These are the official rules for the Bluejay Bug Bounty (the “Contest”). By entering, you agree to them and to Bluejay's decisions, which are final on everything about the Contest.
The Contest is funded and run by Bluejay Intelligence, Inc., 111 Ellis St, San Francisco, California 94102. Questions go to [email protected].
The Contest starts at 11:00 a.m. Pacific on July 20, 2026. It is first come, first served: each agent's prize stays open until the first eligible entrant sends a verified winning entry for it, and the Contest ends once all three prizes are claimed or Bluejay closes it, whichever comes first. Bluejay's clock and records are the official timekeeper, and anything submitted before the start or after the Contest closes does not count.
You must be a legal U.S. resident and at least 18 years old when you enter. The Contest is void where the law prohibits or restricts it, and it is on you to make sure entering is legal where you live.
Bluejay's employees, contractors, officers, and directors cannot enter or win, and neither can their immediate family (spouse, parent, child, sibling, and their spouses) or anyone in their household.
There is no entry fee and no purchase needed to submit an entry. To enter:
A valid entry is a verifiable simulation run, submitted as a link, that Bluejay confirms caught all three planted bugs on a single agent, marked by the agent saying “chirp” in that run. Bluejay may reject entries that are incomplete, duplicated, or that it cannot independently verify from the submitted run.
Using Bluejay, including the simulation tool you enter with, is also covered by Bluejay's Terms of Service, and some usage may need a paid plan. Winners are chosen purely on skill at finding the planted bugs, not on luck, so this is a skill contest, not a sweepstakes, raffle, or lottery.
Winning is about skill. For each agent, the winner is the first eligible entrant whose run Bluejay verifies caught all three planted bugs. Bluejay does the verifying and decides whether an entry qualifies, and its decisions are final.
Each of the three agents carries its own $2,000 cash prize (USD), up to $6,000 in total. One prize goes to the first eligible entrant with a verified winning entry for that agent, and you can win more than one agent. Prizes cannot be transferred or swapped for anything else, though Bluejay may substitute a prize of equal or greater value if it has to.
If more than one person sends a winning entry for the same agent, the prize goes to whichever verified entry Bluejay's records show came first, and those records are the final word.
Bluejay will reach out using the email and phone number on your submission, and you have 30 days from the first attempt to claim. If Bluejay cannot reach you, you do not respond in time, or you turn out to be ineligible, it may disqualify the entry and either withhold the prize or pass it to the next eligible entrant for that agent.
You are responsible for all taxes on a prize. Any prize of $600 or more needs a completed IRS Form W-9 before Bluejay pays it, and Bluejay will report it to the IRS on Form 1099 as the law requires. If you do not send the tax paperwork in a reasonable time, you forfeit the prize.
This is the most important part of these rules: it says exactly what you may and may not test. For the Contest, and only during the Contest, Bluejay authorizes you to test just these three agents, and only by calling the numbers below or running Bluejay simulations against them:
Everything else is off-limits: every other system, site, app, piece of infrastructure, account, and set of data. In particular, do not:
Stay strictly inside this scope and follow these rules, and Bluejay will not take legal action against you for that testing and will treat it as authorized access under computer-access laws. This safe harbor is narrow: it only covers testing that stays within this scope, it only covers what these rules actually allow, Bluejay can revoke or narrow it at any time for anyone, and nothing here lets you test a system Bluejay does not own or control. Do not publicly share the details of any bug or exploit until Bluejay says you can.
Bluejay records, stores, and processes your calls to the in-scope agents and the simulations you run against them, so it can operate the agents, run the Contest, and verify entries. By entering, you consent to this. Bluejay's Privacy Policy explains how it handles personal data. The agents run on fictional test data, so do not say or submit real, sensitive personal information about yourself or anyone else during a call or simulation.
Unless the law says otherwise, by accepting a prize you let Bluejay use your name, city and state, likeness, and the fact that you won to promote the Contest and Bluejay, in any media, including a LinkedIn post and other Bluejay channels, without paying you extra. Where the law requires it, Bluejay will give you a free way to opt out.
Bluejay may disqualify anyone who tampers with entries, cheats, uses bots or automation outside the sanctioned simulation flow, tests outside the scope in Section 9, or breaks these rules or the law. Bluejay may also change, pause, or cancel the Contest if it cannot run as planned, for example because of a virus, a bug, tampering, fraud, a technical failure, or anything else outside its reasonable control.
To the fullest extent the law allows, you release Bluejay, its affiliates, and their officers, directors, employees, and agents from any claim, loss, or damage tied to taking part in the Contest or to accepting or using a prize. The Contest, the Bluejay product, and the agents are provided “as is,” with no warranties.
These rules follow California law, setting aside its conflict-of-laws principles. Any dispute about the Contest belongs to the state or federal courts in San Francisco County, California.
If any part of these rules is unenforceable, the rest still applies, and that part is enforced as far as it legally can be. If Bluejay does not enforce something, it has not given up the right to. These rules are the whole agreement about the Contest and override anything inconsistent in other Contest materials. To ask for a list of winners, write to Bluejay Bug Bounty Winners List, Bluejay Intelligence, Inc., 111 Ellis St, San Francisco, California 94102.
Last updated July 20, 2026
©2026 Bluejay Intelligence