Butian
A third-party vulnerability aggregation platform under Qi An Xin, providing vulnerability submission and reward services for white-hat security researchers. It consolidates vulnerability collection requirements from multiple enterprise Security Response Centers (SRCs).
Core Facts
Timeline (last 90 days)
Third-party aggregation platforms such as Butian, Vulnerability Box, and HackerOne uniformly manage white-hat identity verification, vulnerability acceptance standards, and bounty disbursement processes, with HackerOne targeting overseas vendors.
The reward range for a single vulnerability on the Butian platform varies from 10 yuan to 6,000 yuan, and a library coin exchange mechanism is provided for redeeming goods in the mall.
Major domestic SRCs include self-built platforms by large companies such as Alibaba, Tencent, and ByteDance, as well as third-party aggregation platforms such as CNVD (China National Vulnerability Database) and Butian.
Butian and Vulnerability Box are SRC vulnerability submission platforms in China.
Representative domestic SRC platforms include Butian (operated by QiAnXin) and Vulbox, while internationally there are HackerOne and Bugcrowd.
补天、漏洞盒子是第三方漏洞聚合平台
All Facts (6)
Representative domestic SRC platforms include Butian (operated by QiAnXin) and Vulbox, while internationally there are HackerOne and Bugcrowd.
65%UnverifiedThird-party aggregation platforms such as Butian, Vulnerability Box, and HackerOne uniformly manage white-hat identity verification, vulnerability acceptance standards, and bounty disbursement processes, with HackerOne targeting overseas vendors.
50%UnverifiedThe reward range for a single vulnerability on the Butian platform varies from 10 yuan to 6,000 yuan, and a library coin exchange mechanism is provided for redeeming goods in the mall.
50%UnverifiedMajor domestic SRCs include self-built platforms by large companies such as Alibaba, Tencent, and ByteDance, as well as third-party aggregation platforms such as CNVD (China National Vulnerability Database) and Butian.
50%UnverifiedButian and Vulnerability Box are SRC vulnerability submission platforms in China.
50%Unverified补天、漏洞盒子是第三方漏洞聚合平台
50%