Microsoft Expands Bug Bounty Program to Include Project Spartan

[[Coi] Mr.CLuBBeR]

Find bugs, get paid

If you're good at finding security flaws in software, you could add more than just a little jingle to your pockets. That's because Microsoft is significantly expanding its bug bounty program, part of which includes a new bounty for Project Spartan, the codename for Microsoft's new browser found in Windows 10. You could make up to $15,000 per security vulnerability, depending on what you uncover.
"Microsoft’s new browser will be the onramp to the internet for millions of users when Windows 10 launches later this year. Securing this platform is a top priority for the browser team," Microsoft stated in a blog post today.
The bounty includes Remote Code Execution and Sandbox Escapes, as well as design-level security bugs discovered between today and June 22, 2015. Microsoft says to be sure and use the latest version released in the Windows 10 Technical Preview. Bugs that pay range in reward from $500 to $15,000. For specifics of the program, see here.
Microsoft will also line your pockets with cash for certain bugs you might discover in Azure, the company's cloud platform and the backbone of its cloud services. This applies to Azure virtual machines, Azure Cloud Services, Azure Storage, Azure Active Directory, and other Azure services. Like Project Spartan, the maximum payout per bug is $15,000.
"Bug bounties are an increasingly important part of the vulnerability research and defense ecosystem and will continue to evolve over time. We will be regularly managing the Microsoft Bounty Programs to help us best protect our many users," Microsoft added.
Follow Paul on Google+, Twitter, and Facebook


More...