vulns.cofield index
Enter
Contribute
Security research platform · vendor

Meta Bug Bounty

Meta's program across Facebook, Instagram, WhatsApp, and their platforms/SDKs, including account-security and GraphQL-heavy surfaces.

vendorvrpgraphqlmobile
Stable IDplatform:meta-bugbountyLast updatedLast verifiedLegacy review pendingProvenancePlatform-supplied information
Overview

Research on Meta Bug Bounty

One of the oldest vendor programs. GraphQL and third-party-app/OAuth issues are recurring themes worth studying.

Program type
First-party VRP
Regions
Global
Payout
USD; established, published guidance and bonuses
Field notes

Practical guidance

  • Meta's surfaces are GraphQL-heavy - the GraphQL playbook applies directly.
  • Read their published write-ups/guidance for what they do and don't reward.
Primary source

Official links

Version history: normalized permanent page created 2026-08-20. Verify current platform terms before testing.