Kubernetes Bug Bounty Program Officially Launched for All Researchers

The Kubernetes bug bounty program has officially become available for all researchers after previously launching only for a limited number of invited security experts.

The program, which runs on HackerOne, comes with rewards that start at $100 and go all the way up to $10,000 if the found security flaw affects the core Kubernetes engine.

According to the official bug bounty guidelines posted here, the maximum $10,000 payment is offered for a critical vulnerability that exists in GA and beta features of core Kubernetes, Kubernetes-owned core dependencies, or core add-ons, and include the ability to alter the source code without owner approval or launch DoS attacks on release artifacts.

Rapid payments

Maya Kaczorowski and Tim Allclair, both from Google, says that while all vulnerability reports are welcome, there are some flaws that researchers look after with the help of the bug bounty program.

“We’r...