If you believe you have found a security vulnerability on Meta (or another member of the Meta family of companies), we encourage you to let us know right away.
All listed amounts are without bonuses. With Hacker Plus, and any applicable bonuses, you can earn up to 30% of the original bounty amount on top of it!
We pay based on maximum security impact found internally, and our highest payouts reflect that.
Please keep in mind that this graphic is only an overview with maximum payouts per category listed. For more details about rewards, see our payout guidelines. All payout values are in USD.
To be eligible for a bounty, you can report a security bug in one or more of the following Meta technologies:
MBBRC 2025 brought top researchers together in Tokyo, Japan. Want to be part of the next event? Join Meta Bug Bounty’s Hacker Plus program for a chance to qualify.
