Intel has officially suspended its long-standing bug bounty program, which previously offered rewards up to $100,000. The company transitioned to a responsible disclosure model on the Intigriti platform, which currently offers no financial compensation.
The former program, launched in 2017, covered hardware, software, and firmware. In 2020 alone, Intel addressed 231 CVEs, with 105 coming from researchers. Intel is now evaluating new bounty criteria while other firms like AMD also face program suspensions.
This shift occurs as the industry grapples with a surge in reports, including unmanageable AI-generated submissions. While researchers can still report flaws to Intel, the lack of incentives mirrors recent pauses at HackerOne and the Curl project's exit.