The Limited-Time Bounties section includes the following types of requests

When we need vulnerabilities beyond our usual requests
When we have an urgent request that needs to be resolved

Microsoft Outlook RCE

Target:
Microsoft Outlook
Bounty:
Up to $400,000
Start Date:
27 January 2022
End Date:
TBD
We are temporarily increasing our payout for Microsoft Outlook RCEs from $250,000 to $400,000. We are looking for zero-click exploits leading to remote code execution when receiving/downloading emails in Outlook, without requiring any user interaction such as reading the malicious email message or opening an attachment. Exploits relying on opening/reading an email may be acquired for a lower reward.
Learn Bounties for exploits

Microsoft Outlook RCE

Target:
Microsoft Outlook
Bounty:
Up to $400,000
Start Date:
27 January 2022
End Date:
TBD
We are temporarily increasing our payout for Microsoft Outlook RCEs from $250,000 to $400,000. We are looking for zero-click exploits leading to remote code execution when receiving/downloading emails in Outlook, without requiring any user interaction such as reading the malicious email message or opening an attachment. Exploits relying on opening/reading an email may be acquired for a lower reward.
Learn Bounties for exploits

Microsoft Outlook RCE

Target:
Microsoft Outlook
Bounty:
Up to $400,000
Start Date:
27 January 2022
End Date:
TBD
We are temporarily increasing our payout for Microsoft Outlook RCEs from $250,000 to $400,000. We are looking for zero-click exploits leading to remote code execution when receiving/downloading emails in Outlook, without requiring any user interaction such as reading the malicious email message or opening an attachment. Exploits relying on opening/reading an email may be acquired for a lower reward.
Learn Bounties for exploits

Our submission processing time is less than a week

Submit an Exploit
1
sell exploit

Preliminary Contract

Researchers sends minimal detail and specifications of the exploit
2

Preliminary Offer

We review the minimal details and send a preliminary offer
3

Code
Submission

Researcher submits the full technical details and exploit to us
4

Code
Evaluation

We review the research and test the exploit then send the final offer
5

Final
Payment

Researcher accepts the final offer and receives the payment in one week
Copy PGP KEY
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=vw7O
-----END PGP PUBLIC KEY BLOCK-----