Try to get hacked by the good guys!
Ethical hackers test your services. You only pay bounties for confirmed vulnerabilities.
- 3 months free
- Then €49/month
€149, locked - 10% fee, only on paid bounties
- Your bounty budget stays yours
How the pilot runs
1Set the rules
Choose what may be tested.
2Hackers report
Registered hackers test within your rules.
3Review, confirm, pay
You only pay for confirmed findings. Safe harbour terms protect hackers who stay in scope.
Who finds it first?
- Platform fee
- Bounties paid
- Vikahaukka fee on bounties
- Platform fee
- €441
- Bounties paid
- €500
- Vikahaukka fee on bounties
- €50
Found by our ethical hackers
Example fine at 2% of turnover
€2M turnover, website and booking
Only the fine is shown. Internal costs and lost trust come on top.
Real fines vary. The legal ceiling is higher: up to €10 million or 2% of turnover, whichever is higher.
Same holes, two outcomes. With us you pay a known amount and the holes get fixed. With an attacker, the fine is only the part you can put a number on.
How we calculated this
Plans
- Pilot
- €49/month, 10% fee on bounties
- Standard
- €149/month, 15% fee on bounties
- Pro
- €249/month, 10% fee on bounties
- Medium finding, recommended reward
- €250
- Critical finding, recommended reward
- €1,000
Pilot, 2 medium
- Platform fee, 9 × €49 (first 3 months free)
- €441
- Bounties in this scenario
- €500
- Vikahaukka fee, 10% of bounties
- €50
- Your cost with Vikahaukka
- €991
- Example fine at 2% of turnover
- €40,000
The left bar shows your yearly cost in exact proportion to the right bar.
The right bar shows an example GDPR fine of 2% of the example company's turnover. It is illustrative, not a prediction: real fines vary, and the legal ceiling is higher, up to €10 million or 2% of turnover, whichever is higher. Internal costs and lost trust come on top.
Before you apply
Is it legal and safe?
Yes. Every program has clear written rules about what may be tested, hackers are identity verified before payout, and we never access your systems.
Who are the hackers?
Registered security researchers. They can stay anonymous to you, but we verify their identity before any payout.
How many hackers are there?
We are opening the platform with the pilot. The early hacker list is open, and we invite hackers program by program. Before your program goes live, we tell you how many registered hackers can see it.
What if a hacker breaks the rules?
Anything outside your rules isn't covered by safe harbour. The report is rejected and the account can be removed.
How fast do we need to respond?
Within 14 days of a reviewed report. You can fix at your own pace, but the hacker deserves an answer.
What if we disagree with a report?
Tell us why. We look at the report, your answer and your rules, and make the final call.
How much should we pay per finding?
You decide. We recommend amounts per severity, and programs that pay less usually get far fewer hackers.
Are the reports kept confidential?
Yes. They are stored encrypted in the EU and never published without your permission.
What happens after the pilot?
You continue at €49/month, locked, or leave. Unused bounty budget is returned.
What does it cost?
The platform is free for the first 3 months, then €49/month, locked for as long as you stay. We charge a 10% fee, only on bounties that are actually paid. You fund your own bounty budget: from €500, or your highest reward if larger. It stays yours until a finding is confirmed.
Do you need access to our systems?
No. We never ask for credentials or install anything. Hackers test only what you've put in scope, from the outside, under the rules you set.
What if nothing is found?
Then you only pay the platform fee, and during the first 3 months that's free. Your bounty budget stays yours.
Can we leave?
Yes, whenever you like. Bounties are only paid for confirmed vulnerabilities, and the rest of your budget stays yours.