iV7.caring is an open-source earnings ledger and REST gateway for bug-bounty hunters and authorized penetration testers. Log engagements against their scope reference, convert payouts to JPY at live rates, and submit programmatically from any script or AI agent through a key-protected API — board-ready reports included.
Every entry requires a Scope Reference — the program policy URL or signed SoW. Your ledger is your paper trail.
Log payouts in USD, EUR, GBP, anything. We convert to yen at live ECB / public rates, cached hourly, with a static fallback.
CSV export and a printable report page. Take it to your accountant, your tax filing, or your performance review.
No marketing tracking, no third-party analytics in the app, no PoCs in your notes. Just numbers and scopes.
Submit payouts programmatically from any script or AI agent. Reads are public; writes are protected by your X-API-Key. MIT licensed.
Every write endpoint accepts an X-API-Key header, so bots, cron jobs, and AI agents can log earnings without touching the UI. Reading totals and FX stays open. Generate your key on the server, paste it once into the in-app API Access page, and you're live.
curl -X POST "<your-domain>/api/engagements" \
-H "X-API-Key: $IV7_API_KEY" \
-H "Content-Type: application/json" \
-d '{"platform":"HackerOne","program":"Acme",
"title":"IDOR","severity":"high",
"status":"paid","amount":1500,"currency":"USD"}'Open source under the MIT license. Self-host it, fork it, audit it.
Platform, program, title, severity, status, amount + currency, and the link to the program policy or SoW.
Live rate is fetched from public providers, cached for an hour, applied on save. Re-run anytime to true-up.
One click for CSV. One click for a printable PDF. Totals roll up by platform, severity, and month.
iV7.caring exists to make legitimate security earnings easier to track, convert, and report. It does not store exploit code, secrets, or proof-of-concepts. It does not route funds. It does not integrate with anonymity networks. Every entry should carry a scope reference because every entry should be something you could defend in front of a client, a program, or an auditor.
Owner of record · Shayan Aboutalebi · Authorized Researcher.
The tracker is one click away. Demo data is already loaded.