Microsoft is increasing the bug bounty it offers for Copilot security bugs, offering $5,000 for “researchers who identify and report moderate severity vulnerabilities.”

Like many large tech companies, Microsoft pays bounties to security researchers for finding security vulnerabilities and giving the company a chance to fix them before they become public knowledge. The company is doubling down on its commitment to incentivizing researchers to help it find and address security bugs in Copilot AI.

At Microsoft, we are committed to fostering a secure and innovative environment for our customers and users. As part of this commitment, we are thrilled to announce significant updates to our Copilot (AI) Bounty Program. These changes are designed to enhance the program’s effectiveness, incentivize broader participation, and ensure that our Copilot consumer products remain robust, safe, and secure.

Building on our commitment to support AI researchers, we are also introducing new initiatives aimed at providing comprehensive training and resources to support aspiring AI professionals as part of Zero Day Quest. These initiatives will include workshops, access to Microsoft AI engineers, and cutting-edge research and development tools. By investing in the growth and education of AI researchers, we aim to cultivate a community of skilled professionals who can contribute to the advancement of AI technology and uphold the highest standards of security and innovation.

We recognize that even moderate vulnerabilities can have significant implications for the security and reliability of our Copilot consumer products. To address this, we are introducing new incentives for moderate severity Copilot cases. Researchers who identify and report moderate severity vulnerabilities will now be eligible for bounty rewards up to $5,000. Expanding our bounty program to include Copilot reflects our ongoing commitment to security across Microsoft products and services, and we encourage researchers to help us identify and mitigate vulnerabilities.

The announcement is good news for Copilot AI users, as well as security researchers.