---
id: 20260925-T0-09
title: "Vercel漏洞赏金计划正式公开，HackerOne数千名研究员参与加固安全"
title_en: "Vercel Opens Bug Bounty Program to Public After Years of Private Testing"
url: https://ai.daily.yangsir.net/daily/20260925-T0-09
issue_date: 2026-09-25
publish_date: 2026-09-24T07:00:00.000Z
category: news
source_name: "Vercel Blog"
source_url: https://vercel.com/blog/the-vercel-bug-bounty-program-is-now-publicly-available
---

# Vercel漏洞赏金计划正式公开，HackerOne数千名研究员参与加固安全

Vercel宣布其漏洞赏金计划从私有模式转为公开。该计划于2022年通过HackerOne平台以私有形式启动，运行数年间与HackerOne的VIP项目合作，持续优化流程、目标和范围，引入了数千名顶尖安全研究员，帮助Vercel加固了整个平台的安全。此前积累的经验现已转化为公开项目，任何安全研究员都可以参与提交漏洞。对开发者而言，这意味着Vercel平台的安全性将获得更广泛的社区审查和监督。

## English Version

**Vercel Opens Bug Bounty Program to Public After Years of Private Testing**

Vercel has made its bug bounty program publicly available after running it privately through HackerOne since 2022. Over the past several years, Vercel worked with HackerOne's VIP program to refine its process, targets, and scope, onboarding thousands of top researchers and hardening security across its platform. Those lessons have now been translated into a public program open to any security researcher. For developers, this means Vercel's platform will receive broader community security scrutiny.

---

**来源**：[Vercel Blog](https://vercel.com/blog/the-vercel-bug-bounty-program-is-now-publicly-available)

**详情页**：https://ai.daily.yangsir.net/daily/20260925-T0-09

---

*智语观潮 · Daily — https://ai.daily.yangsir.net/llms.txt*