Huntr

What is Huntr?

Huntr is the world’s first bug bounty platform specifically designed for artificial intelligence (AI) and machine learning (ML) applications. It serves as a centralized platform where security researchers can report vulnerabilities in AI/ML open-source apps, libraries, and model file formats. By facilitating the submission and validation of vulnerabilities, Huntr aims to enhance the security and stability of AI/ML technologies. The platform not only rewards researchers for their findings but also supports maintainers in patching vulnerabilities, thereby promoting a safer AI ecosystem.

How to use Huntr?

1. Disclose: Security researchers find a vulnerability and submit it through Huntr's secure form.
2. Validate: Huntr contacts the maintainer of the affected software to validate the report, allowing a response period of 31 days. If no response is received, Huntr will resolve high and critical reports within 14 days.
3. Reward: Valid reports lead to bounties for the researchers. Open-source reports receive a CVE, and maintainers may also be rewarded for fixing vulnerabilities.
4. Publish: Vulnerability reports are made public after 90 days unless maintainers request an extension. Informational or invalid reports are published immediately.

What are the main features of Huntr?

• Centralized Reporting: A single platform for researchers to report vulnerabilities in AI/ML applications.
• Validation Process: Structured validation of reports involving maintainers and Huntr's team.
• Bounty Rewards: Financial incentives for researchers who submit valid vulnerability reports.
• CVE Support: Automatic assignment of CVEs for open-source vulnerabilities.
• Public Disclosure: Transparency through public reporting after a set period.

Who is Huntr for?

Huntr is primarily designed for security researchers, ethical hackers, and developers involved in the AI and ML sectors. It is suitable for individuals or teams looking to contribute to the security of open-source AI/ML projects. Additionally, software maintainers and organizations that develop AI/ML applications can benefit from Huntr by ensuring their products are secure and resilient against vulnerabilities.

What are the use cases of Huntr?

1. Vulnerability Reporting: Security researchers can report vulnerabilities they discover in AI/ML libraries and applications.
2. Open Source Security: Maintainers of open-source AI projects can use Huntr to manage vulnerability disclosures and improve their software's security posture.
3. Research and Learning: Aspiring security professionals can learn about vulnerability discovery and reporting through participation in Huntr's programs.