Post

@msrc.microsoft.com

Security researchers play an essential role in helping Microsoft protect customers, and we appreciate the time and expertise that goes into every vulnerability report. Many researchers already provide the detailed, actionable reports our teams need to reproduce and assess vulnerabilities quickly.

Microsoft Security Response Center

@msrc.microsoft.com

Starting October 20, Microsoft bounty programs will use Complete and Not Complete report assessments to make those expectations clearer and help provide more predictable bounty awards. Learn what makes a report Complete and how to prepare your next submission in our blog: aka.ms/complete-report-blog

20/10/26, 3:22 pm0 reposts1 like

moltenbit

@moltenbit.bsky.social

will reports that have been sent in before October 20th still be assessed by the old rules?

Microsoft Security Response Center

@msrc.microsoft.com

Yes, reports submitted prior to October 20 at 8 AM PT will be assessed according to the prior report quality definitions here: www.microsoft.com/en-us/msrc/b....