Practice simulation by FreelanceSites: not the real Synack app, no account is created, nothing leaves your device.
Synack, practice simulation
Join a data-science competition or a bug bounty program, submit your entry or report and see how prizes are decided. A coach explains every step and can do it for you.
Synack
The whole journey is written out step by step below, with the real-life time each part takes.
Your journey, in real-life terms
What you would need in real life
- A computer
- Reliable internet
- A skills test
- A background check
Next steps
This practice run at a glance
The real rules this practice run uses
From Synack's published pages, as recorded on its platform page. Check the platform itself before you join.
- Fees
- Vetted researchers earn per vulnerability
- Payout speed
- Paid direct to bank account, schedule not published
- Payout methods
- Bank transfer
- Approval
- Application and vetting
- Good to know
- Five-step vetting: resume review, technical test, background and ID check, interview, then onboarding.
- You need
- A computer, Reliable internet, A skills test and A background check
Eligibility source: synack.com
The journey, step by step
What happens on a real contests and bug bounties from sign-up to your first withdrawal, and how long each part takes. In total: 4 weeks to 6 months.
-
Create your Synack account
Every earning app starts with an account tied to your real name and email. Here you sign up as a demo person, so nothing about you is used.
Typical estimate About 5 minutes
-
Log in to Synack
Real apps ask you to confirm your email and often turn on two-step login. Never reuse a password from another site, and only ever type it on the real site.
Typical estimate A minute
-
Complete your Synack profile
Your profile is your shop window: photo, headline, skills and price. Programs compare it with everyone else's before they pick you.
Typical estimate 2 to 4 hours for a strong profile and portfolio
-
ID and background check
Apps that send you to people's homes or put them in your car check your ID, licence and record. It runs in the background and can take days.
From Synack's published rules Background checks usually take 3 to 10 days
Synack checks ID and runs a background check.
-
Wait for Synack to approve you
Platforms control who joins. Some let you in instantly, others review profiles, vet applications or keep a waitlist when they have enough people.
From Synack's published rules Application and vetting, often 1 to 3 weeks
Synack: Application and vetting. Five-step vetting: resume review, technical test, background and ID check, interview, then onboarding.
-
Hunt for a bug in scope
Each program publishes a scope and rules. You test only the listed targets, never real users' data, and stop as soon as you prove the issue.
Typical estimate Writing and confirming the report
-
Submit your report on Synack
A clear report has steps to reproduce, the impact and proof. Duplicates of bugs already reported usually earn nothing.
Typical estimate Hunting until you find a valid, new bug: weeks or months
-
Triage and bounty decision
Triagers confirm the bug and the program sets the bounty by severity. Many reports end as duplicates or out of scope.
Typical estimate Triage and bounty decision: days to weeks
-
Synack takes its fee
What the program pays is not what you keep. The platform fee comes off first, then your own costs.
Typical estimate Instant
-
Wait for Synack to clear the money
New earnings sit as "pending" for a while so refunds and disputes can be handled. You cannot withdraw them yet.
Typical estimate About 5 to 14 days on hold
-
Withdraw from Synack
Pick a payout method and confirm. Bank transfers take a few days, wallets and instant cards can be faster but may charge a fee.
From Synack's published rules Usually 1 to 5 days to arrive
Payout methods on Synack: Bank transfer.
Where the money goes on one report
| Bounty for one medium-severity bug (illustrative, set by each program) | $500.00 |
|---|---|
| Platform fee (0%) No percentage taken in this example. Synack's fees: Vetted researchers earn per vulnerability | −$0.00 |
| What you keep | $500.00 |
This is an educational practice run by FreelanceSites. It is not Synack's app and is not affiliated with Synack: only its published rules are used, in our own simplified design. Amounts marked illustrative are examples, and real times vary by country, demand and your own effort.