> THUGHRA is Live – Securing the Gulf’s Digital Future...
💻 Welcome to Thughra
The First Bug Bounty Platform in the Gulf 🌍
Connecting ethical hackers with organizations to secure the Gulf. Find security vulnerabilities, earn rewards, and join the hunt.
Defending the Gulf, one bug at a time.
Real-Time Cyber Threat Monitoring & Ethical Hacking Missions Live Now!
- 🐛Find bugs ⟶
- 📨Submit report ⟶
- 💸Get paid
Researchers Registered
0+
Active and growing security community.
Trusted byComing soon
Coming Soon
Launch partners are lining up—stay tuned.
Trusted by security-conscious teams across the Gulf
Logos will appear here — partnerships rolling out soon.
COMING SOON
COMING SOON
COMING SOON
COMING SOON
COMING SOON
COMING SOON
COMING SOON
COMING SOON
COMING SOON
COMING SOON
COMING SOON
COMING SOON
COMING SOON
COMING SOON
Why Thughra?
🌍 Local Focus
Built for the Gulf. Culturally aware rules of engagement and region-specific targets.
⚡ Fast Triage
Clear SLAs and responsive triage so valid reports move quickly from review to reward.
🔒 Secure Payouts
Transparent reward ranges, verified identities, and secure payout options.
🤖 AI-Assisted Triage
LLM-powered deduping, risk hints, and reproduction helpers—humans always in control.
📊 Powerful Dashboards
Track submissions, statuses, and payouts. Export invoices and analytics in one place.
₿ Crypto Payouts
BTC, USDT (ERC20/TRC20), and XRP supported—plus traditional bank transfers.
🌐 Global Vulnerability Dashboard
Real-time CVE feed with search & severity filters—so researchers and companies can react fast.
Interactive Demo
🧑💻 Researchers
Hunt smarter. Get rewarded.
Clear scope & safe-harbor
GCC-focused targets: government and private-sector programs across the Gulf (UAE, KSA, QA, KW, OM, BH).
Fast triage + duplicate transparency
Fair payouts (BTC/USDT/XRP/bank)
Reputation & leaderboard
Sandboxes & test data
Report templates & PoC tips
live CVE feed to track the latest vulnerabilities and trends affecting your targets.
Real-time notifications
🏢 Companies
Launch a program with confidence.
Low registration fees
High security & strict access
AI-assisted triage (dedupe & hints)
Flexible scope (private → public)
Role-Based Access (RBAC): add team members (Finance, Security, Admin, etc.) with granular permissions (view-only, triage, payouts, settings).
Policy & safe-harbor guidance
SLAs, audit trails & exports
Integrations (Webhooks now; Jira & Slack coming soon)
Crypto payouts (BTC/USDT/XRP) + bank
24/7 support for critical incidents with on-call escalation (P0/P1)