Microsoft paid out millions in bug bounties last year

The Microsoft Bounty Program paid out over $2m to security researchers for finding software bugs in its products in 2018 alone and now the company plans to extend its bug bounty program further with a number of improvements intended to better serve the security research community.

For starters, the Cloud, Windows and Azure DevOps programs will now award bounties upon completion of reproduction and assessment of each submission rather than waiting until the final fix has been determined.

By shortening the time from submission to award determination, Microsoft is helping researchers get their bounty rewards faster which should encourage them to continue to do so and may even help draw more researchers to the cause.

The company has also partnered with HackerOne for bounty payment processing and support to delivery bounty awards more efficiently. The hacker-powered security platform will also offer more payment options including PayPal, cryptocurrencies and direct bank transfer in more than 30 currencies.

Increased awards and duplicate submissions

Microsoft is also raising the top payouts in multiple bounty programs including the Windows Insider Preview bounty which increased from $15k to $50k in January 2019 and the Microsoft Cloud Bounty program for Azure, Office 365 and other online services will increase from $15k to $20k.

The scope of the Cloud bounty has also been expanded and the company plans to further expand the scope and rewards across its programs throughout the year.

Microsoft has also updated its policy on duplicate submissions in an effort to reward researchers for their contributions whenever it can. Now the first researcher to report a bounty-eligible vulnerability will receive the full eligible bounty award even if the bug is already known internally.

However, there has been no change to the company's policy regarding duplicate external reports of the same vulnerability and rewards are given on a first come first served basis.

How It works

Search Crack for

Latest IT News

Jun 18
Heads up, Mac gamers: big-time PC game port studio to drop support for 32-bit
Aspyr is ending sales of 32-bit titles as Apple discontinues 32-bit app support in the upcoming macOS Catatlina.
Jun 14
Best drawing and painting software of 2019
We’ve picked out the most popular drawing and painting apps currently available.
Jun 13
Why you still need an email client in 2019
Webmail and apps are convenient, but with an email client, you're the one in control of your inboxes.
Jun 10
A new update will break many popular ad-blocking extensions, but it won't be rolled out to all Chromium-based browsers.
Jun 9
We pick the best calendar apps that will make sure you never miss a meeting or appointment again.
Jun 5
We compare macOS Catalina and Windows 10 May 2019 Update to find out what OS offers the most.
Jun 4
As the company rebrands, new Kaspersky UK head lays out his plans

Latest cracks