Critical
¥2,000–¥5,000
ZSRCZ.ai Security Response Center
Z.ai 安全应急响应中心
Security experts worldwide are invited to help build a safer Z.ai
Bug bounty
Rewards follow the severity of the report. The ZCode security team makes the final rating.
High
¥500–¥2,000
Medium
¥100–¥500
Low
¥20–¥100
High-quality reports, working PoCs and new attack chains can earn an additional reward.
About ZSRC
The Z.ai Security Response Center (ZSRC) receives and handles security vulnerabilities and privacy issues in ZCode products and services. We welcome security researchers to report vulnerabilities and help us improve product security.
Reports are submitted through the Vulbox platform, which performs the initial review. The ZCode security team confirms the rating, follows the fix and pays the reward.
In scope
- Desktop clientmacOS, Windows, Linux
- CLIZCode command-line tool
- IDE plugins & extensionsOfficial plugins and extensions
- Online servicesAccounts, plans and other services
Contact
Questions about a rating, a reward or the progress of a report? Email us.
vuln_report@zhipuai.cn