An anti-tamper engine is only as good as the last person who tried to break it. Two categories are in scope for a paid reward right now — both go straight at the claims made elsewhere on this site.
A working emulation of the client→server communication protocol that produces telemetry the server accepts as genuine — without a real exam session, the real client software, or real exam hardware running — and isn't flagged as anything unusual.
A way to inject or load unauthorized code into the exam process that lets a candidate cheat during a real session, while evading every anti-tamper detector and staying undetected server-side.
The same four stages, every time — no exploit details change hands before the second one.
Send an initial contact — no exploit details yet, just which category and a rough description.
A mutual NDA is put in front of you before anything technical is discussed further.
Full source code plus a written technical analysis, covered by the NDA.
Once it's verified and a fix has shipped, the reward is paid and the disclosure hold lifts.