Microsoft adds OneDrive to bug bounty programme
Redmond wants to crowdsource security expertise to make cloud storage more secure

Microsoft has added its cloud storage service, OneDrive, to its bug bounty programme.
It means that security researchers who uncover flaws in the service can get rewards worth anywhere between $500 and $15,000, and Microsoft said it is a sign it is taking cloud security more seriously.
“We continue to add new properties to our security bug bounty programs to help keep our customers secure,” Jason Shirk, senior director of Microsoft Security Response Center wrote on the company’s site, TechNet.
“This addition further incentivizes security researchers to report service vulnerabilities to Microsoft.”
Researchers who discover bugs in XSS, CSRF, injection vulnerabilities, server-side code execution, privilege escalation, and insecure direct object references are eligible for rewards under the programme.
Terry Ip, security consultant at MWR InfoSecurity, said that adding OneDrive to the programme may be “essentially a crowdsourcing effort from the security research community, either in place of or in addition to testing by their security vendor”.
He added: “Whilst the bounty can seem large in some cases, the payout is often lower than the costs involved in employing full-time security researchers.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"One of the key things for security researchers to be aware of is adhering to the scope of the bounty program. Going out of scope could result in legal issues or pay out disputes, despite the good intentions of the researcher.”
The bug bounty programme terms and conditions covering OneDrive can be read here.
-
Pure Accelerate 2025: All the news and updates live from Las Vegas
Keep tabs on all the announcements at Pure Accelerate 2025 in our rolling live coverage
-
'This was a very purposeful strategy': Pure Storage unveils Enterprise Data Cloud in bid to unify data storage, management
The company’s new Enterprise Data Cloud aims to streamline storage and data management
-
Future trends, changing work today
whitepaper The Ultimate Guide
-
Go virtual in 3 steps, with Forrester
whitepaper Put virtual reality technology to work in your business
-
VR Diaries: Forrester
Webinar Put virtual reality technology to work in your business
-
Mixed reality for work
whitepaper The ultimate guide
-
Meet in VR: The beginner's guide
whitepaper Seven meeting challenges VR can help you solve
-
Learn in VR: The beginner's guide
whitepaper Seven training challenges VR can help you solve
-
Create in VR: The beginner's guide
whitepaper Five creative challenges VR can help you solve
-
Virtual reality for work: The ultimate guide
whitepaper Six ways virtual reality is changing the future of work