{
  "generated": "2026-07-28T18:31:06.696Z",
  "baseline_target": "20260101",
  "method": "Fixed pre-declared universe of public programs publishing numeric reward tables. For each: live page vs closest Wayback snapshot to the baseline date. Signal = maximum USD figure appearing in visible page text, a COARSE PROXY for the published ceiling. Every raised/cut row is proxy-only and flagged review_required until a human reads both pages.",
  "limits": [
    "Max-figure-on-page is a proxy for the published ceiling, not the ceiling.",
    "JS-rendered reward tables return no figures to a plain fetch and are recorded unresolved, which is a fact about the method and never about the program.",
    "Wayback coverage is uneven; a missing snapshot is unresolved, never unchanged.",
    "The universe is not a random sample of all bounty programs; no sampling frame for that exists. It is a fixed auditable list selected for publishing a table, not for making news.",
    "Offensive brokers are included as controls, not as bounty programs."
  ],
  "universe_size": 28,
  "tally": {
    "unchanged": 7,
    "cut": 1,
    "unresolved": 20
  },
  "results": [
    {
      "id": "U01",
      "org": "GitHub",
      "tier": "commodity",
      "url": "https://bounty.github.com/",
      "live_max": 30000,
      "live_status": "ok",
      "baseline_max": 30000,
      "baseline_status": "ok",
      "baseline_snapshot": "http://web.archive.org/web/20251225231606/https://bounty.github.com/",
      "baseline_timestamp": "20251225231606",
      "verdict": "unchanged",
      "delta_pct": 0,
      "review_required": false
    },
    {
      "id": "U02",
      "org": "Microsoft MSRC (AI/Copilot)",
      "tier": "ai-native",
      "url": "https://www.microsoft.com/en-us/msrc/bounty-ai",
      "live_max": 30000,
      "live_status": "ok",
      "baseline_max": 30000,
      "baseline_status": "ok",
      "baseline_snapshot": "http://web.archive.org/web/20260115174109/https://www.microsoft.com/en-us/msrc/bounty-ai",
      "baseline_timestamp": "20260115174109",
      "verdict": "unchanged",
      "delta_pct": 0,
      "review_required": false
    },
    {
      "id": "U03",
      "org": "Microsoft MSRC (Azure)",
      "tier": "elite",
      "url": "https://www.microsoft.com/en-us/msrc/bounty-microsoft-azure",
      "live_max": 60000,
      "live_status": "ok",
      "baseline_max": 60000,
      "baseline_status": "ok",
      "baseline_snapshot": "http://web.archive.org/web/20251118050453/https://www.microsoft.com/en-us/msrc/bounty-microsoft-azure",
      "baseline_timestamp": "20251118050453",
      "verdict": "unchanged",
      "delta_pct": 0,
      "review_required": false
    },
    {
      "id": "U04",
      "org": "Microsoft MSRC (Windows)",
      "tier": "elite",
      "url": "https://www.microsoft.com/en-us/msrc/bounty-windows-insider-preview",
      "live_max": 100000,
      "live_status": "ok",
      "baseline_max": 100000,
      "baseline_status": "ok",
      "baseline_snapshot": "http://web.archive.org/web/20251222203301/https://www.microsoft.com/en-us/msrc/bounty-windows-insider-preview",
      "baseline_timestamp": "20251222203301",
      "verdict": "unchanged",
      "delta_pct": 0,
      "review_required": false
    },
    {
      "id": "U05",
      "org": "Microsoft MSRC (M365)",
      "tier": "elite",
      "url": "https://www.microsoft.com/en-us/msrc/bounty-microsoft-cloud",
      "live_max": 19500,
      "live_status": "ok",
      "baseline_max": 20000,
      "baseline_status": "ok",
      "baseline_snapshot": "http://web.archive.org/web/20201112022426/https://www.microsoft.com/en-us/msrc/bounty-microsoft-cloud",
      "baseline_timestamp": "20201112022426",
      "verdict": "cut",
      "delta_pct": -2.5,
      "review_required": true
    },
    {
      "id": "U06",
      "org": "Meta (GenAI)",
      "tier": "ai-native",
      "url": "https://bugbounty.meta.com/payout-guidelines/meta-genai/",
      "live_max": 130000,
      "live_status": "ok",
      "baseline_max": null,
      "baseline_status": "no_snapshot",
      "baseline_snapshot": null,
      "baseline_timestamp": null,
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U07",
      "org": "Meta (core)",
      "tier": "commodity",
      "url": "https://bugbounty.meta.com/payout-guidelines/",
      "live_max": 300000,
      "live_status": "ok",
      "baseline_max": null,
      "baseline_status": "no_snapshot",
      "baseline_snapshot": null,
      "baseline_timestamp": null,
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U08",
      "org": "Apple Security Bounty",
      "tier": "elite",
      "url": "https://security.apple.com/bounty/categories/",
      "live_max": 2000000,
      "live_status": "ok",
      "baseline_max": 2000000,
      "baseline_status": "ok",
      "baseline_snapshot": "http://web.archive.org/web/20260108134234/https://security.apple.com/bounty/categories",
      "baseline_timestamp": "20260108134234",
      "verdict": "unchanged",
      "delta_pct": 0,
      "review_required": false
    },
    {
      "id": "U09",
      "org": "Mozilla",
      "tier": "commodity",
      "url": "https://www.mozilla.org/en-US/security/client-bug-bounty/",
      "live_max": 20000,
      "live_status": "ok",
      "baseline_max": 20000,
      "baseline_status": "ok",
      "baseline_snapshot": "http://web.archive.org/web/20251220221208/https://www.mozilla.org/en-US/security/client-bug-bounty/",
      "baseline_timestamp": "20251220221208",
      "verdict": "unchanged",
      "delta_pct": 0,
      "review_required": false
    },
    {
      "id": "U10",
      "org": "Mozilla (web)",
      "tier": "commodity",
      "url": "https://www.mozilla.org/en-US/security/web-bug-bounty/",
      "live_max": null,
      "live_status": "no_figures_found",
      "baseline_max": null,
      "baseline_status": "no_figures_found",
      "baseline_snapshot": "http://web.archive.org/web/20251228030217/https://www.mozilla.org/en-US/security/web-bug-bounty/",
      "baseline_timestamp": "20251228030217",
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U11",
      "org": "Chrome VRP",
      "tier": "elite",
      "url": "https://g.co/chrome/vrp/",
      "live_max": null,
      "live_status": "no_figures_found",
      "baseline_max": null,
      "baseline_status": "no_snapshot",
      "baseline_snapshot": null,
      "baseline_timestamp": null,
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U12",
      "org": "Android VRP",
      "tier": "elite",
      "url": "https://bughunters.google.com/about/rules/android-friends/6171833274204160/android-and-google-devices-security-reward-program-rules",
      "live_max": null,
      "live_status": "no_figures_found",
      "baseline_max": null,
      "baseline_status": "no_figures_found",
      "baseline_snapshot": "http://web.archive.org/web/20251217070328/https://bughunters.google.com/about/rules/android-friends/6171833274204160/android-and-google-devices-security-reward-program-rules",
      "baseline_timestamp": "20251217070328",
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U13",
      "org": "Google AI VRP",
      "tier": "ai-native",
      "url": "https://bughunters.google.com/about/rules/google-friends/4919523867951104/ai-vulnerability-reward-program-rules",
      "live_max": null,
      "live_status": "http_404",
      "baseline_max": null,
      "baseline_status": "no_snapshot",
      "baseline_snapshot": null,
      "baseline_timestamp": null,
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U14",
      "org": "GitLab",
      "tier": "commodity",
      "url": "https://about.gitlab.com/security/vulnerability-disclosure-program/",
      "live_max": null,
      "live_status": "http_404",
      "baseline_max": null,
      "baseline_status": "no_snapshot",
      "baseline_snapshot": null,
      "baseline_timestamp": null,
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U15",
      "org": "Shopify",
      "tier": "commodity",
      "url": "https://hackerone.com/shopify",
      "live_max": null,
      "live_status": "no_figures_found",
      "baseline_max": null,
      "baseline_status": "no_figures_found",
      "baseline_snapshot": "http://web.archive.org/web/20251216201637/https://hackerone.com/shopify",
      "baseline_timestamp": "20251216201637",
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U16",
      "org": "Cloudflare",
      "tier": "commodity",
      "url": "https://hackerone.com/cloudflare",
      "live_max": null,
      "live_status": "no_figures_found",
      "baseline_max": null,
      "baseline_status": "no_figures_found",
      "baseline_snapshot": "http://web.archive.org/web/20260105070956/https://hackerone.com/cloudflare",
      "baseline_timestamp": "20260105070956",
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U17",
      "org": "Intel",
      "tier": "elite",
      "url": "https://www.intel.com/content/www/us/en/security-center/bug-bounty-program.html",
      "live_max": null,
      "live_status": "http_404",
      "baseline_max": 100000,
      "baseline_status": "ok",
      "baseline_snapshot": "http://web.archive.org/web/20260106123916/https://www.intel.com/content/www/us/en/security-center/bug-bounty-program.html",
      "baseline_timestamp": "20260106123916",
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U18",
      "org": "NVIDIA PSIRT",
      "tier": "elite",
      "url": "https://www.nvidia.com/en-us/security/",
      "live_max": null,
      "live_status": "no_figures_found",
      "baseline_max": null,
      "baseline_status": "no_figures_found",
      "baseline_snapshot": "http://web.archive.org/web/20260103110343/https://www.nvidia.com/en-us/security/",
      "baseline_timestamp": "20260103110343",
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U19",
      "org": "Immunefi (Web3 scale)",
      "tier": "platform",
      "url": "https://immunefi.com/bug-bounty/",
      "live_max": 3000000,
      "live_status": "ok",
      "baseline_max": null,
      "baseline_status": "no_snapshot",
      "baseline_snapshot": null,
      "baseline_timestamp": null,
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U20",
      "org": "huntr (AI/ML supply chain)",
      "tier": "ai-native",
      "url": "https://huntr.com/guidelines",
      "live_max": null,
      "live_status": "no_figures_found",
      "baseline_max": null,
      "baseline_status": "no_figures_found",
      "baseline_snapshot": "http://web.archive.org/web/20260106001705/https://huntr.com/guidelines",
      "baseline_timestamp": "20260106001705",
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U21",
      "org": "0DIN (GenAI)",
      "tier": "ai-native",
      "url": "https://0din.ai/about",
      "live_max": 15000,
      "live_status": "ok",
      "baseline_max": null,
      "baseline_status": "no_snapshot",
      "baseline_snapshot": null,
      "baseline_timestamp": null,
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U22",
      "org": "Zoom",
      "tier": "commodity",
      "url": "https://hackerone.com/zoom",
      "live_max": null,
      "live_status": "http_403",
      "baseline_max": null,
      "baseline_status": "no_figures_found",
      "baseline_snapshot": "http://web.archive.org/web/20220125002325/https://hackerone.com/zoom",
      "baseline_timestamp": "20220125002325",
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U23",
      "org": "Yahoo/Paranoids",
      "tier": "commodity",
      "url": "https://hackerone.com/yahoo",
      "live_max": null,
      "live_status": "http_403",
      "baseline_max": null,
      "baseline_status": "no_figures_found",
      "baseline_snapshot": "http://web.archive.org/web/20241205101912/https://hackerone.com/yahoo/",
      "baseline_timestamp": "20241205101912",
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U24",
      "org": "Sony",
      "tier": "commodity",
      "url": "https://hackerone.com/playstation",
      "live_max": null,
      "live_status": "no_figures_found",
      "baseline_max": null,
      "baseline_status": "no_figures_found",
      "baseline_snapshot": "http://web.archive.org/web/20260102051418/https://hackerone.com/playstation",
      "baseline_timestamp": "20260102051418",
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U25",
      "org": "Internet Bug Bounty",
      "tier": "platform",
      "url": "https://hackerone.com/ibb",
      "live_max": null,
      "live_status": "no_figures_found",
      "baseline_max": null,
      "baseline_status": "no_figures_found",
      "baseline_snapshot": "http://web.archive.org/web/20251220004415/https://hackerone.com/ibb",
      "baseline_timestamp": "20251220004415",
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false
    },
    {
      "id": "U26",
      "org": "Crowdfense (offensive control)",
      "tier": "platform",
      "url": "https://www.crowdfense.com/exploit-acquisition-program/",
      "live_max": 10000,
      "live_status": "ok",
      "baseline_max": 10000,
      "baseline_status": "ok",
      "baseline_snapshot": "http://web.archive.org/web/20251219205246/https://www.crowdfense.com/exploit-acquisition-program/",
      "baseline_timestamp": "20251219205246",
      "verdict": "unchanged",
      "delta_pct": 0,
      "review_required": false,
      "note": "Offensive broker. Included as a CONTROL: the offensive side of the same question."
    },
    {
      "id": "U27",
      "org": "Operation Zero (offensive control)",
      "tier": "platform",
      "url": "https://opzero.ru/en/prices/",
      "live_max": 2500000,
      "live_status": "ok",
      "baseline_max": null,
      "baseline_status": "no_snapshot",
      "baseline_snapshot": null,
      "baseline_timestamp": null,
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false,
      "note": "Offensive broker control."
    },
    {
      "id": "U28",
      "org": "Zerodium (offensive control)",
      "tier": "platform",
      "url": "https://zerodium.com/program.html",
      "live_max": null,
      "live_status": "fetch_error_Error",
      "baseline_max": 2500000,
      "baseline_status": "ok",
      "baseline_snapshot": "http://web.archive.org/web/20241201062400/https://zerodium.com/program.html",
      "baseline_timestamp": "20241201062400",
      "verdict": "unresolved",
      "delta_pct": null,
      "review_required": false,
      "note": "Offensive broker control; program status uncertain."
    }
  ]
}