Meta
Meta Bug Bounty
Tools
Leaderboard
Learn
Blog
Submit a report
Meta
FacebookInstagramXYouTube
Meta Bug Bounty
Meta Bug Bounty overviewLeaderboardsProgram scopeProgram termsHacker Plus benefitsHacker Plus termsBug Bounty blog
Program tools
SSRF validatorTest accountsFBDLAccess token debuggerGraph API explorer
Payout guidelines
Payout guidelines overviewMobile remote code executionAccount take-overMeta hardware devicesServer side request forgery (SSRF)Platform privacy assertions2FA bypassContact point deanonymizationPage admin disclosureCross-site leaks
Data Abuse program
Data Abuse program overviewData Abuse termsReport abuseManage reports
Site terms and policies
Privacy policyTermsCookie policy
Meta Bug Bounty
Meta Bug Bounty overview
Leaderboards
Program scope
Program terms
Hacker Plus benefits
Hacker Plus terms
Bug Bounty blog
Program tools
SSRF validator
Test accounts
FBDL
Access token debugger
Graph API explorer
Payout guidelines
Payout guidelines overview
Mobile remote code execution
Account take-over
Meta hardware devices
Server side request forgery (SSRF)
Platform privacy assertions
2FA bypass
Contact point deanonymization
Page admin disclosure
Cross-site leaks
Data Abuse program
Data Abuse program overview
Data Abuse terms
Report abuse
Manage reports
Site terms and policies
Privacy policy
Terms
Cookie policy
Meta Bug Bounty
Meta Bug Bounty overview
Leaderboards
Program scope
Program terms
Hacker Plus benefits
Hacker Plus terms
Bug Bounty blog
Program tools
SSRF validator
Test accounts
FBDL
Access token debugger
Graph API explorer
Data Abuse program
Data Abuse program overview
Data Abuse terms
Report abuse
Manage reports
Payout guidelines
Payout guidelines overview
Mobile remote code execution
Account take-over
Meta hardware devices
Server side request forgery (SSRF)
Platform privacy assertions
2FA bypass
Contact point deanonymization
Page admin disclosure
Cross-site leaks
Site terms and policies
Privacy policy
Terms
Cookie policy
Meta Bug Bounty
Meta Bug Bounty overview
Leaderboards
Program scope
Program terms
Hacker Plus benefits
Hacker Plus terms
Bug Bounty blog
Program tools
SSRF validator
Test accounts
FBDL
Access token debugger
Graph API explorer
Payout guidelines
Payout guidelines overview
Mobile remote code execution
Account take-over
Meta hardware devices
Server side request forgery (SSRF)
Platform privacy assertions
2FA bypass
Contact point deanonymization
Page admin disclosure
Cross-site leaks
Data Abuse program
Data Abuse program overview
Data Abuse terms
Report abuse
Manage reports
Site terms and policies
Privacy policy
Terms
Cookie policy
English (US)
Legal
* All payout amounts are in USD

©2025 Meta.

Bug Bounty blog

Celebrating 15 years of Meta's Bug Bounty Program | Meta Bug Bounty


NOVEMBER 26, 2025
Estimated read time: 7 minutes
Meta’s Bug Bounty Program approaches its 15 anniversary with $25M+ in researcher awards, new specialized tracks, improved tooling, and highlights from 2025’s top discoveries.
Read article

Looking back at our Bug Bounty program in 2024


FEBRUARY 13, 2025
Estimated read time: 5
Meta’s 2024 Bug Bounty Report highlights over $2.3 million in rewards, new GenAI and mixed reality research scopes, and global initiatives strengthening platform security through
Read article

Looking Back at Our Bug Bounty Program in 2022


DECEMBER 15, 2022
Estimated read time: 7 minutes
Meta’s 2022 Bug Bounty Report highlights $2 million in rewards, new payout guidelines up to $300K, and expanded research into securing VR and metaverse technologies.
Read article

Expanding Our Bug Bounty Program to Address Scraping


DECEMBER 15, 2021
Estimated read time: 5 minutes
Meta’s expanding Bug and Data Bounty programs now reward reports on scraping bugs and exposed scraped databases, strengthening defenses and supporting responsible security research worldwide.
Read article

Marking the 10th Anniversary of Our Bug Bounty Program


NOVEMBER 19, 2020
Estimated read time: 7 minutes
A decade of collaboration between Facebook and security researchers has helped uncover thousands of vulnerabilities, reward global contributors, and strengthen privacy and protection across Meta’s
Read article