Vercel has publicly launched its bug bounty program, previously operated privately since 2022 through HackerOne. This expansion follows years of refinement in their process, targets, and scope, aiming to further strengthen platform security by engaging a wider community of researchers.
Source: Vercel