Verified65% confidenceFactExact time
SRC（安全应急响应中心）是企业设立的漏洞收集平台，企业付费购买未公开的安全漏洞，安全研究者发现并提交后审核通过可获得赏金
3
Sources
65%
Confidence
Long-term
Relevance
8/15/2026
First Seen
Sources
免杀技术实测：CS载荷绕过杀软的三种方法与SRC赏金真相
bilibili寻欢攻防日记8/8/2026
Related Claims
UnverifiedMost domestic SRC platforms classify vulnerabilities into four levels—critical, high, medium, and low—and at certain leading internet companies, a single critical vulnerability can yield rewards of tens of thousands of yuan, while low-severity vulnerabilities may only receive point rewards of a few dozen to a few hundred yuan.68% similarUnverifiedLegitimate vulnerability discovery must be conducted within company-authorized SRC platforms or explicitly permitted scopes; any penetration testing against unauthorized systems constitutes illegal activity.68% similarVerifiedSOC 2是由美国注册会计师协会（AICPA）制定的服务型企业安全审计标准，评估安全性、可用性、处理完整性、保密性和隐私性五个维度64% similarUnverifiedSSRF is a class of web security vulnerability in which an attacker manipulates a server-side application into making HTTP requests to unintended internal or external addresses.63% similarUnverifiedGStack includes a CSO (Chief Security Officer) security audit skill that systematically checks for OWASP Top 10 vulnerabilities, hardcoded secrets, excessive permission grants, and other issues.62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/754406API
curl https://kongchang.com/api/v1/knowledge/claims/754406MCP
get_claim(id=754406)