Report vulnerabilities, manage your team, or join the programme.
Identify a flaw in BOSS OS? Submit a detailed vulnerability report with proof of concept and help secure India's indigenous operating system.
All submissions are bound by responsible disclosure rules.
Create up to 3 teams · Add up to 5 participants each
No Seats Available
Your teams will appear here once created.
Only profile-completed students can be added.
Students must complete their User Profile (institute type, personal information, supporting document) before they can be added. Must be 18+.
Ask students to log in to the SSM Portal, go to My Profile, and complete all required fields — Select institute type: Student, fill in DOB/gender, select institution, upload college ID / bonafide certificate.
Log in to report security vulnerabilities in BOSS OS, manage your team, and compete for national recognition.
login Login to ParticipateReport Vulnerabilities
Submit security bugs in BOSS OS with proof of concept
SPOC Team Management
Create and manage teams of up to 5 participants
Win National Prizes
Cash prizes, CVE recognition & national awards
Secure India's Indigenous OS
36-hour national cybersecurity hackathon to identify vulnerabilities in BOSS GNU/Linux.
Hunt Real Vulnerabilities.
Investigate kernel, authentication, networking, and core OS surfaces.
Earn National Recognition.
Top participants receive cash prizes, certificates, and CVE recognition.
Only profile-completed students (18+) can be added to a team.
SPOC manages team creation & member assignment via the dashboard.
Cash prizes, CVE recognition & national awards for top-ranked teams.
Target: BOSS OS 11.0
India's indigenous GNU/Linux used in government systems nationwide.
Responsible Disclosure
All valid reports are reviewed by the CDAC security team within 7 days.
National Recognition
Winners receive certificates, CVE credits & cash prizes from CDAC.
Choose a problem statement, investigate the vulnerability surface, and submit your findings.
info Identify and report vulnerabilities for this problem statement.
info Identify and report vulnerabilities for this problem statement.
info Identify and report vulnerabilities for this problem statement.
info Identify and report vulnerabilities for this problem statement.
info Identify and report vulnerabilities for this problem statement.
info Identify and report vulnerabilities for this problem statement.
info Identify and report vulnerabilities for this problem statement.
info Identify and report vulnerabilities for this problem statement.
info Identify and report vulnerabilities for this problem statement.
info Identify and report vulnerabilities for this problem statement.
info Identify and report vulnerabilities for this problem statement.
ABOUT THE PROGRAMME
This PAN India Bug Bounty Programme is designed to identify security vulnerabilities in BOSS OS, an indigenous Linux distribution used in government systems. Participants include students, researchers, and professionals working together to strengthen national cybersecurity.
Responsible disclosure under NDA keeps findings protected throughout submission, triage and remediation.
Real-world OS security testing helps validate BOSS GNU/Linux against practical attack scenarios.
Note: Your work contributes directly to strengthening national infrastructure.
NATIONAL COVERAGE
Delhi, Punjab, Rajasthan, J&K
Tamil Nadu, Karnataka, Telangana
West Bengal, Assam, Bihar
Maharashtra, Gujarat, Madhya Pradesh
Follow the official process from registration through triage, scoring and final awards.
Portal opens for participants
BOSS OS VM provided
Identify and validate vulnerabilities
Vulnerability report review and verification
Evaluation completed with CVSS-based decisions
Important: Responsible disclosure rules and programme decisions will be binding on all participants.
1 Critical vulnerability equals 20 Low vulnerabilities.
Cash prizes, certificates, CVE recognition and national awards for top submissions.
₹ 75,000
Certificates + CVE Recognition + National Awards
₹1,00,000
Certificates + CVE Recognition + National Awards
₹50,000
Certificates + CVE Recognition + National Awards
info All prize winners receive Certificates + CVE Recognition + National Awards
Please login to report a bug. You will be redirected to the login page.