Hall of Fame
Thank you to the researchers who help keep MAGDOX secure.
Researchers with qualifying, confirmed vulnerabilities receive severity-based recognition across the website, Code Security and FDIE, with their permission. Informational reports do not qualify for the Hall of Fame.
No acknowledgements yet.
Qualifying reports will appear here after remediation or an agreed mitigation and coordinated disclosure, with the researcher’s permission. No names or points have been published yet.
Report to security@magdox.ioSeverity and recognition points
Updated 3 October 2026. Points recognise each qualifying unique vulnerability; they are not monetary rewards. Informational reports receive 0 points and do not create a Hall of Fame entry.
| Severity | Points | Hall of Fame eligibility |
|---|---|---|
| Critical | 4 | Eligible when recognition requirements are met |
| High | 3 | Eligible when recognition requirements are met |
| Medium | 2 | Eligible when recognition requirements are met |
| Low | 1 | Eligible when recognition requirements are met |
| Informational | 0 | Not eligible: no Hall of Fame credit |
- Points are awarded per unique, previously unreported, confirmed in-scope vulnerability, using the final severity assigned during triage. Repeated endpoints or reports caused by the same underlying issue do not earn duplicate points.
- A qualifying report must follow the disclosure policy. Points and an entry are published after remediation or an agreed mitigation and coordinated disclosure, with the researcher's permission. Informational reports receive 0 points and do not qualify for the Hall of Fame.
- A researcher's total is the sum of their credited qualifying reports across the website, Code Security and FDIE. At least one qualifying report worth 1 or more points is required; submitting a report does not itself create an entry.
- We explain the severity and recognition decision; researchers may provide additional evidence for reconsideration. Points are recognition only, not money, credits, prizes or a promise of a future reward. Researchers may use a handle or remain unlisted.
Who is listed
Researchers with at least one confirmed, unique Critical, High, Medium or Low report that meets the disclosure policy. Duplicate and Informational reports earn no Hall of Fame credit.
How you appear
Your chosen name or handle, optional link, resolved or mitigated month, affected website or product, final severity and points total. You can also remain unlisted.
FDIE reports
FDIE reports use the same Magdox disclosure programme and are acknowledged here, with the researcher's permission.