What is a bug bounty program?
a bug bounty program is a way for companies to keep their online sites and apps safe by paying people like me and you " Researchers " for reporting vulnerabilities.
Are bug bounty programs worth it?
yes they deserve to spend time on that you just need to develop a method to start working on this business model
how much can you make from bug bounty programs?
if a vulnerability severity is low you can earn from 100$ to 200$, if the severity is medium you can earn from 200$ to 500$, if the severity is high you can earn from 1000$ to 3000$, if the severity is critical you can earn up to 20000$ and what you need to know that those numbers are just an approach because the prices changes from program to program, sometimes they will pay you high if the company is well known and sometimes no.
How to earn money from social media sites?
social media sites also have their bug bounty programs and that is a way you can use to earn from this type of sites.
What are the available social media bug bounty programs?
Reddit :
Reddit can pay you up to 7500$ for a vulnerability.
How to work?
1 - find a vulnerability
2 - report it through their security email
3 - don't tell anyone and get rewarded
Reddit Bug Bounty Program
Facebook And Instagram :
facebook and instagram which are the same company can pay you from hundreds of dollars to thousands of dollars for a one specific vulnerability, they have a customized form created specificly for reporting security issues, they usally reply in two or five days.
facebook and instagram bug bounty program
Twitter :
twitter has paid over one million dollar to security researchers and it stills paying hundreds of dollars if not thousands each month, their program is available through hackerone.
twitter bug bounty program
