Vulnerability Box
A third-party vulnerability aggregation platform in China that provides enterprise vulnerability response services and bug bounty programs for white-hat security researchers. It operates as one of the mainstream Security Response Center (SRC) aggregation platforms domestically, connecting organizations with independent security researchers to facilitate coordinated vulnerability disclosure and remediation.
Core Facts
Timeline (last 90 days)
Third-party aggregation platforms such as Butian, Vulnerability Box, and HackerOne uniformly manage white-hat identity verification, vulnerability acceptance standards, and bounty disbursement processes, with HackerOne targeting overseas vendors.
Common SRC platforms include Alibaba Cloud Xianzhī, Tencent Security Response Center, and Vulbox.
Major domestic SRCs include self-built platforms by large companies such as Alibaba, Tencent, and ByteDance, as well as third-party aggregation platforms such as CNVD (China National Vulnerability Database) and Butian.
Butian and Vulnerability Box are SRC vulnerability submission platforms in China.
Representative domestic SRC platforms include Butian (operated by QiAnXin) and Vulbox, while internationally there are HackerOne and Bugcrowd.
补天、漏洞盒子是第三方漏洞聚合平台
All Facts (6)
Representative domestic SRC platforms include Butian (operated by QiAnXin) and Vulbox, while internationally there are HackerOne and Bugcrowd.
65%UnverifiedThird-party aggregation platforms such as Butian, Vulnerability Box, and HackerOne uniformly manage white-hat identity verification, vulnerability acceptance standards, and bounty disbursement processes, with HackerOne targeting overseas vendors.
50%UnverifiedCommon SRC platforms include Alibaba Cloud Xianzhī, Tencent Security Response Center, and Vulbox.
50%UnverifiedMajor domestic SRCs include self-built platforms by large companies such as Alibaba, Tencent, and ByteDance, as well as third-party aggregation platforms such as CNVD (China National Vulnerability Database) and Butian.
50%UnverifiedButian and Vulnerability Box are SRC vulnerability submission platforms in China.
50%Unverified补天、漏洞盒子是第三方漏洞聚合平台
50%