Bug Bounty Program Definition & Meaning

A Bug Bounty Program (BBP), also referred to as a vulnerability rewards program, is a crowdsourcing initiative offered by websites, organizations, and software developers that rewards individuals for discovering and reporting software bugs. Individuals who discover bugs can receive recognition and even compensation, especially those who report security exploits or vulnerabilities.

The purpose of a bug bounty program is to allow developers to resolve bugs before the general public is aware of them and to supplement internal code audits and penetration tests. Well-known companies such as Mozilla, Facebook, Google, and Microsoft have implemented BBPs. A bug report must document enough information in order for the program to be able to reproduce the vulnerability. The amount of compensation paid depends on the size of the organization, difficulty in hacking the system, and how much impact the bug has.

A BBP uses ethical hacking, which is the legal hacking of a computer system to identify areas where organizations can improve. Companies such as the United States Department of Defense and other government agencies have started using BBPs. This is a reversal from previously threatening ethical hackers with legal recourse to now inviting them to participate.

Bug bounty program disadvantages

While bug bounties can be effective, they can also be controversial. While most companies complete a full background check on the testers they allow into their program, the issue of trust still arises. To limit potential risk, some organizations have BBPs that require an invitation. Apple has limited bug bounty participation to a few dozen researchers.

A large disadvantage is the lack of relationship BBP testers have with a company. They do not partner with a company over time, so results are not tailored to match the company’s security initiatives or level of risk.

Top Articles

The Complete List of Text Abbreviations & Acronyms

From A3 to ZZZ we list 1,559 text message and online chat abbreviations to help you translate and understand today's texting lingo. Includes Top...

How to Create a Website Shortcut on Your Desktop

This Webopedia guide will show you how to create a desktop shortcut to a website using Firefox, Chrome or Internet Explorer (IE). Creating a desktop...

Windows Operating System History & Versions

The Windows operating system (Windows OS) refers to a family of operating systems developed by Microsoft Corporation. We look at the history of Windows...

Hotmail [Outlook] Email Accounts

By Vangie Beal Hotmail was one of the first public webmail services that could be accessed from any web browser. Since 2011, Hotmail, in terms...

No-Code Development Definition &...

No-code development is a method of application development that allows people without programming...

Trusted Device Definition &...

A trusted device is a machine, such as a mobile phone, laptop, tablet...

What Is a Columnar...

A columnar database management system (CDBMS) is a type of database management system...