Microsoft Launches Xbox Bug Bounty Program With Rewards Up To $20,000

Microsoft has launched a bug bounty program to reward discoverers of vulnerabilities in the Xbox Live network and other Xbox services. Reports that meet the conditions can earn up to $20,000.

The maximum amount is paid for finding a vulnerability that enables remote code execution. Finders must be able to show a proof of concept and clearly document the problem. An overview of all rewards and requirements can be found on Microsoft’s bug bounty site.

The $20,000 reward is equal to the maximum amount Microsoft will pay for finding serious vulnerabilities in Office and other applications. Microsoft has several other bug bounty programs that have been running for longer and can deliver more. Finding a serious vulnerability in Azure yields up to $300,000.

Sony does not have a specific bug bounty program for its consoles, but it is affiliated with HackerOne. Researchers can report vulnerabilities in products and sites of the company there, but do not receive any money for this. Sony rewards researchers with a ‘+1’ on their profile and with a t-shirt. Nintendo is also present at HackerOne. The Japanese company specifically asks for reports about vulnerabilities in its Switch and 3DS consoles and is offering up to $20,000.