Skip to content
bugbounty.fyi
Get paid to secure open source 475 paid open-source programs on Sorona, up to $1M Perk Low bugs: $100 or 1 mo Claude Max

Also on Patchstack. All 476 paid open-source programs

Try

Highest paying Newly launched Paid without KYC Full safe harbor
All results

About this site

WithSecure™ bug bounty programs

withsecure.com Updated

WithSecure™ runs one public program: a self-hosted bug bounty paying up to €6,000.

Top reward
€6,000
Self-hosted
Programs
1
1 pays cash
Targets in scope
17
2 types
Last change
None yet
Tracked since Nov 2026

Where to report

The one public program WithSecure™ runs.

  • WithSecure™

    Self-hosted · Bug bounty

    Open

    Top reward

    €6,000

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

What is in scope

17 targets.

  • WithSecure Elements Mobile Protection (Android and iOS)

    Android

  • WithSecure Atlant

    Products and areas

  • WithSecure Client Security

    Products and areas

  • WithSecure Client Security Premium

    Products and areas

  • WithSecure Countercept Managed Detection & Response (MDR)

    Products and areas

  • WithSecure E-mail and Server Security

    Products and areas

  • WithSecure E-mail and Server Security Premium

    Products and areas

  • WithSecure Elements Collaboration Protection

    Products and areas

  • WithSecure Elements EDR for Computers (Windows and Mac)

    Products and areas

  • WithSecure Elements EDR for Servers (Windows and Linux)

    Products and areas

  • WithSecure Elements EPP for Computers (Windows and Mac)

    Products and areas

  • WithSecure Elements EPP for Computers Premium (Windows)

    Products and areas

  • WithSecure Elements EPP for Servers (Windows and Linux)

    Products and areas

  • WithSecure Linux Protection

    Products and areas

  • WithSecure Policy Manager

    Products and areas

  • WithSecure Server Security

    Products and areas

  • WithSecure Server Security Premium

    Products and areas

No target matches. Try part of a host name, such as the company name.

Recent changes

Reward and scope changes across every WithSecure™ program, newest first.

No changes recorded yet. New targets and reward moves show up here and in the RSS feed.

Recent CVEs

Published vulnerabilities in WithSecure™ products, from the NVD.

Search NVD
  • CVE-2024-4454 High

    WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of WithSecure Elements Endpoint Protection. User interaction on the part of an administrator is required to exploit this vulnerability. The specific flaw exists within the WithSecure plugin hosting service. By cr

  • CVE-2024-23764 Medium

    Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15 and later, WithSecure Server Security 15 and later, WithSecure Email and Server Security 15 and later, and WithSecure Elements Endpoint Protection 17 and later.

  • CVE-2023-47172 High

    Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, and WithSecure Elements Endpoint Protection 17 and later.

  • CVE-2023-47263 High

    Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, WithSecure

  • CVE-2023-47264 High

    Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS). This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and late

  • CVE-2023-43762 Critical

    Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manager 15 and Policy Manager Proxy 15.

  • CVE-2023-43763 Medium

    Certain WithSecure products allow XSS via an unvalidated parameter in the endpoint. This affects WithSecure Policy Manager 15 on Windows and Linux.

  • CVE-2023-42521 High

    Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0

About this page

This page gathers every public program listed under withsecure.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.

Something wrong or missing? Report a correction.