Bug Bounty

Feb 17, 2016

Since February 2016, Espressif has run a bug bounty program rewarding users who find bugs in ESP8266 and ESP32 SDKs. The ESP8266 program ended in July 2018, but the ESP32 bug bounty is still on!

UPD: as of July 31, 2018

From February 2016 until July 2018, Espressif ran a bug bounty program. The purpose was  to reward users for finding bugs in Espressif's SDKs. For every reported bug that was subsequently verified, the user was eligible to receive a cash award set as follows:

Chip SDK Award
ESP8266 / ESP8285 ESP8266_NONOS_SDK 2,000 USD/ program ended in July 2018
ESP8266 / ESP8285 ESP8266_RTOS_SDK 2,000 USD/ program ended in July 2018
ESP32 Security - Bugs ESP-IDF 500 USD
ESP32 Security - Proof of Concept ESP-IDF 1,729 USD

The ESP8266 program officially ended in July 2018. However, we are still accepting entries for the ESP32 bug bounty .

For more information, please visit our forum: ESP32 Bug Bounty

Alternatively, you can send an email to: 

  • News
    ESP-Jumpstart is Espressif’s new reference guide which aims to help developers convert their ideas into actual products as quickly as possible.
  • News
    ESP32 now supports Dialogflow, a conversational interface from Google, which enables IoT developers to embed natural-language processing in their devices.
  • News
    ESP-EYE is currently being featured on China’s biggest social-media platform, which has more than a billion monthly active users.