Malawi's bug bounty platform

Tetezani. Find it. Fix it. Get paid.

Mibocorp connects Malawian banks, telcos, fintechs, NGOs and public institutions with ethical hackers who test their systems — with clear scope, legal safe harbour and bounties paid in kwacha.

0 Live programs
1 Ethical hackers
0 Valid reports resolved
MK 0 Bounties paid out

Two sides, one platform

Built for how Malawi works

Mobile money payouts, kwacha bounties, districts from Chitipa to Nsanje — and a scope system that keeps testing legal.

For organisations

Register your organisation, publish the systems you want tested, and pay only for findings that matter.

  1. Add your scope. Domains, APIs, IP ranges, mobile apps — plus explicit out-of-scope rules.
  2. Receive reports. Structured findings with CVSS scores, reproduction steps and impact.
  3. Triage and pay. Accept, resolve and settle bounties by Airtel Money, TNM Mpamba or bank transfer.
Register your organisation

For ethical hackers

Find scoped programs, submit clear reports and build a public track record in Malawi's security community.

  1. Create your profile. A handle, your district and the skills you bring.
  2. Hunt inside scope. Every program spells out what is fair game and what is not.
  3. Get paid. Add a payout account once; bounties land in kwacha.
Join as a researcher

Open for testing

Live programs

Every program below has published its scope and safe-harbour terms.

View all →

The first programs are being onboarded

Mibocorp is working with Malawian organisations to publish their scope. Researchers can register now and be ready on day one.

Create a researcher account

Safe harbour

Good-faith research is protected

When you stay inside a program's scope and follow its policy, Mibocorp treats your work as authorised security testing. We ask every organisation to commit to that in writing before their program goes live.

Read the rules