Thuban Shield, Thuban Scan and Thuban Crucible get stronger because the dev community using them reports what breaks, proposes what's missing, and helps build the fix. You find the gap. We ship the defence. Everyone using Thuban is safer for it.
Thuban's defence roadmap is shaped in public, by the people who use it. Report an attack, propose a defence, watch it move through the pipeline, get paid when it ships.
New ways an AI agent could go wrong — destructive writes, credential exfiltration, sandbox escapes, novel exploit chains.
Confirmed methods that get past one or more of Thuban Shield's 5 layers. The higher the severity, the higher the reward.
New rules, checks, or gating logic that stop a class of attack before it reaches disk.
New adversarial seed files that prove — or disprove — a detection rule actually works.
Product direction. If it's good enough to ship, it's good enough to pay for.
Every submission is public and tracked from the moment it lands — no black box, no disappearing into a backlog nobody reads.
Submit your codebase, let Thuban roast it, and land on the public leaderboard. There's a prize either way.
$ thuban advisor rate . --submitClick to copy
Scored /100 across security, architecture, dependencies, maintainability & tests. Only your score and display name are ever shared — your code never leaves your machine.
5× Samsung T9 Portable SSDs, given away to top community contributors as Thuban grows.
Five Samsung T9 Portable SSDs go to standout community contributors — awarded alongside the milestone rewards below as activation thresholds are hit.
Combine it with the bounty program: accepted submissions can earn cash and a shot at hardware.
Thresholds are published and never moved retrospectively. "Activated user" is defined publicly before each milestone is counted.
Fixed rewards on selection. Bigger rewards on shipment. Bonuses when your work protects the world at scale.
This is a real security bounty programme, not a content mill. Every category below has its own bar. If a submission doesn't clear it, it isn't paid — no exceptions.
This is the format every accepted idea follows — from suggestion to shipped feature to paid contributor.
Simple, fair, no perpetual revenue claims.
“We do not need everyone to like us. We need the right builders to believe: Craig is building this alongside us, not trying to monetise us from a distance.”
The first 100 accepted submissions earn permanent Founding Contributor status — a badge and public recognition that never expires.
Permanent recognition on the community roll. Awarded once, held forever — no re-qualification, no expiry.
Two sides of the same mission — spot what's broken, then get paid for the insight.
Submit it. Get selected. Get shipped. Get paid.
Submit a Defence Idea