Definition
Bug bounty programs pay external researchers for responsibly disclosed vulnerabilities, typically via platforms such as hackerone, with severity-tiered payouts and scope rules.
Key Points
- 2026-07-22: github restructures HackerOne program — lower static public rates, permanent vip-bug-bounty, signal gates against AI spam (2026-07-23-github-bug-bounty-restructure-vip)
- Industry trend: quality over quantity amid AI-generated report noise
- Grandfathering of backlog is a fairness signal during rate cuts
Related
- github-bug-bounty-restructure-vip
- hackerone
- application-security
- github
- vip-bug-bounty
- ai-era-bug-bounty-noise