Malwarebytes Coordinated Vulnerability Disclosure Bug Bounty Program

Our program is currently paused.
A significant rise in AI-enabled submissions, the vast majority of which are not valid, duplicates or are hard to verify, has created a need for us to reassess the bug bounty program and process. In the meantime, you can report a security vulnerability to
application-security@malwarebytes.com.

Malwarebytes welcomes and encourages independent researchers to report vulnerabilities in our products to us. It is the objective of this Coordinated Vulnerability Disclosure (CVD) program to work with leading researchers in making our products more secure and giving malware writers a hard time.

The CVD program incentivizes external researchers who work with us responsibly by promoting an open communication channel with our security division, awarding bug bounties and duly crediting the effort from leading researchers.

By submitting a security bug or vulnerability to Malwarebytes, you acknowledge that you have read and agreed to the Program Guidelines.

Malwarebytes CVEs details are published here.