The Vercel Bug Bounty Program is now publicly available
Sep 24, 2026Caleb An

Summary
Vercel is launching a unified, public bug bounty program to consolidate its private and OSS programs. This initiative aims to leverage AI to manage the increased volume of security reports and streamline the remediation process. The program covers all Vercel platform products and open-source projects, with specific hacker challenges for React2Shell and Vercel Sandbox. The security engineering team has refined its processes for report triaging, remediation, and fix verification.