wolfSSL bug bounty programs

wolfSSL programs compared: top reward per severity, safe harbor, identity check, first response and status. Amounts are in the currency each program pays.

Program	Critical	High	Medium	Low	Top reward	Safe harbor	KYC	First response	Status
WO wolfSSL Sorona · Bug bounty	–	–	–	$100 (highest)	$1,500	Partial	–	–	Open
WO wolfBoot Sorona · Bug bounty	–	–	–	$100	$1,500	Partial	–	–	Open

• WO

  wolfSSL

  Sorona · Bug bounty

  Open

  Top reward

  $1,500

  Critical

  –

  High

  –

  Medium

  –

  Low

  $100 (highest)

  Safe harbor

  Partial

• WO

  wolfBoot

  Sorona · Bug bounty

  Open

  Top reward

  $1,500

  Critical

  –

  High

  –

  Medium

  –

  Low

  $100

  Safe harbor

  Partial

Amounts are the top reward per severity in the currency each program pays. Green marks the highest per severity. First response is the platform's measured average when it publishes one, else what the policy promises.

• https://www.wolfssl.com

  Web

  Covered by wolfSSL

• https://www.wolfssl.com/products/wolfboot

  Web

  Covered by wolfBoot

• DTLS and its retransmission, replay and cookie handling, which is a distinct state machine used heavily on the embedded side

  Products and areas

  Covered by wolfSSL

• Every platform port the project ships, covering Arm Cortex-M, RISC-V, PowerPC and x86, whose linker and memory-protection assumptions differ from one another

  Products and areas

  Covered by wolfBoot

• Reports go to wolfSSL through the address in the project's SECURITY.md. The covered object is the GPL-3.0 upstream bootloader in full, with the paid commercial build variants sitting outside it

  Products and areas

  Covered by wolfBoot

• Signature verification across every algorithm the bootloader supports, covering the ECDSA, Ed25519, RSA and post-quantum LMS and XMSS paths, where a verification flaw makes an unsigned image boot

  Products and areas

  Covered by wolfBoot

• The build system and the configuration surface, since a define that silently disables a check is a defect in a library designed to be compiled down

  Products and areas

  Covered by wolfSSL

• The certificate stack: ASN.1 and X.509 parsing, chain building, path validation, name checking, CRL and OCSP handling

  Products and areas

  Covered by wolfSSL

• The companion products maintained in the same tree and by the same team where they are covered by this policy, including the SSH, MQTT and TPM libraries built on wolfCrypt

  Products and areas

  Covered by wolfSSL

• The FIPS module, its boundary, its self-tests and the digest and key size checks it enforces

  Products and areas

  Covered by wolfSSL

• The hardware acceleration and cryptographic offload backends, along with the secure element and TPM integrations

  Products and areas

  Covered by wolfSSL

• The OpenSSL compatibility layer, where an application ported from OpenSSL relies on a shim to preserve a check

  Products and areas

  Covered by wolfSSL

• The published SECURITY-POLICY.md sets out severity criteria, a mandatory report template and a coordinated disclosure process, without carving the library into in-scope and out-of-scope components. Treat the whole wolfSSL tree as the target

  Products and areas

  Covered by wolfSSL

• The random number generator, its entropy sources on constrained targets, and its behaviour where no operating system entropy exists

  Products and areas

  Covered by wolfSSL

• The TLS implementation across every version wolfSSL supports, client and server, covering handshake state, the record layer, session resumption and renegotiation

  Products and areas

  Covered by wolfSSL

• The update machinery end to end: rollback and anti-downgrade version enforcement, the update-partition state machine that decides which image is authoritative, encrypted-update key handling, and the swap and backup logic for A/B updates, including behaviour across an interrupted or power-cut swap

  Products and areas

  Covered by wolfBoot

• The whole pre-verification parsing surface: firmware image header (manifest) parsing and the TLV field walker, which run on attacker-supplied bytes before any signature has been checked

  Products and areas

  Covered by wolfBoot

• TPM 2.0 measured-boot integration and the wolfTPM interface, where a measurement that can be influenced breaks attestation

  Products and areas

  Covered by wolfBoot

• wolfCrypt in full, covering the symmetric ciphers, AEAD tag verification, the hash and MAC families, RSA, the elliptic curve implementations and the post-quantum algorithms

  Products and areas

  Covered by wolfSSL

No target matches. Try part of a host name, such as the company name.