Found a bug in the field?
You've caught the meadow misbehaving — a page that won't load, a door that shouldn't open, a scarecrow that's let its straw show. Tell us properly and we'll say thank-you the only way we know how: with something you can hold.
The reward
Every accepted report earns one-off custom 3D-printed swag, designed by Rusty — shipped anywhere in the world, at Rusty's own expense. We'll do our best to get it to you as soon as we can.
It's a thank-you, not a contract — we do our best on every one, and swag is offered in goodwill, at our discretion. There's no cash prize; the field runs on biscuits and stubbornness.
What we're after
- Anything on app.saveourfields.com — the GPS AR safari, its
php/*endpoints, and the field-lab sign-in. - Anything on www.saveourfields.com — the campaign site and its contact form.
- Things like: broken security controls, data that leaks, a route that shouldn't work, a form you can trick, something a visitor could break for everyone else.
Out of scope
- Flooding or knocking the site over on purpose (DoS / DDoS).
- Trying to trick people who run the site (social engineering).
- Breaking into anything that isn't ours, or anyone else's accounts.
- Third-party services we use (map tiles and such) — report those to their owners.
- Small spelling mistakes or design quibbles — those go to the contact form, not the bounty.
Ground rules
- Test gently on the live meadow — no destructive digging, no pulling data out beyond what proves the point.
- Don't touch anyone's personal data more than you must to show the bug.
- Give us a little time to fix it before you tell the world.
Tell us about it
AI found it? Fine — clever machines are welcome in the meadow. But the impact bit has to be yours: tell us, in your own words, why it matters. That part's the point.
"A meadow's only as good as the gate that keeps the diggers out. Spot a hinge coming loose and tell me straight — and I'll print you something to remember it by. I'll even cover the postage."
← Back to the meadow