Microsoft paid out millions in bug bounties last year

Image Credit: Microsoft (Image credit: Image Credit: Microsoft)

The Microsoft Bounty Program paid out over $2m to security researchers for finding software bugs in its products in 2018 alone and now the company plans to extend its bug bounty program further with a number of improvements intended to better serve the security research community.

For starters, the Cloud, Windows and Azure DevOps programs will now award bounties upon completion of reproduction and assessment of each submission rather than waiting until the final fix has been determined.

By shortening the time from submission to award determination, Microsoft is helping researchers get their bounty rewards faster which should encourage them to continue to do so and may even help draw more researchers to the cause.

The company has also partnered with HackerOne for bounty payment processing and support to delivery bounty awards more efficiently. The hacker-powered security platform will also offer more payment options including PayPal, cryptocurrencies and direct bank transfer in more than 30 currencies.

Increased awards and duplicate submissions

Microsoft is also raising the top payouts in multiple bounty programs including the Windows Insider Preview bounty which increased from $15k to $50k in January 2019 and the Microsoft Cloud Bounty program for Azure, Office 365 and other online services will increase from $15k to $20k.

The scope of the Cloud bounty has also been expanded and the company plans to further expand the scope and rewards across its programs throughout the year.

Microsoft has also updated its policy on duplicate submissions in an effort to reward researchers for their contributions whenever it can. Now the first researcher to report a bounty-eligible vulnerability will receive the full eligible bounty award even if the bug is already known internally.

However, there has been no change to the company's policy regarding duplicate external reports of the same vulnerability and rewards are given on a first come first served basis.

  • We've also highlighted the best antivirus to help protect all of your devices online
TOPICS
Anthony Spadafora

After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home. 

Latest in Software & Services
A man sitting at his desk in the evening and using a desktop computer
Office 2021 vs Office 2024: is it time to upgrade?
Microsoft 365 Business app logos
Office 2024 LTSC vs Microsoft 365 Business: what are the differences?
Windows 11 Start menu layout choices: Grid view
Windows 11 vs Linux for business: which operating system should you embrace?
A phone sitting on a laptop keyboard with the Microsoft Outlook logo on the screen.
Gmail vs Outlook for business: which email system is right for your organization?
Windows 11 logo
Windows 11 Pro vs Windows 11 Home: which version is right for you?
Canva HubSpot
HubSpot and Canva team up to level the creative playing field
Latest in News
UK Prime Minister Sir Kier Starmer
UK PM says AI should soon replace civil servants
Xbox Copilot in Minecraft
Microsoft confirms Copilot can be tested by Xbox Insiders next month and shares new details about how the AI sidekick will enhance the player experience: 'It has to be about gameplay, it has to be personalized to you'
Eight Samsung TVs mounted to the wall showing different basketball games
Samsung is offering you 8 new TVs in one bundle for March Madness, in case you want to watch all games at once like a Bond villain’s lair
Image depicting hands typing on a keyboard, with phishing hooks holding files, passwords and credit cards.
Microsoft warns about a new phishing campaign impersonating Booking.com
The Steam Logo on a mobile phone in front of a wall of games.
Today’s Steam Spring Sale features my absolute favorite game of all time - here's when the sale starts and all the key info
Apple iPhone 16 Pro Max REVIEW
The latest iPhone 17 Pro Max leak may have given us another look at its upcoming redesign