7/20/2026 - v1.3 Added information on security.txt usage to find interested researchers and other minor tweaks.
12/28/2025 - v1.2 Added additional metric, and additional sample safe harbor example.
- Thanks to Yashvier for the metric suggestion.
8/25/2024 - v1.1 of the diagram and runbook updated to improve communication/workflow on researcher payouts. Also brief disclaimer about when to include a bounty program in the preparation guide.
- Thanks to Alexander Hagenah (@xaitax) for calling out workflow communication concerns.
- Thanks to Erik Cabetas for suggestions around disclaimers.
7/08/2024 - v1 - Released
- Announcement: Announcing the Bug Bounty program pack 1.0