0x4
Congratulations to all three — you earned it!
And to the rest of the community: good luck in Season 3, running Apr – Jun 2026.
🔗 Start now
🔥6❤5❤🔥2🎉2
New Program Launch: National Center of Expertise
We are pleased to welcome the National Center of Expertise to the Tumar.One.
The NCE is a national public health authority under the Committee of Sanitary and Epidemiological Control of the Ministry of Health of the Republic of Kazakhstan. It ensures the sanitary and epidemiological welfare of the population through laboratory research, environmental factor measurements, disinfection services, and professional training programs.
The program reflects NCE's commitment to protecting the digital systems that serve its public health mission.
🔗 Start Now
We are pleased to welcome the National Center of Expertise to the Tumar.One.
The NCE is a national public health authority under the Committee of Sanitary and Epidemiological Control of the Ministry of Health of the Republic of Kazakhstan. It ensures the sanitary and epidemiological welfare of the population through laboratory research, environmental factor measurements, disinfection services, and professional training programs.
The program reflects NCE's commitment to protecting the digital systems that serve its public health mission.
🔗 Start Now
🔥8🍾7❤2
✨ Bughunter profile update is here!
Your Tumar.One profile is no longer just an account — it's your public bug bounty portfolio. Think of it as a CV you can actually show off.
Fill it in, share it around, and let your skills speak for themselves.
Update your profile now!
Your Tumar.One profile is no longer just an account — it's your public bug bounty portfolio. Think of it as a CV you can actually show off.
Fill it in, share it around, and let your skills speak for themselves.
Update your profile now!
🔥10❤4🎉2
The Department of Digital Technologies of the Aktobe Region has joined Tumar.One.
The Department is a state body of the Republic of Kazakhstan responsible for leadership in informatization, digitalization, communications, and access to information across the Aktobe region, with a mission to accelerate economic development, improve the quality of life of the population through digital technologies, and lay the groundwork for Kazakhstan's transition to a digital economy.
With this program, the Department reinforces its approach to cybersecurity across the region's digital services.
🔗 Start Now
The Department is a state body of the Republic of Kazakhstan responsible for leadership in informatization, digitalization, communications, and access to information across the Aktobe region, with a mission to accelerate economic development, improve the quality of life of the population through digital technologies, and lay the groundwork for Kazakhstan's transition to a digital economy.
With this program, the Department reinforces its approach to cybersecurity across the region's digital services.
🔗 Start Now
🎉9🔥4❤🔥3😁1
One day, vibe coders will learn not to push .env files. Until then - we'll keep the stats coming.
Over the past month, we analyzed a large number of reports from the Kazakhstan internet segment and spotted some clear trends we'll now be sharing regularly. And, oh boy, the majority of critical issues come not from sophisticated cyberattacks, but from basic negligence during development and server configuration.
The full breakdown — top vulnerability categories, examples, and a developer checklist — is in the cards above. 👆
Remember, cyber hygiene is not a one-time campaign, but a continuous process.
Stay safe and stay tuned with tumar.one.
Over the past month, we analyzed a large number of reports from the Kazakhstan internet segment and spotted some clear trends we'll now be sharing regularly. And, oh boy, the majority of critical issues come not from sophisticated cyberattacks, but from basic negligence during development and server configuration.
The full breakdown — top vulnerability categories, examples, and a developer checklist — is in the cards above. 👆
Remember, cyber hygiene is not a one-time campaign, but a continuous process.
Stay safe and stay tuned with tumar.one.
❤🔥5👍4🎉2🔥1👏1