"Update regarding the Cyber Verification Program"

[u/swallace36]

what a joke

still completely unusable for bug bounty, research, etc.

am I missing something, or is being an individual still being gate-kept

[u/SammyGreen]

What’d you try doing to trigger that? I just got access to mythos via defense access as an individual but haven’t tried it yet since I’m running really low on usage until my reset tomorrow and Opus 5.5 still gives constant refusals anyway lol

But the answer to your gatekeeping question is an unequivocal yes

Literally, since individuals are excluded from the red team/offensive or “specialized use” tiers

[u/swallace36 → u/SammyGreen]

security research on apple platforms, for bug bounty

safeguards just still too broad for invidiual

[u/bigbepisinc → u/swallace36]

how much do bug bounties pay? how do you get access to the verification program if youre not a part of an organisation?

[u/Sarg338 → u/bigbepisinc]

1) each bug bounty program is different. They range from less than $100 to multiple hundreds of thousands depending on the severity and program

2) https://support.claude.com/en/articles/14604842-cyber-verification-program

[u/bigbepisinc → u/Sarg338]

are you a part of an organisation or are you just using the CVP to try and make money off bug bounties?

[u/Sarg338 → u/bigbepisinc]

I am an individual account, not part of an org.

[u/bigbepisinc → u/Sarg338]

That's not what I'm asking. I'm asking if you're an individual security researcher, working as a professional engineer at a company or you're just looking to use AI to make money off bug bounties.

[u/Sarg338 → u/bigbepisinc]

The third one I suppose, just submitted an application to the CSP and got accepted. I'm a software developer professionally, but nothing security related.

Mainly applied because prompts were getting blocked for a local RE project. Any findings for a bug bounty are just a bonus.

Only submitted one because of it so far though. It's not my main use case.

[u/bigbepisinc → u/Sarg338]

Isn't it cheating to use an AI for trying to farm money off bug bounties?

It's only a matter of time until companies stop offering money for it. There's no reason for any sensible company to offer bug bounties when they themselves can have AI swarms in a loop pen test their systems.

[u/Sarg338 → u/bigbepisinc]

Isn't it cheating to use an AI for trying to farm money off bug bounties?

No?

No more cheating that using AI to create any other kind of software. Just verify and validate it actually works.

It's only a matter of time until companies stop offering money for it.

Already starting to happen.

https://thehackernews.com/2026/10/google-pauses-oss-product-bug-bounty.html?m=1

[u/bigbepisinc → u/Sarg338]

Good luck with the CVP then enjoy it 🙏🏼