Apple raises Apple Security Bounty — up to $2M base, $5M with bonuses

Apple announced major changes to its Apple Security Bounty program to encourage highly specialized security research and strengthen the protection of its operating systems. Key points:

• Maximum base payout: Up to $2,000,000 for the most severe vulnerabilities.
• Potential total payout: Up to $5,000,000 when combining base payouts with bonuses.
• Focus areas: WebKit/browser exploits, wireless proximity attacks, Lockdown Mode bypasses, and other advanced attack chains.
• New tools/approach: Target flags to help researchers simulate realistic, high-value attack scenarios.
• Purpose: Attract specialized researchers and improve defenses against sophisticated spyware and targeted attacks.

For the official program details, see Apple’s Security Bounty page: https://security.apple.com/bounty/

Sources cited in coverage include Apple’s security page and independent reporting on the program changes.

Tweet posted: Apple expands its Apple Security Bounty: base payouts now up to $2M for critical vulnerabilities and up to $5M with bonuses, targeting advanced spyware and specialized research. Read more: https://security.apple.com/bounty/ What’s your take — will this change iPhone security? Reply below.

Published: 2025-10-10