---
type: "raw_signal"
id: "the-vercel-bug-bounty-program-is-now-publicly-a07321"
slug: "the-vercel-bug-bounty-program-is-now-publicly-a07321"
title: "The Vercel Bug Bounty Program is now publicly available"
description: "Vercel has launched a single public bug bounty program on HackerOne, consolidating its former private and open-source programs."
retrieval_nugget: "Vercel has launched a single public bug bounty program on HackerOne, consolidating its former private and open-source programs."
observed_at: "2026-09-24"
record_date: "2026-09-24"
date_kind: "observed_at"
why_it_matters: "Source: https://vercel.com/blog/the-vercel-bug-bounty-program-is-now-publicly-available"
novelty: "notable"
verification_level: "source-linked"
signal_type: "release"
source_platform: "vercel.com"
topics: []
entities: []
related_patterns: []
source_url: "https://vercel.com/blog/the-vercel-bug-bounty-program-is-now-publicly-available"
source_urls: ["https://vercel.com/blog/the-vercel-bug-bounty-program-is-now-publicly-available"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "signal:the-vercel-bug-bounty-program-is-now-publicly-a07321"
status: "published"
visuals: []
routes: {"html":"https://newruntime.com/signals/the-vercel-bug-bounty-program-is-now-publicly-a07321/","markdown":"https://newruntime.com/signals/the-vercel-bug-bounty-program-is-now-publicly-a07321.md","json":"https://newruntime.com/signals/the-vercel-bug-bounty-program-is-now-publicly-a07321.json"}
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
---

# The Vercel Bug Bounty Program is now publicly available

## Retrieval answer

Vercel has launched a single public bug bounty program on HackerOne, consolidating its former private and open-source programs.

Vercel has launched a single public bug bounty program on HackerOne, consolidating its former private and open-source programs. The company says the unified program covers all Vercel platform products and its open-source projects. It attributes the timing to AI-driven growth in both valid and invalid reports, and says it has streamlined tooling and processes for triage, remediation, and fix verification.

Source: https://vercel.com/blog/the-vercel-bug-bounty-program-is-now-publicly-available

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- collection: [Raw Signals](https://newruntime.com/signals.json): Open every source-linked raw signal.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)