We’re updating the Microsoft 365 Bounty Program to make program scope clearer for researchers.
One of the biggest changes: we’re shifting from domains to services, making it easier to understand which Microsoft 365 services are included in the program and how eligible research
We are the Microsoft Security Response Center. To report security vulnerabilities or abuse in Microsoft products, visit microsoft.com/en-us/msrc.


