Is it possible to become a bug bounty researcher for Microsoft Azure Quantum?

Question

Is it possible to become a bug bounty researcher for Microsoft Azure Quantum? If so, how can one do so and are there any monetary or non monetary rewards?

Answer 1

Hello @Lorr

As per the Microsoft Azure Bounty Program, Azure quantum is listed as supported service. The goal of the Azure Bounty program is to uncover significant vulnerabilities that have a direct and demonstrable impact on the security of our customers. 
Please refer to the documents below for guidance on checking the eligibility for submission
https://www.microsoft.com/en-us/msrc/bounty-microsoft-azure

Researchers are requested to include the following information to help Bounty program team quickly assess their submission 
Request to be submitted through the MSRC Researcher Portal 

Please check the getting started section and for bounty awards.
Note: Researchers who provide submissions that do not qualify for bounty awards may still be eligible for public acknowledgment if their submission leads to a vulnerability fix, and points in our Researcher Recognition Program to earn swag and a place on the Microsoft Most Valuable Researcher list. 
For any further queries, please contact bounty@microsoft.com. 

If I have answered your question, please accept this as answer as a token of appreciation and don't forget to thumbs up for "Was it helpful"!

Answer 2

Yes, it is possible to become a bug bounty researcher for Microsoft Azure, including Azure Quantum. Microsoft has a Bug Bounty Program that encourages researchers to discover vulnerabilities in their technologies, which includes Azure services. Researchers can receive monetary rewards for identifying critical vulnerabilities. For example, the bounty for vulnerabilities reported on Azure services can be up to $60,000.

To participate, you would typically need to register for the program and follow the guidelines provided by Microsoft for submitting vulnerabilities.

---

References:

• Azure guidance for secure isolation
• Secure Future Initiative and offensive research