Apple Launches Bug Bounty Program, Offers Up to $200,000 for Software Vulnerabilities Discovered - MacRumors
Skip to Content

Apple Launches Bug Bounty Program, Offers Up to $200,000 for Software Vulnerabilities Discovered

by

At today's Black Hat Conference, an annual event designed for the global InfoSec community, Apple's head of security engineering Ivan Krstic announced the launch of a bug bounty program that will see Apple paying money to individuals who discover major bugs and security flaws in the company's software.

Many major technology companies like Google and Microsoft offer bug bounty programs to encourage people to discover and report major vulnerabilities, but until now, Apple has declined to provide a similar program.

applebugbounty


According to TechCrunch, Apple's new bug bounty program is part of Apple's effort to open up to hackers, researchers, and cryptographers who want to help improve the company's security.

Apple will be offering bounties of up to $200,000 to researchers depending on the vulnerability that's discovered. Secure boot firmware components will earn $200,000 at the high end, while smaller vulnerabilities, like access from a sandboxed process to user data outside of the sandbox, will earn $25,000.

Although each category of vulnerability maxes out at the given rate, Apple will determine the exact reward amount based on several factors: the clarity of the vulnerability report; the novelty of the problem and the likelihood of user exposure; and the degree of user interaction necessary to exploit the vulnerability.

Apple plans to launch its new bug bounty program in September. To be eligible for a reward as part of the program, researchers will need to provide proof-of-concept on the latest versions of iOS and the company's newest hardware. Apple will also encourage researchers to donate their earnings to charity and will match all bug bounty donations.

The program will be invite only for the time being, limited to a few dozen researchers. Apple plans to make it more open as it grows, and if a non-member discovers a significant bug, they'll be invited to the program.

Popular Stories

iPhone 18 Pro Deep Red Feature

iPhone 18 Pro Launching in Two Months With These 12 New Features

Friday July 17, 2026 10:39 am PDT by
It is now mid-July, and that means the iPhone 18 Pro and iPhone 18 Pro Max are now just two months away. The devices are expected to look similar to the iPhone 17 Pro and iPhone 17 Pro Max, but there will still be many year-over-year changes, with rumored features including a smaller Dynamic Island, 5G via satellite, and more. Apple is expected to unveil the iPhone 18 Pro, iPhone 18 Pro Max, ...
Read Full Article • 42 comments
iCloud General Feature Redux

Apple Raises iCloud+ Prices in 8 Countries

Friday July 17, 2026 11:56 am PDT by
Apple has increased the price of iCloud+ in Nigeria, Türkiye, Vietnam, Japan, Egypt, New Zealand, the Philippines, and Indonesia, according to an updated version of its iCloud support document. Price increases range from 11 percent to 55 percent depending on the plan and the country. Nigeria saw the biggest hike, and a 50GB plan is now ₦1,300, up from ₦900. Türkiye saw the next largest...
Read Full Article • 79 comments
iphone 17 cyber

Apple Closes Unlocked iPhone Loophole for T-Mobile and Verizon Financing

Wednesday July 15, 2026 3:20 pm PDT by
Carrier-financed iPhones purchased from Apple will soon be locked to the carrier, ending a workaround customers used to purchase an unlocked iPhone on a payment plan. Until the rule change, buying an iPhone from Apple and opting for financing through Verizon or T-Mobile meant you would get an iPhone not locked to either carrier's network. That's no longer the case, and now iPhones financed...
Read Full Article • 147 comments

Top Rated Comments

N
now i see it
130 months ago
I discovered a bug in Apple's Mac update schedule. The Mac never seems to update. Can I collect $200,000?
Score: 27 Votes (Like | Disagree)
T
TheHorrorNerd
130 months ago
I discovered a bug in Apple's Mac update schedule. The Mac never seems to update. Can I collect $200,000?
And that's why its invite only...
Score: 18 Votes (Like | Disagree)
4
44267547
130 months ago
$200,000 is a great incentive to help detect these issues. Hopefully it's successful.
Score: 16 Votes (Like | Disagree)
Twimfy Avatar
Twimfy
130 months ago
The incredibly buggy new OS releases shows that Apple is no longer capable of doing it in-house - going the OUTSOURCING route.
Not quite, doesn't matter how many gifted employees you have in-house you'll never catch everything. A familiar work environment breeds a familiar way of thinking, sometimes you need someone to take a look at code from a completely different perspective and it's amazing what can be spotted hiding in plain sight. Happens in all walks of life.

Increasing the number of eyes on their systems with a financial incentive is a really efficient and effective way of catching security flaws.
Score: 14 Votes (Like | Disagree)
T
TheHorrorNerd
130 months ago
Can no longer do it in-house - going the OUTSOURCING route.
Oh come on... Most other companies "outsource" it... Its smart business.
Score: 14 Votes (Like | Disagree)
E
EricTheHalfBee
130 months ago
Great idea. iOS will always be more secure than Android, and this will only further that gap.
Score: 10 Votes (Like | Disagree)
Read All Comments