The Vercel Bug Bounty Program is now publicly available

Vercel has launched a unified public bug bounty program on HackerOne, combining its former private and open-source programs to cover all Vercel platform products and open-source projects through a single reporting channel. Building on a private program introduced in 2022, collaboration with HackerOne VIP researchers, and public initiatives including the React2Shell and Vercel Sandbox challenges, the company says it has strengthened its security processes and platform defenses. Although AI has increased both legitimate and low-quality vulnerability reports, Vercel believes public participation continues to uncover valuable findings and has developed tooling and workflows to improve triage, remediation, and fix verification. Security researchers can submit reports through HackerOne with reproducible steps, while existing submissions to the prior OSS program will remain under review without needing to be resubmitted.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.