Intel bug bounty programs
intel.com Updated
Intel runs 12 public programs on Sorona, its own site and Intigriti; 11 pay cash, the most up to $10,000 (Intel-maintained open source).
- Top reward
- $10,000
- Sorona
- Programs
- 12
- 11 pay cash
- Targets in scope
- 85
- 2 types, deduplicated
- Last change
- None yet
- Tracked since Nov 2026
Where to report
12 programs, side by side. Report where the affected target is in scope; when two programs cover it, pick the one that pays more.
Start here
Intel-maintained open source
Sorona · Pays the most of the 12 programs: up to $10,000.
| Program | Critical | High | Medium | Low | Top reward | Safe harbor | KYC | First response | Status |
|---|---|---|---|---|---|---|---|---|---|
Intel-maintained open source
Sorona · Bug bounty |
$10k (highest) | $10k (highest) | $10k (highest) | $500 (highest) | $10,000 | Partial | – | – | Open |
|
Intel Neural Compressor
Sorona · Bug bounty |
$10k | $10k | $10k | $500 | $10,000 | Partial | Required | – | Open |
|
NNCF
Sorona · Bug bounty |
$10k | $10k | $10k | $500 | $10,000 | Partial | Required | – | Open |
|
Intel Cryptography Primitives Library
Sorona · Bug bounty |
$10k | $10k | $10k | $500 | $10,000 | Partial | – | – | Open |
|
Intel Slim Bootloader
Sorona · Bug bounty |
$10k | $10k | $10k | $500 | $10,000 | Partial | – | – | Open |
|
OpenVINO GenAI
Sorona · Bug bounty |
$10k | $10k | $10k | $500 | $10,000 | Partial | Required | – | Open |
|
xFasterTransformer
Sorona · Bug bounty |
$10k | $10k | $10k | $500 | $10,000 | Partial | Required | – | Open |
|
OpenVINO
Sorona · Bug bounty |
$10k | $10k | $10k | $500 | $10,000 | Partial | Required | – | Open |
|
Anomalib
Sorona · Bug bounty |
$10k | $10k | $10k | $500 | $10,000 | Partial | Required | – | Open |
|
OpenVINO Model Server
Sorona · Bug bounty |
$10k | $10k | $10k | $500 | $10,000 | Partial | Required | – | Open |
|
Intel Bug Bounty
Self-hosted · Bug bounty |
– | – | – | – | Not published | – | – | – | Open |
|
Intel® Vulnerability Disclosure Program
Intigriti · Disclosure only |
– | – | – | – | No cash | Full | – | – | Open |
-
- Critical
- $10k (highest)
- High
- $10k (highest)
- Medium
- $10k (highest)
- Low
- $500 (highest)
- Safe harbor
- Partial
-
- Critical
- $10k
- High
- $10k
- Medium
- $10k
- Low
- $500
- Safe harbor
- Partial
- KYC
- Required
-
- Critical
- $10k
- High
- $10k
- Medium
- $10k
- Low
- $500
- Safe harbor
- Partial
- KYC
- Required
-
- Critical
- $10k
- High
- $10k
- Medium
- $10k
- Low
- $500
- Safe harbor
- Partial
-
- Critical
- $10k
- High
- $10k
- Medium
- $10k
- Low
- $500
- Safe harbor
- Partial
-
- Critical
- $10k
- High
- $10k
- Medium
- $10k
- Low
- $500
- Safe harbor
- Partial
- KYC
- Required
-
- Critical
- $10k
- High
- $10k
- Medium
- $10k
- Low
- $500
- Safe harbor
- Partial
- KYC
- Required
-
- Critical
- $10k
- High
- $10k
- Medium
- $10k
- Low
- $500
- Safe harbor
- Partial
- KYC
- Required
-
- Critical
- $10k
- High
- $10k
- Medium
- $10k
- Low
- $500
- Safe harbor
- Partial
- KYC
- Required
-
- Critical
- $10k
- High
- $10k
- Medium
- $10k
- Low
- $500
- Safe harbor
- Partial
- KYC
- Required
-
- Safe harbor
- Full
Amounts are the top reward per severity in the currency each program pays. Green marks the highest per severity. First response is the platform's measured average when it publishes one, else what the policy promises.
What is in scope
85 targets across all 12 programs, each listed once with the programs that cover it. 54 excluded.
-
https://docs.openvino.ai/latest/ovms_what_is_openvino_model_server.html
Web
Covered by OpenVINO Model Server
-
https://www.intel.com/content/www/us/en/developer/tools/cryptography-primitives-library/overview.html
Web
Covered by Intel Cryptography Primitives Library
-
https://www.intel.com/content/www/us/en/security-center/bug-bounty-program.html
Web
Covered by Intel-maintained open source
-
Adapter and speculative-decoding paths, including LoRA adapter loading
Products and areas
Covered by OpenVINO GenAI
-
Anything root-caused from a third-party product back into Intel-branded code, which Intel asks to be filed under the matching scope type
Products and areas
Covered by Intel-maintained open source
-
Auto-tuning strategy execution, which evaluates user-supplied Python objects, and the benchmarking and evaluation harness wrapped around it
Products and areas
Covered by Intel Neural Compressor
-
Bundled third-party parsers reached through model load, where the defect can be root-caused to OpenVINO's own code
Products and areas
Covered by OpenVINO
-
Calibration datasets and the data pipeline the accuracy-aware algorithms consume, plus the nncf package as published on PyPI
Products and areas
Covered by NNCF
-
Checkpoint and weight loading, including PyTorch Lightning checkpoints and any artefact pulled from a third-party source
Products and areas
Covered by Anomalib
-
Checkpoint save and load, including PyTorch pickle-backed state dicts
Products and areas
Covered by NNCF
-
Configuration data (CFGDATA) parsing and the board-configuration and image-stitching tools in the repository that produce a flash image
Products and areas
Covered by Intel Slim Bootloader
-
Data handling across the supported dataset types, covering folder, image and video inputs, the loaders that read them and the transforms applied on the way through
Products and areas
Covered by Anomalib
-
Device drivers, applications and development tools, which is the category Intel's solely-maintained open-source repositories fall into: tdx-module, linux-sgx, ipp-crypto and intel-device-plugins-for-kubernetes are the representative cases
Products and areas
Covered by Intel-maintained open source
-
Every model front end the repository ships: the IR (.xml/.bin) reader plus the ONNX, TensorFlow, TensorFlow Lite, PaddlePaddle, JAX and PyTorch readers, all of which parse files supplied from outside
Products and areas
Covered by OpenVINO
-
Export and deployment: the OpenVINO IR and ONNX export paths and the inferencer entry points that run a trained model in production
Products and areas
Covered by Anomalib
-
Firmware published through the Intel Download Center, which Intel scores on Tier 2 rather than Tier 3
Products and areas
Covered by Intel-maintained open source
-
Hardware and silicon, scored on Tier 1, home of the $100,000 headline and out of reach of any repository-only finding
Products and areas
Covered by Intel-maintained open source
-
Intel accepts security issues in open-source projects it solely maintains, and OpenVINO's own SECURITY.md routes reports to the Intel Security Center, so the repository qualifies in full. Software is Tier 3 at $500 to $10,000, and no part of the runtime is carved out.
Products and areas
Covered by OpenVINO
-
Intel accepts security issues in open-source projects it solely maintains, and openvinotoolkit is Intel's organisation, so the whole model_server repository is the target. Recorded honestly: OVMS publishes no SECURITY.md, so eligibility rests on org ownership alone. Software is Tier 3 at $500 to $10,000.
Products and areas
Covered by OpenVINO Model Server
-
Intel accepts security issues in open-source projects it solely maintains, and openvinotoolkit is Intel's organisation, so the whole NNCF repository is the target. Recorded honestly: the repository publishes no SECURITY.md, so eligibility rests on org ownership alone. Software is Tier 3 at $500 to $10,000.
Products and areas
Covered by NNCF
-
Intel accepts security issues in open-source projects it solely maintains, and this one is an Intel-branded product living in Intel's own GitHub organisation with its own developer-tools product page, so it sits on the in-scope side of that line. Software is Tier 3 at $500 to $10,000, and the whole of intel/cryptography-primitives is the target.
Products and areas
Covered by Intel Cryptography Primitives Library
-
Intel accepts security issues in open-source projects it solely maintains, and this repository's SECURITY.md routes reports to the Intel Security Center, so all of openvino.genai is the target. Software is Tier 3 at $500 to $10,000.
Products and areas
Covered by OpenVINO GenAI
-
Intel accepts security issues in open-source projects it solely maintains. Neural Compressor sits in the intel GitHub organisation and its SECURITY.md routes reports to the Intel Security Center, which is the cleanest form of that test anywhere in Intel's AI stack. Software is Tier 3 at $500 to $10,000, and the target is the whole repository.
Products and areas
Covered by Intel Neural Compressor
-
Intel accepts security issues in open-source projects it solely maintains. This repository sits in the intel organisation and its SECURITY.md points reporters at Intel's vulnerability-handling guidelines, so the whole of xFasterTransformer is the target. Software is Tier 3 at $500 to $10,000.
Products and areas
Covered by xFasterTransformer
-
Intel's own declaration on the live scope tab: Intel-branded products and technologies that Intel maintains and distributes are eligible, and inside that, open-source projects Intel solely maintains are in scope and go to the Intel Bug Bounty Program. Software is Tier 3 at $500 to $10,000.
Products and areas
Covered by Intel-maintained open source
-
Intel's published line is that open-source projects it solely maintains are in scope and route to the Intel Bug Bounty Program. Slim Bootloader passes that test on all three counts Intel names: the organisation is Intel's, the licence reads Copyright Intel Corporation, and the repository SECURITY.md sends reporters to Intel's vulnerability-handling guidelines. Software is Tier 3 at $500 to $10,000.
Products and areas
Covered by Intel Slim Bootloader
-
Intel's published line is that open-source projects it solely maintains are in scope and should be reported to the Intel Bug Bounty Program, priced as software at $500 to $10,000. Anomalib carries Intel's own first-party SECURITY.md, so the target is the repository as a whole, though the move to the open-edge-platform organisation leaves the sole-maintenance test arguable.
Products and areas
Covered by Anomalib
-
Model caching, plugin discovery, and the configuration and environment handling that decides which library gets loaded
Products and areas
Covered by OpenVINO
-
Model conversion and loading: the GGUF reader, the Hugging Face checkpoint converters and the quantized weight formats the engine supports
Products and areas
Covered by xFasterTransformer
-
Model graph ingestion and the backend-agnostic graph representation the algorithms operate on
Products and areas
Covered by NNCF
-
Model repository loading from local disk, S3, GCS and Azure Blob, and the credential handling each of those backends requires
Products and areas
Covered by OpenVINO Model Server
-
Model, checkpoint and calibration-dataset loading, whatever the source
Products and areas
Covered by Intel Neural Compressor
-
Payload interfaces and handoff structures for every payload the tree ships, covering the UEFI payload, the Linux payload and the OS loader
Products and areas
Covered by Intel Slim Bootloader
-
Post-training quantization and quantization-aware training across all four supported backends: PyTorch, TensorFlow, ONNX and OpenVINO IR
Products and areas
Covered by NNCF
-
Recipe and configuration handling: the YAML and JSON parsers that drive a tuning run and the Python API that consumes them
Products and areas
Covered by Intel Neural Compressor
-
Sampling, generation configuration and chat-template handling, including Jinja-style template evaluation
Products and areas
Covered by OpenVINO GenAI
-
The backend adaptors, neural_compressor.torch and neural_compressor.tensorflow along with the ONNX Runtime path, including everywhere they reach into framework internals
Products and areas
Covered by Intel Neural Compressor
-
The big-number and modular-arithmetic layer that every public-key operation is built on
Products and areas
Covered by Intel Cryptography Primitives Library
-
The BootloaderCommonPkg and BootloaderCorePkg libraries and parsers, together with the EDK II MdePkg code vendored into the tree
Products and areas
Covered by Intel Slim Bootloader
-
The build, packaging and container images the project publishes
Products and areas
Covered by xFasterTransformer
-
The C++ inference engine for Xeon, including the hand-written AMX and AVX-512 kernels where bounds reasoning is done by hand rather than by a compiler
Products and areas
Covered by xFasterTransformer
-
The C, Python and JavaScript bindings and the packages published from them
Products and areas
Covered by OpenVINO GenAI
-
The compression APIs in full: quantization, pruning, distillation and mixed precision, and the algorithm implementations behind each of them
Products and areas
Covered by Intel Neural Compressor
-
The configuration layer: the config JSON parser, model version policies and the runtime config-reload path
Products and areas
Covered by OpenVINO Model Server
-
The continuous-batching and paged-attention scheduler, together with the KV-cache management around it
Products and areas
Covered by OpenVINO GenAI
-
The control surfaces: YAML configuration parsing, the anomalib CLI and the Python API sitting under both
Products and areas
Covered by Anomalib
-
The DAG scheduler, MediaPipe graph execution, and the custom node and custom loader interfaces used to build multi-model pipelines
Products and areas
Covered by OpenVINO Model Server
-
The distributed multi-rank serving path over oneCCL and MPI, where ranks exchange tensors and control data
Products and areas
Covered by xFasterTransformer
-
The generation pipelines the repository ships: LLMPipeline for text, Text2ImagePipeline with its image-to-image and inpainting variants, WhisperPipeline for speech, and the C++ implementations underneath each
Products and areas
Covered by OpenVINO GenAI
-
The graph transformation and optimisation passes that rewrite a model between load and execution
Products and areas
Covered by OpenVINO
-
The in-process C API and the client libraries the repository publishes for calling the server from other code
Products and areas
Covered by OpenVINO Model Server
-
The Intel FSP (IntelFsp2Pkg) integration boundary, where data crosses between the silicon-init blob and bootloader code
Products and areas
Covered by Intel Slim Bootloader
-
The model library and the engines that run it: every anomaly-detection algorithm the repository ships, plus the PyTorch Lightning training and inference engine underneath them
Products and areas
Covered by Anomalib
-
The multi-buffer crypto_mb library and the accelerated paths it runs across several sessions at once
Products and areas
Covered by Intel Cryptography Primitives Library
-
The network surface in full: the gRPC and REST inference endpoints implementing the TensorFlow Serving and KServe v2 APIs, the OpenAI-compatible chat, completions and embeddings endpoints, the metrics and status endpoints, and the transport-security options the server puts in front of them
Products and areas
Covered by OpenVINO Model Server
-
The neural_compressor package as published on PyPI and the entry points other tools reach it through, Hugging Face Optimum and ONNX Runtime tooling included
Products and areas
Covered by Intel Neural Compressor
-
The NNCF configuration parser and the Python API that drives a compression run
Products and areas
Covered by NNCF
-
The optimised assembly itself, across every CPU dispatch path the library can select at run time, including its constant-time and side-channel behaviour
Products and areas
Covered by Intel Cryptography Primitives Library
-
The other compression algorithms the framework ships, including weight compression for LLMs on the INT4 and INT8 paths, sparsity, filter pruning and mixed-precision search
Products and areas
Covered by NNCF
-
The packages users actually install: the openvino PyPI wheel, the C API, the Node.js binding, and the model-conversion and benchmarking tools shipped alongside them
Products and areas
Covered by OpenVINO
-
The preprocessing and postprocessing graph API and the tensor, shape and layout handling underneath it
Products and areas
Covered by OpenVINO
-
The public API surface: parameter and length validation, context handling, the buffer contracts callers are told to honour, and post-quantum primitives as they land in the tree
Products and areas
Covered by Intel Cryptography Primitives Library
-
The public-key side: RSA, DSA and Diffie-Hellman, ECC over both the NIST curves and SM2, together with key generation, signing and verification
Products and areas
Covered by Intel Cryptography Primitives Library
-
The published Docker images: entrypoint, privilege model and the packaging the project ships to production
Products and areas
Covered by OpenVINO Model Server
-
The Python API and the REST and serving wrappers that expose the engine to callers
Products and areas
Covered by xFasterTransformer
-
The Runtime C++ core and the plugin architecture around it: the CPU, GPU and NPU device plugins together with the AUTO, HETERO and BATCH meta-plugins
Products and areas
Covered by OpenVINO
-
The silicon and system categories Intel lists by name: microprocessors including microcode ROM and updates, chipsets, FPGA components, networking and communication components, memory, motherboards and systems such as the Compute Stick and NUC, and solid-state drives
Products and areas
Covered by Intel-maintained open source
-
The symmetric side: AES and its modes including GCM, SM4, and the hash and MAC families the library ships across SHA-1, SHA-2, SHA-3, SM3 and HMAC
Products and areas
Covered by Intel Cryptography Primitives Library
-
The whole boot flow: Stage1A, Stage1B, Stage2 and the payload launch path
Products and areas
Covered by Intel Slim Bootloader
-
Tokenizer and prompt handling and the KV-cache management behind a generation request
Products and areas
Covered by xFasterTransformer
-
Tokenizer loading and execution through openvino_tokenizers, which reads tokenizer JSON and model files straight out of public model repositories
Products and areas
Covered by OpenVINO GenAI
-
UEFI BIOS, limited to the TianoCore components for which Intel is the only named maintainer, together with the Intel Management Engine and the Baseboard Management Controller
Products and areas
Covered by Intel-maintained open source
-
Verified boot, image signature verification and the key handling behind both
Products and areas
Covered by Intel Slim Bootloader
No target matches. Try part of a host name, such as the company name.
Out of scope 54
Don't test these. A program can exclude a host another program covers; the program you report to decides.
-
Accuracy or performance regressions from compression, which are not security issues
Intel Neural Compressor
-
Accuracy regressions caused by compression, which are a quality problem rather than a security one
NNCF
-
Any testing that reaches another person's data, which Intel says disqualifies the report from award outright
Intel-maintained open source
-
Anything already publicly disclosed or previously reported to Intel
Intel Cryptography Primitives Library
-
Anything in Intel's *.intel.com web infrastructure, which has its own reporting address
Anomalib OpenVINO GenAI xFasterTransformer OpenVINO Model Server Intel Neural Compressor NNCF OpenVINO
-
Anything requiring physical access: Intel puts out of scope "submissions that require an attacker to physically open the case, including removing screws or breaking plastic casing (open chassis)", and separately excludes firmware weaknesses that need physical access or a UEFI shell
Intel Slim Bootloader
-
Archived predecessor repositories, including the old openvinotoolkit location
Anomalib
-
Archived sibling projects such as intel/intel-extension-for-transformers, which fall under Intel's end-of-life exclusion
Intel Neural Compressor
-
Bugs in the OpenVINO Runtime itself, which are a separate report against a separate repository, since one root cause equals one bounty
OpenVINO Model Server
-
Bugs whose root cause is in the upstream OpenVINO Runtime, which are a separate report against a separate repository
OpenVINO GenAI
-
Defects in OpenSSL or in any other caller that merely links this library, unless the root cause is in this code
Intel Cryptography Primitives Library
-
Denial of service achieved through legitimate high load rather than through a defect
OpenVINO Model Server
-
Duplicates of a finding Intel already holds, credential exposure and social engineering
Intel Slim Bootloader
-
Duplicates of a finding Intel PSIRT already holds
NNCF OpenVINO OpenVINO GenAI
-
End-of-life and discontinued products, licensed first- and third-party products such as Intel NUC-specific BIOS and software, and divested products, of which Intel names McAfee, Wind River, BlueZ and Altera
Intel Slim Bootloader
-
End-of-life and pre-release product versions
Intel Cryptography Primitives Library
-
End-of-life products, which earn reputation but no bounty
Intel-maintained open source
-
Example notebooks and bundled datasets
Anomalib
-
Example scripts and notebooks shipped for demonstration rather than for production use
Intel Neural Compressor
-
Findings in the OpenVINO Model Server or in OpenVINO GenAI, which are separate repositories and separate reports
OpenVINO
-
Findings that only reproduce on a prototyping or debug-enabled platform, since Intel puts products "intended for prototyping use or that are 'open' to provide customers with debugging capability" out of scope for bounty rewards
Intel Slim Bootloader
-
Intel freeware applications, former McAfee products, Intel's IT infrastructure and the *.intel.com web estate, each of which routes to a different address rather than to the bounty
Intel-maintained open source
-
Intel's live out-of-scope table also lists Intel-maintained open-source projects as out of scope and sends reporters to the project maintainer, which contradicts the scope section admitting projects Intel solely maintains. Confirm eligibility with Intel before committing time.
Intel-maintained open source
-
Intel's live out-of-scope table on Intigriti lists Intel-maintained open-source projects as out of scope and sends reporters to the project maintainer, which contradicts the scope section admitting projects Intel solely maintains. Confirm eligibility with Intel before committing time.
OpenVINO GenAI xFasterTransformer Anomalib OpenVINO Model Server NNCF Intel Neural Compressor Intel Cryptography Primitives Library OpenVINO Intel Slim Bootloader
-
Intel's own IT infrastructure and the *.intel.com web estate, which belong to a different reporting channel
Intel Slim Bootloader
-
Intel's own IT infrastructure, which sits in the programme's "No bounty" tier, plus open and prototyping platforms and reports that amount to exposed credentials
Intel Cryptography Primitives Library
-
Issues in third-party model weights rather than in the code that loads them
OpenVINO GenAI
-
Issues in third-party model weights rather than in the code that reads them
xFasterTransformer
-
Issues that need an already-privileged local attacker and cross no trust boundary in the process
OpenVINO
-
Model accuracy issues, including false positives and negatives on an inspection task, which are not security defects
Anomalib
-
Model output quality, hallucination and jailbreak behaviour, none of which is a software vulnerability
OpenVINO GenAI
-
Notebook and example code shipped for demonstration rather than for production use
NNCF
-
Open and prototyping platforms, meaning products shipped deliberately "open" to give customers debugging capability
Intel-maintained open source
-
Open-source projects Intel merely contributes to rather than solely maintains, which belong with the upstream maintainer
Intel Cryptography Primitives Library
-
Open-source projects Intel only contributes to, which belong with that project's own maintainers
Intel-maintained open source
-
Operator misconfiguration, such as exposing the inference endpoint to the internet without a proxy in front of it
OpenVINO Model Server
-
Performance regressions, which are not security defects however severe
xFasterTransformer
-
Pre-release and beta builds, which Intel puts out of scope for bounty rewards
OpenVINO Model Server Intel Neural Compressor Anomalib
-
Pre-release and beta builds. Intel states that "vulnerabilities in pre-release product versions (e.g., Beta, Release Candidate) fall out of Scope for bounty rewards"
OpenVINO
-
Pre-release builds and archived branches
NNCF
-
Pre-release builds, and end-of-life or end-of-support versions. Intel requires a currently supported release, and with the last one dating from June 2025 this is the first gate a report here has to clear
xFasterTransformer
-
Pre-release builds, which Intel puts out of scope for bounty rewards
OpenVINO GenAI
-
Pre-release, beta and release-candidate versions, which are never bounty-eligible
Intel Slim Bootloader
-
Products Intel has recently acquired, which stay out for at least six months after the acquisition completes
Intel-maintained open source
-
Reports against unsupported or unbuilt configurations, including build combinations the project does not ship
xFasterTransformer
-
Reports that arrive without instructions demonstrating exploitation on an impacted Intel platform
Intel Cryptography Primitives Library
-
Submissions needing an attacker to physically open the case, which Intel's out-of-scope table records as open-chassis attacks
Intel-maintained open source
-
Third-party base-image CVEs that cannot be root-caused to OVMS code
OpenVINO Model Server
-
Third-party products, licensed first- and third-party products, pre-release products and divested businesses, all of which Intel marks "Bounty Eligibility: No"
Intel-maintained open source
-
Upstream oneCCL and oneDNN bugs that cannot be root-caused to this codebase
xFasterTransformer
-
Upstream PyTorch and Lightning bugs that cannot be root-caused to Anomalib's own code
Anomalib
-
Upstream PyTorch, TensorFlow and ONNX parser bugs that cannot be root-caused to NNCF's own code
NNCF
-
Upstream PyTorch, TensorFlow and ONNX Runtime bugs that cannot be root-caused to this codebase
Intel Neural Compressor
-
Vulnerabilities in third-party frameworks OpenVINO merely imports from, which belong upstream rather than here
OpenVINO
Recent changes
Reward and scope changes across every Intel program, newest first.
No changes recorded yet. New targets and reward moves show up here and in the RSS feed.
About this page
This page gathers every public program listed under intel.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.
Something wrong or missing? Report a correction.