Max payout:
At Meta, we value the contributions of external researchers in helping us identify and address potential vulnerabilities in our video composers features. These guidelines outline how we evaluate the impact of reports submitted through our Bug Bounty program and determine the corresponding payouts, with a maximum payout of $7.5K* for issues specific to video composer features and then apply any applicable deduction based on the required user interaction, prerequisites, and any other mitigation factors to arrive at the final awarded bounty amount.
Maximum payouts
Video edits in the composer are not applied in both the trim duration and mute status and the final shared content is the same as the uploaded video file without any edits.
up to $7.5k* |
Video edits in the composer are inaccurate by a few seconds in trimming or audio mutes (i.e., not a full video).
up to $2k* |
Mitigating factors (deduction from maximum amount)
We consider the following factors when deducting from the maximum payout to arrive at the final bounty amount:
If it only affects audio and not video duration.
Note: multiple actions -50% or higher
-50% or higher |
Requires excessive and unlikely user interaction
Note: multiple actions -90% or higher -90% or higher |