Between July 1, 2025, and June 30, 2026, the Microsoft Bug Bounty Program awarded a total of $20 million to 500 researchers who discovered and reported vulnerabilities in the company's software.
The largest single reward paid out during this period was $200,000, according to Microsoft's Bug Bounty Program statistics.
Microsoft's Bug Bounty Program has been a key player in the cybersecurity industry, providing a platform for researchers to earn rewards for identifying and reporting security vulnerabilities in the company's software.
These researchers, who were identified as 'white-hat hackers,' used their skills to uncover critical vulnerabilities in Microsoft's products, including Windows and Office.
Microsoft's Bug Bounty Program has been instrumental in helping the company identify and fix security vulnerabilities before they can be exploited by malicious actors.
The program has also provided a lucrative opportunity for researchers to earn a living by discovering and reporting security vulnerabilities in Microsoft's software.