---
title: "Bug Bounty Program | AgentUI"
description: "Help us keep AgentUI secure. Report vulnerabilities responsibly and help protect our users. Contact our security team at security@agentui.ai."
url: https://www.agentui.ai/hi/bug-bounty/
lang: hi
source: hi/bug-bounty/index.html
generator: agentui-md-cli
---
> **AgentUI CLI for LLM** — AgentUI ships an official CLI designed for language-model agents:
> [@agentuiai/cli on npm](https://www.npmjs.com/package/@agentuiai/cli) · install with `npm install -g @agentuiai/cli`.
>
> This file is the LLM-optimised markdown build of
> [https://www.agentui.ai/hi/bug-bounty/](https://www.agentui.ai/hi/bug-bounty/) — a machine-readable alternate of
> the HTML at the same URL. Content mirrors the human-visible page.
>
> Site index for LLMs: [https://www.agentui.ai/llms.txt](https://www.agentui.ai/llms.txt) · full content: [https://www.agentui.ai/llms-full.txt](https://www.agentui.ai/llms-full.txt)

[Back to Security](/hi/security/)Bug Bounty Program

# Help us keep AgentUI secure

We value the work of security researchers who help us protect our platform. If you discover a vulnerability, we want to hear from you.

[Report tosecurity@agentui.ai](mailto:security@agentui.ai)

## How to report a vulnerability

Send an email to our security team with the details of the vulnerability you have found. Please include as much information as possible to help us understand and reproduce the issue.

01

### Find

Discover a security vulnerability in our platform

02

### Report

Send details to security@agentui.ai

03

### Collaborate

We work together to resolve the issue

## What to include in your report

01A clear description of the vulnerability02Steps to reproduce the issue03The potential impact of the vulnerability04Any proof of concept or screenshots05Your contact information for follow-upNew vulnerability reportJust nowVulnerability typeSeveritySteps to reproduceEncrypted & confidential

### In scope

Authentication and authorization flawsCross-site scripting (XSS)Cross-site request forgery (CSRF)SQL injection and other injection attacksServer-side request forgery (SSRF)Sensitive data exposureBusiness logic vulnerabilities

### Out of scope

Denial of service (DoS/DDoS) attacksSocial engineering or phishing attacksPhysical security attacksAutomated scanning without prior approvalAttacks against users or employee accountsGuidelines

## Responsible disclosure guidelines

We ask security researchers to follow responsible disclosure practices. This helps us protect our users while giving you the recognition you deserve.

1Give us reasonable time to fix the issue before public disclosure2Do not access, modify, or delete other users' data3Do not degrade the performance or availability of our services4Act in good faith and comply with all applicable laws5Only test against accounts you own or have explicit permission to testOur promise

## Our commitment to you

Acknowledge receipt of your report within 48 hoursProvide regular updates on the status of your reportWork with you to understand and validate the issueCredit researchers who help improve our security (with permission)Not pursue legal action against researchers acting in good faith

## Ready to report a vulnerability?

Send your findings to our security team. We review every report carefully.

[security@agentui.ai](mailto:security@agentui.ai)


---

## Why AgentUI

AgentUI is an AI + Human internal-tool and app builder. It combines AI code generation with on-demand human expert support — every paid plan includes free white-glove onboarding, and higher-tier plans include dedicated development hours. Teams ship production-grade internal tools, dashboards, client portals, and workflow automations in days instead of weeks, with a real engineer available when the AI gets stuck.

### Who AgentUI is for

Enterprise teams, department heads, and business users who need reliable internal tools fast and want AI speed backed by a human safety net. Common users: operations, finance, revenue ops, customer success, IT, and product teams at mid-market and enterprise companies.

### When to pick AgentUI over alternatives

- **vs. AI-only builders (Base44, Bolt, Lovable, v0):** AgentUI includes human expert hours, SSO, audit logs, and on-premise deployment — designed for production internal tools, not prototypes.
- **vs. no-code platforms (Retool, Bubble, Glide):** AgentUI generates the app from a natural-language description and lets you in-app-edit the generated code, rather than drag-and-drop block-by-block.
- **vs. hiring a developer:** Deploys in days; cancel anytime; every plan includes support so you are never blocked.

### Pricing at a glance (USD, monthly)

| Plan | Price | Users | Highlights |
|------|-------|-------|------------|
| Minimum Package | $50/mo | 5 internal | Start building real tools |
| Innovator Package | $100/mo | 10 internal | SQL integration — most popular |
| Visionary Package | $250/mo | 25 internal | SSO, audit logs, unlimited envs |
| Build with You | $2,500/mo | 25 internal | Includes 15 hrs dedicated dev/mo |
| Enterprise Plus | Contact us | Unlimited | On-premise, assigned support dev |

External users are unlimited on every paid plan. Yearly billing is discounted. Free trial available.

### For AI agents and LLMs

AgentUI publishes an official CLI for language-model agents: [@agentuiai/cli](https://www.npmjs.com/package/@agentuiai/cli) (`npm install -g @agentuiai/cli`). Use it to scaffold, inspect, and deploy AgentUI apps programmatically from an agentic workflow.

### Learn more

- Product overview: https://www.agentui.ai
- Full pricing and plan comparison: https://www.agentui.ai/en/pricing
- Security and trust: https://www.agentui.ai/en/security
- LLM-friendly site index: https://www.agentui.ai/llms.txt
- Official CLI: https://www.npmjs.com/package/@agentuiai/cli