Zeek bug bounty programs

Zeek programs compared: top reward per severity, safe harbor, identity check, first response and status. Amounts are in the currency each program pays.

Program	Critical	High	Medium	Low	Top reward	Safe harbor	KYC	First response	Status
ZE Zeek Sorona · Bug bounty	–	–	–	$100	$1,500	Partial	–	–	Open

• ZE

  Zeek

  Sorona · Bug bounty

  Open

  Top reward

  $1,500

  Critical

  –

  High

  –

  Medium

  –

  Low

  $100

  Safe harbor

  Partial

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

• https://zeek.org

  Web

• File analysis and extraction under file_analysis in full, including the MIME and hash pipelines that reassemble transferred content

  Products and areas

• The Broker communication library and the whole cluster control plane between manager, proxies, loggers and workers, where sensor nodes trust each other

  Products and areas

• The entire analyser corpus under src/analyzer/protocol, plus the SPICY-generated analysers, all of which parse untrusted wire data straight off the tap

  Products and areas

• The input framework and every log writer, where attacker-influenced field values reach an output serialiser and then a downstream SIEM

  Products and areas

• The Zeek scripting language end to end: the interpreter, its type system, and the script-driven memory management behind it

  Products and areas

• Zeek takes security reports at [email protected] under a documented security release process with a bounded embargo. The covered object is the Zeek tree in full, and no boundary narrower than that is drawn

  Products and areas

No target matches. Try part of a host name, such as the company name.