DJI will pay users to find vulnerabilities in drone software

Chinese drone maker DJI has announced it will launch a bug bounty program that will reward drone users if they find vulnerabilities or flaws in DJI’s drone software.

The company says it will pay between $100 and $30,000, depending on the severity of the vulnerability found. They can cover a fairly wide range of software issues, from simple bugs to potentially dangerous security exploits. DJI says it is interested in issues that can affect the integrity of user data, or in problems that affect flight safety because restrictions such as geofencing or flight ceilings are negatively affected.

DJI is working on a special website that lists all the conditions for the so-called DJI Threat Identification Reward Program, including a standard form on which found potential vulnerabilities can be reported. At this time, any notifications can be sent to a special email address.

The Chinese drone maker says this bug bounty program is part of a new effort to address DJI drone safety concerns. The company will also collaborate with security researchers and academics to increase the security of its products. In addition, DJI says it is introducing a new internal approval process to approve and evaluate new software before it is released.