Okuzeka
Cybersecurity vocabulary · Penetration Testing

Bug bounty

Meaning in cybersecurity, with examples

nounAdvanced term

In cybersecurity, bug bounty means: A programme in which an organisation invites outside researchers to find and report vulnerabilities in its systems and pays rewards for valid reports.

In Turkish: hata ödül programı, bug bounty

How it is used

Run directly or through platforms such as HackerOne and Bugcrowd. Each programme has a scope, rules and a payout table. Researchers submit a report, and the company triages it and decides the bounty.

Example sentences

  1. We launched a private bug bounty with 50 invited researchers.

  2. The bug bounty paid 5,000 dollars for the account takeover report.

Common collocations

  • bug bounty programme
  • bug bounty hunter
  • bounty payout
  • in scope
  • submit a report
  • responsible disclosureReporting a vulnerability privately to the vendor or owner first and giving them reasonable time to fix it before any details are made public.
  • ethical hackerA security professional who uses attackers' skills and methods, with the owner's written permission, to find and report weaknesses so that they can be fixed.
  • proof of conceptA small demonstration, such as a piece of code or a screenshot, that shows a vulnerability is real and can actually be exploited.
  • penetration testAn authorised, simulated attack on a system, application or network, carried out by security specialists to find weaknesses before real attackers do.

This word in other fields

The same English word can have a different meaning in another field:

More terms: Penetration Testing

Practise with graded reading

Reading at the right level is the fastest way to make new words stick. Pick free English books by level: