Apple Officially Launches Public Bug Bounty Program Covering All Apple Software

Apple today officially opened its bug bounty program to all security researchers, after the company announced the expansion plan at the Black Hat conference in Las Vegas earlier this year.

apple bug bounty image
Prior to now, Apple's bug bounty program was invitation-based and non-iOS devices were not included. As reported by ZDNet, from today any security researcher who locates bugs in iOS, macOS, tvOS, watchOS, or iCloud will be eligible to receive a cash payout for disclosing the vulnerability to Apple.

Apple has also increased the maximum size of the bounty from $200,000 per exploit to $1 million depending on the nature of the security flaw. A zero-click kernel code execution with persistence will earn the maximum amount.

Apple says it will add a 50 percent bonus on top of the standard payout for bugs found in beta software, which allows the company to nix the issue before the OS version goes public. It is also offering the same bonus for so-called "regression bugs" – these are bugs that Apple has patched in the past but which have been accidentally reintroduced in a later version of the software.

Apple has published more information on its website detailing the bug bounty program's rules, as well as a full breakdown of the rewards being offered to researchers based on the exploits they uncover.

When submitting reports, researchers must include a detailed description of the issue, an explanation of the state of the system when the exploit works, and enough information for Apple to reliably reproduce the issue.

Next year, Apple plans to provide vetted and trusted security researchers and hackers with "dev" iPhones, or special iPhones that provide deeper access to the underlying software and operating system that will make it easier for vulnerabilities to be discovered.

These iPhones are being provided as part of Apple's forthcoming iOS Security Research Device Program, which aims to encourage additional security researchers to disclose vulnerabilities, ultimately leading to more secure devices for consumers.

Top Rated Comments

JustinCymbal Avatar
34 months ago
Definitely incentivizes people to find vulnerabilities the legit way while also getting compensated

Huge increase of the maximum payout too! $200,000 to $1 million

I'm glad that Apple is finally doing this program...
Score: 21 Votes (Like | Disagree)
andycarver Avatar
34 months ago
I got want all ready: Computer is buggy.
Reproductive steps: Install macOS Catalina.
Score: 10 Votes (Like | Disagree)
urtules Avatar
34 months ago
This is great news, sure it will cost a lot of money to run, but it will pay off in security and loyalty. It was always a mystery why only iOS devises were open for bounty. I suppose Apple wanted to finish Catalina first and prevent more exploits with stronger Catalina security features.
Score: 9 Votes (Like | Disagree)
dogslobber Avatar
34 months ago

Yeah great idea. Let’s put a billion Mac and iOS users at risk to satisfy your ridiculous and uninformed notion that security risks only occur due to laziness and lack of testing.
This is a pretty uneducated response.
Score: 8 Votes (Like | Disagree)
adrianlondon Avatar
34 months ago
Dear Apple,
MAIL!

*retires*
Score: 6 Votes (Like | Disagree)
Steve121178 Avatar
34 months ago
Should have happened years ago. I expect a lot of people are going to earn very well from this.
Score: 6 Votes (Like | Disagree)

Popular Stories

Apple Watch Series 7 Starlight Midnight

Standard Apple Watch Series 8 Rumored to Feature Same Design as Series 7

Friday August 5, 2022 7:46 am PDT by
The standard 41mm and 45mm models of the Apple Watch Series 8 will feature the same design as the Apple Watch Series 7, according to Twitter user @ShrimpApplePro, who was first to reveal that iPhone 14 Pro models would feature a new pill-and-hole display. Titanium will not be an option for the standard Apple Watch Series 8 models either, according to @ShrimpApplePro, but Bloomberg's Mark...
iPhone 14 Pro Purple Front and Back MacRumors Exclusive

Five iPhone 14 Rumors You May Have Missed

Thursday August 4, 2022 6:05 am PDT by
With August upon us, the countdown is officially on. We're just weeks away from when we're expecting Apple to announce the iPhone 14 lineup. Rumors of the next iPhone start early in the year, and as a result, some details about the upcoming device sometimes get lost in the crowd. Exclusive MacRumors iPhone 14 Pro renders by graphic designer Ian Zelbo To help MacRumors readers, we've created a ...
oneplus 10t and iphone 13 pro

Camera Comparison: The New OnePlus 10T vs. iPhone 13 Pro Max

Wednesday August 3, 2022 8:30 am PDT by
Android-based smartphone company OnePlus today announced the launch of its newest device, the OnePlus 10T, which we were able to check out ahead of time. The OnePlus 10T, priced starting at $649, boasts upgraded camera technology, so we thought we'd pit it against the iPhone 13 Pro Max to see just how it measures up. Subscribe to the MacRumors YouTube channel for more videos. The OnePlus 10T...
banish safari app pop ups

New iOS App Blocks Those Annoying 'Open in App' Pop-Ups in Safari

Friday August 5, 2022 2:47 am PDT by
You've probably experienced visiting a website like Reddit or LinkedIn on your iPhone only to be greeted with an annoying, almost full-screen pop-up urging you to view the content in their app instead of on the website. It's a common practice for websites that have accompanying iOS apps to push users to open (if they already have the app installed) or download their app from the App Store to ...
apple watch series 7 titanium

Apple Watch Edition Begins Selling Out Ahead of Series 8 Launch

Tuesday August 2, 2022 7:55 am PDT by
Apple Watch Edition models are beginning to sell out just weeks before the Apple Watch Series 8 lineup is expected to be announced. Several of the high-end Apple Watch Series 7 models with titanium casings are listed as "currently unavailable" on Apple's online store in the United States, Canada, the United Kingdom, and select other countries. In the United States, availability of 41mm...