Meta Bug Bounty
Meta's program across Facebook, Instagram, WhatsApp, and their platforms/SDKs, including account-security and GraphQL-heavy surfaces.
Tags: vendor, vrp, graphql, mobile
- Program model
- First-party VRP
- Regions
- Global
- Payout
- USD; established, published guidance and bonuses
Specialties: web, graphql, mobile, oauth
How to approach it
One of the oldest vendor programs. GraphQL and third-party-app/OAuth issues are recurring themes worth studying.
- Meta's surfaces are GraphQL-heavy - the GraphQL playbook applies directly.
- Read their published write-ups/guidance for what they do and don't reward.