NordVPN boosts security with new bug bounty program
Researchers can earn up to $5,000 for reporting critical flaws
As part of its ongoing efforts to boost the security of its VPN service, NordVPN has launched its own bug bounty program on the HackerOne platform.
The new program is inviting ethical hackers and security researchers to look for potential security vulnerabilities in the VPN provider's software and report them for monetary rewards.
Head of communications at NordVPN, Ruby Gonzalez explained how the company's new bug bounty program will help secure its infrastructure, saying:
- Microsoft paid out millions in bug bounties last year
- NordVPN Teams is a VPN solution for businesses
- Google offers million-dollar bug bounty reward
“At NordVPN, we seek to make our infrastructure — and customers' data — as secure as possible. And community participation is essential for reaching this goal.”
Bug bounty program
NordVPN's new bug bounty program will encourage security researchers to analyze its website, applications and services. Through their efforts, the company hopes to increase both the quality and security of its VPN service.
It is a win-win situation for researchers and NordVPN's users as researchers will receive cash rewards for finding bugs while users can rest assured knowing that their VPN service is scoured for bugs by thousands of people every day to make it as secure as possible.
For minor issues, NordVPN will pay bounties from $100 while reporting critical flaws can earn researchers as much as $5,000. All of the findings must be reported using the HackerOne platform and the company will accept findings related to its applications, servers, backend services, website and more.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
NordVPN's bug pounty program is one of five measures the firm is implementing to enhance its security alongside switching to diskless RAM servers, undergoing a full infrastructure security audit, partnering with the cybersecurity company VerSprite and higher security standards.
- Also check out our complete list of the best VPN services
After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home.