NordVPN maker has expanded its bug bounty program

Security Bug
(Image credit: Shutterstock)

Nord Security, the parent company of NordVPN, has officially launched a bug bounty program for its VPN service as well as for its password manager NordPass and its file encryption service NordLocker.

NordVPN first launched its bug bounty program back in December of 2019. However, as Nord Security's product family has expanded, the company has now extended the program to include NordPass and NordLocker.

TechRadar needs you!

We're looking at how our readers use VPN for a forthcoming in-depth report. We'd love to hear your thoughts in the survey below. It won't take more than 60 seconds of your time.

>> Click here to start the survey in a new window<<

Through its bug bounty program, Nord Security is giving ethical hackers the chance to discover potential security vulnerabilities, report them and earn monetary rewards. The company's CTO Marijus Briedis provided further insight on its bug bounty program in a press release, saying:

“Security is our number one priority in all of our products. Therefore, we want to engage as many expert penetration testers as we can. The Bug Bounty initiative allows us to utilize all the security talent available and empowers everyone in the community to help us build a safer online world.” 

Bug bounty program

Nord Security's bug bounty program is implemented via the HackerOne platform which helps connect businesses with penetration testers and security researchers around the world. In fact, many of the world's biggest brands including Starbucks, Sony and many others depend on the company's services for their own bug bounty programs.

“Nord Security uses a managed service from HackerOne, which helps us progress in better program design and bug management and provides us with additional support running our program from end to end”, added Briedis.

Nord Security and HackerOne plan to celebrate the program's launch by running a two-week event from March 31 to April 14 where ethical hackers will receive double the normal amount for finding high and critical vulnerabilities in NordVPN. However, only reports related to NordVPN's desktop and mobile apps will be considered eligible during the event.

While security researchers and ethical hackers can now earn bounties for finding vulnerabilities in NordVPN, NordPass and NordLocker, Nord Security's customers can rest easy knowing that their software is secure.

TOPICS
Anthony Spadafora

After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home. 

Read more
A woman at a table using a Windows laptop, opposite sits a man, neither show their face
Microsoft will now pay you even more to find security bugs in Copilot
NordVPN running on a desktop, mobile devices, Apple TV, a router and a game console
NordVPN reacts to results from its latest security audit
NordProtect logo
Standalone identity theft protection from Nord Security is now available
A hand holds a smartphone displaying the NordVPN logo
NordVPN's birthday is here – and you can celebrate with some serious discounts
Application Security Testing Concept with Digital Magnifying Glass Scanning Applications to Detect Vulnerabilities - AST - Process of Making Apps Resistant to Security Threats - 3D Illustration
Google bug bounty payments hit nearly $12 million in 2024
Ransomware
Fortinet firewall bugs are being targeted by LockBit ransomware hackers
Latest in VPN Services
A hand holds a smartphone displaying the NordVPN logo
NordVPN Prime hits lowest-ever price in VPN Spring sale
ExpressVPN mobile app and Aircove
ExpressVPN ‘reduces workforce’ for the second time in two years
Harry Halpin, CEO and co-founder of Nym Technologies, and Chelsea Manning, Nym Technlogies&#039; security consultant, on stage at the Frontline Club in London during the NymVPN launch on March 13, 2025.
NymVPN is now live – here's everything you need to know
Green background featuring laptop with connect button
I tried the "world's most secure VPN" and while it's not the VPN you'll want, you'll need it sooner than you think
A representational concept of a social media network
Living in the US? You can now measure your online data exposure for free
Surfshark Alternative Number running on an iPhone
How to use Surfshark Alternative Number to stop unwanted spam and scam calls
Latest in News
Google Pixel 9
The Google Pixel 10 just showed up in Android code – and may come with a useful speed boost
L-mount alliance
Sirui joins L-Mount Alliance to deliver its superb budget lenses for Leica, DJI, Sigma and Panasonic cameras
Security padlock and circuit board to protect data
Trust in digital services around the world sees a massive drop as security worries continue
A Lego Pikachu tail next to a Pebble OS watch and a screenshot of Assassin&#039;s Creed Shadow
ICYMI: the week's 7 biggest tech stories from LG's excellent new OLED TV to our Assassin's Creed Shadow review
Samuel and Romy standing very close together in A24&#039;s Babygirl movie
Everything new on Max in April 2025, including A24's Babygirl and The Last of Us season 2
An AMD Radeon RX 9070 XT made by Sapphire on a table with its retail packaging
AMD’s secret weapon against Nvidia seems to be stock – way more RX 9070 GPUs are rumored to be hitting shelves than RTX 5000 models