Shopify’s Bug Bounty Program Raises Maximum Payout in 2022 - Shopify

What this post added

This post details the evolution of Shopify's Bug Bounty program, specifically highlighting the increase in the maximum bounty payout to $100,000 for CVSS 10.0 issues in 2022. It also announces that Shopify Plus, Shop, and Shop Pay are now considered core services, meaning High and Critical bugs in these areas will be paid according to the new scale. The post reviews 2021 program highlights, including over $1 million in bounties paid, the first full year of CVSS-based bounties, and a focus on open-source security. Statistics for 2021 are presented, showing an increase in valid reports and a decrease in non-applicable issues. Average bounty payouts increased, and response times were analyzed, with a significant decrease in time to bounty.