$1 million hacker challenge for Vercel Sandbox
Aug 18, 2026Andy Riancho
Summary
This post announces a public HackerOne program to test Vercel Sandbox isolation, offering up to $1,000,000 USD in bounties for researchers who can escape the sandbox boundary. It details the focus on compute and network boundary breaches and reiterates the security model of Vercel Sandbox, which uses Firecracker microVMs and host-side network controls. The program aims to proactively identify and fix vulnerabilities before attackers do.
More from the AI Security Vulnerability Benchmarking trail
- How v0 authenticates to Snowflake without exposing the user's OAuth token
- Everything hackable will get hacked
- A sandbox without a network boundary is only half a sandbox
- DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities
- Claude Managed Agents on Vercel's Agentic Infrastructure - Ship 26 NYC