Meta awarded over $2.3 million in bug bounties in 2024 after receiving nearly 10,000 vulnerability reports, with around 600 qualifying for payouts. Since launching its program in 2011, the company has paid over $20 million to researchers finding flaws in products like Facebook, Instagram, WhatsApp, and Meta AI. Researchers can earn up to $300,000 for critical mobile vulnerabilities and varying amounts for other security issues, including those in Meta’s generative AI and mixed reality products. The company is preparing for its annual Meta Bug Bounty Researcher Conference (MBBRC) in May, which will be held in Tokyo this year. Meta highlighted Philippe Harewood as one of its most prolific researchers, having received over 500 bug bounties in the past decade. Continue here.
