Blog posts about Bug Bounty

Learn more about the Bug Bounty program, including a recap of 2019’s bugs, our expanded scope, new features, and more.

Read about some big changes for the coming year: full legal protection for researchers, more GitHub properties eligib...

Last month GitHub celebrated the fourth year of our Security Bug Bounty program. As we’ve done in the past, we’re sha...

Coinbase loves bug bounties. We think they fundamentally change the economics of vulnerability reporting. Instead of ...

We’re coming up on four years since the Bug Bounty program was first announced. A lot has changed in that time, and w...

In honor of our Bug Bounty Program’s third birthday, we kicked off a promotional bounty period in January and Februar...

Last month, we announced the third anniversary of our Bug Bounty Program. While there’s still time to disclose your f...

The GitHub Bug Bounty Program is turning three years old. To celebrate, we’re offering bigger bounties for the most s...

Despite the best efforts of its writers, software has vulnerabilities, and GitHub is no exception. Finding, fixing, a...

One of the best ways we protect our members is by identifying vulnerabilities prior to launch through a careful desig...

It’s already been a year since we launched the GitHub Security Bug Bounty, and, thanks to bug reports from researcher...