Bug Bounty

Feb 17, 2016

Since February 2016, Espressif has run a bug bounty program rewarding users who find bugs in ESP8266 and ESP32 SDKs. The ESP8266 program ended in July 2018, but the ESP32 bug bounty is still on!

UPD: July 31, 2018

From February 2016 until July 2018, Espressif ran a bug bounty program. The purpose was to reward users for finding bugs in Espressif's SDKs. For every reported bug that was subsequently verified, the user was eligible to receive a cash award set as follows:

Chip SDK Award
ESP8266 / ESP8285 ESP8266_NONOS_SDK 2,000 USD/ program ended in July 2018
ESP8266 / ESP8285 ESP8266_RTOS_SDK 2,000 USD/ program ended in July 2018
ESP32 Security - Bugs ESP-IDF 500 USD
ESP32 Security - Proof of Concept ESP-IDF 1,729 USD

The ESP8266 program officially ended in July 2018. However, we are still accepting entries for the ESP32 bug bounty .

For more information, please visit our forum: ESP32 Bug Bounty

Alternatively, you can send an email to: 

Share this article
Reuse this content