Unverified50% confidenceFactExact time
SRC has built a closed loop of discovering vulnerabilities, reporting vulnerabilities, and fixing vulnerabilities, while also providing white-hat hackers with a legal channel for monetization.
1
Sources
50%
Confidence
Long-term
Relevance
9/11/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedSRC（安全应急响应中心）是企业设立的漏洞收集平台，企业付费购买未公开的安全漏洞，安全研究者发现并提交后审核通过可获得赏金78% similarUnverifiedRepresentative domestic SRC platforms include Butian (operated by QiAnXin) and Vulbox, while internationally there are HackerOne and Bugcrowd.66% similarUnverifiedLegitimate vulnerability discovery must be conducted within company-authorized SRC platforms or explicitly permitted scopes; any penetration testing against unauthorized systems constitutes illegal activity.66% similarUnverifiedGLM-5.3 has demonstrated impressive results in white-box code review and security vulnerability mining.65% similarUnverifiedMost domestic SRC platforms classify vulnerabilities into four levels—critical, high, medium, and low—and at certain leading internet companies, a single critical vulnerability can yield rewards of tens of thousands of yuan, while low-severity vulnerabilities may only receive point rewards of a few dozen to a few hundred yuan.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/908553API
curl https://kongchang.com/api/v1/knowledge/claims/908553MCP
get_claim(id=908553)