The retained GPTOnline cover illustrates the October 2023 Bing AI bounty report. It is not a newly captured product interface or confirmation of current bounty offers.
In a bold move, Microsoft announced a bounty program on October 12, 2023, targeting their artificial intelligence (AI) system. At launch, the tech giant invited researchers worldwide to find vulnerabilities in its AI-powered Bing service, with the potential for cash rewards reaching up to $15,000.
As part of this initiative, Microsoft encouraged security researchers globally to delve into the AI-driven Bing experience and uncover any hidden flaws. The original October 2023 report described the company as inviting submissions that reveal vulnerabilities in Bing’s AI system, with eligible entries standing the chance to earn between $2,000 and $15,000.
At launch, the scope extended beyond the Bing website. Microsoft also extended the invitation to scrutinize other AI integrations, including those within Microsoft Edge, the Microsoft Start app, and the Skype Mobile app. Only qualifying, in-scope vulnerabilities were eligible; finding a flaw did not automatically guarantee payment. Researchers needed to follow the program’s rules and responsible-testing requirements.
The bounty program’s primary objective is to identify significant vulnerabilities within the AI-powered Bing experience that could potentially compromise customer security. The goal is to ensure the robustness and integrity of the AI system, while simultaneously encouraging research and innovation in the field.
The original report described a minimum age of 14 and guardian permission for minors. Anyone considering participation should consult Microsoft’s current eligibility and research rules rather than rely on this historical summary.
In its August 7, 2023 review of the preceding 12 months, Microsoft reported that it had awarded $13.8 million in bounty rewards to 345 security researchers across the globe. These researchers had collectively found 1,180 vulnerabilities spread across 17 distinct bug bounty programs.
The original report also described earlier expansions of Microsoft’s bug bounty efforts, stating that Microsoft expanded its coverage to include Exchange on-premises, SharePoint, and Skype for Business. The company also increased the maximum rewards for reporting high-impact security flaws via the Microsoft 365 platform.
This new initiative by Microsoft demonstrates the company’s commitment to enhancing the security and reliability of its AI systems. By inviting external researchers to probe their systems for vulnerabilities, Microsoft aimed to improve the robustness of its AI while fostering a culture of research and innovation in the field of AI.
Program context: The 2023 launch announcement confirms the original $15,000 maximum and Bing, Edge, Start, and Skype integrations. The current program page records later scope and reward changes and now describes the Microsoft Copilot bounty program. Its displayed awards range from $100 to $30,000, with higher awards possible at Microsoft’s discretion. The historical launch amounts and integrations above are not a current testing authorization.
