Bug Bounty
A crowdsourced security testing mechanism in which enterprises publish vulnerability reward programs through platforms, and security researchers receive bounties for discovering and reporting vulnerabilities.
Core Facts
Timeline (last 90 days)
On most Bug Bounty platforms, rewards for vulnerability reports follow a first-come, first-served principle; if multiple people submit the same vulnerability, only the first confirmed report receives a bounty, and subsequent reports are marked as Duplicate and receive no reward.
Domestic SRC platforms are divided into company-built types (such as TSRC, ASRC, and ByteDance Security Response Center) and aggregated types (such as the Butian Vulnerability Response Platform and Vulbox).
All Facts (2)
Domestic SRC platforms are divided into company-built types (such as TSRC, ASRC, and ByteDance Security Response Center) and aggregated types (such as the Butian Vulnerability Response Platform and Vulbox).
70%UnverifiedOn most Bug Bounty platforms, rewards for vulnerability reports follow a first-come, first-served principle; if multiple people submit the same vulnerability, only the first confirmed report receives a bounty, and subsequent reports are marked as Duplicate and receive no reward.
50%