We are excited to announce the new Microsoft Defender Bounty Program with awards of up to $20,000 USD.

The Microsoft Defender brand encompasses a variety of products and services designed to enhance the security of the Microsoft customer experience. The Microsoft Defender Bounty Program invites researchers across the globe to identify vulnerabilities in Defender products and services and share them with our team. The Defender program will begin with a limited scope, focusing on Microsoft Defender for Endpoint APIs, and will expand to include other products in the Defender brand over time.  

To learn more about eligible scope and award amounts, please visit the Defender Bounty Program page.

Microsoft’s Bug Bounty programs represent one of the many ways we invest in partnerships with the global security research community to help secure Microsoft customers. If you have any questions about the new bounty program or any of our other security research incentive programs, please contact us at [email protected].

Madeline Eckert, MSRC