MythosHunt
A bug-bounty agent for authorized programs only. A finding is confirmed by a reproducible mechanism, or it does not exist.
Scope comes from one validated program config: in-scope and out-of-scope hosts, permitted test types, a request rate and test windows. Every network call goes through one scope check, including each redirect hop. A violation is denied and logged before a byte is sent.
Candidates become findings only when a deterministic validator confirms them. On a clean target the run reports nothing, and that counts as a pass.
It never submits. A person approves a draft and the operator submits it, outside the system. Cost per confirmed finding is reported.
- Nothing found is a pass
- A clean target produces an empty report, never a padded one.
- No submit path
- The package has no submission function for the test suite to find.
Validators run offline against a loopback target the tests start. Early access is open by request.
Ask for early access to MythosHunt
Say which program types you test. Authorized scope only.