Microsoft has expanded its bug bounty programme to include new web and application technologies that are due for release in the coming months.
The company's latest programme will focus on the web application frameworks .NET Core and ASP.NET Core RC2 beta builds, which were revealed last month.
Jason Shirk, senior director of Microsoft's Security Response Center, said the latest programme will run until 7 September this year.
The platforms for testing will be Windows, OS X and Linux.
Rewards for qualifying bug discoveries will range from a minimum of $500 up to $15,000, depending on the severity of the security flaw.
In order to qualify for a reward, researchers must submit an eligible and previously unreported bug. Accepted submissions include remote code execution (RCE) faults, security design flaws, remote denial-of-service (DoS) holes, spoofing weaknesses, information leaks and XSS vulnerabilities.
"Bounties will be worked alongside the Security Development Lifecycle (SDL), Operational Security Assurance (OSA) framework, regular penetration testing of our products and services, and Security and Compliance Accreditations by third party audits," said Shirk.
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
This new programme has succeeded Microsoft's previous CoreCLR and ASP.NET 5 beta bounty hunts.
Other Microsoft bounty programmes include the ongoing Nano Server beta, Online Services, and Mitigation bypass and Bounty for Defense programme.
More information about the .NET Core and ASP.NET Core RC2 programme can be found on the Microsoft blog and technet programme page.
The RC2 application can be downloaded here.
Microsoft frequently runs bug bounty programmes on its services. In 2014 it ran a programme for Office 365.
-
Yorkshire Building Society touts customer service gains with AI agentsNews The firm said that agents Penelope, Sam, and Alf are helping improve customer service, while adhering to high levels of regulation
-
Arrow Electronics secures pan-EMEA distribution deal with ABBNews The agreement will bring ABB's uninterruptible power supply solutions to Arrow's channel partners across key European markets
