Bug Bounty

Feb 17, 2016

Since February 2016, Espressif has run a bug bounty program rewarding users who find bugs in ESP8266 and ESP32 SDKs. The ESP8266 program ended in July 2018, but the ESP32 bug bounty is still on!

UPD: as of July 31, 2018

From February 2016 until July 2018, Espressif ran a bug bounty program. The purpose was  to reward users for finding bugs in Espressif's SDKs. For every reported bug that was subsequently verified, the user was eligible to receive a cash award set as follows:

Chip SDK Award
ESP8266 / ESP8285 ESP8266_NONOS_SDK 2,000 USD/ program ended in July 2018
ESP8266 / ESP8285 ESP8266_RTOS_SDK 2,000 USD/ program ended in July 2018
ESP32 Security - Bugs ESP-IDF 500 USD
ESP32 Security - Proof of Concept ESP-IDF 1,729 USD

The ESP8266 program officially ended in July 2018. However, we are still accepting entries for the ESP32 bug bounty .

For more information, please visit our forum: ESP32 Bug Bounty

Alternatively, you can send an email to: 

  • News
    BLE support in Amazon FreeRTOS is now available in beta. Users can securely connect ESP32 dev boards, or other a:FreeRTOS devices that use BLE, to AWS IoT through Android and iOS devices.
  • News
    “MicroEJ for ESP32” provides a secure platform for designing compact-sized and low-power IoT products with a rich set of features and an improved user experience.
  • News
    Espressif products were presented by Macnica last month at the 2018 electronica, the biggest gathering of the electronics industry in Europe.