4 ms·
I would just reach out to AWS directly: why go through hacker one? They have a direct email and are responsive. If the issue meets their criteria then you get
by orf 2y ago
I would just reach out to AWS directly: why go through hacker one?
They have a direct email and are responsive. If the issue meets their criteria then you get a payout.
- Max-Ganz-II 2y agoI Googled for AWS bug bounty programs. I found nothing. Do you have a URL of any kind, for more information about this, including contacts?
- TheDong 2y agohttps://aws.amazon.com/security/vulnerability-reporting/ https://aws.amazon.com/security/vulnerability-reporting/ I wouldn’t expect a bounty for something like this, but I believe the above is the correct avenue for reporting it.
- orf 2y agoaws-security@amazon.com - it’s very clearly the first result when you search “AWS security report”.