Meta has launched 2 updates to its Bug Bounty & Data Bounty programs around scraping.
Starting as a private bounty track for the Gold+ HackerPlus researchers, the bug bounty program will award reports about scraping methods, even if the data they target is public. Specifically, it wants people to find bugs that enable attackers to bypass scraping limitations to access data at greater scale than the product intended.
The company said in an announcement that the goal was to “quickly identify & counter scenarios that might make scraping less costly for malicious actors to execute.”
To the best of our knowledge, this is the first scraping bug bounty program in the industry, said Meta
Scraped Databases
Starting today, the data bounty program will also cover scraped datasets found Online. Meta will reward reports of unprotected or openly public databases containing at least 100,000 unique Facebook user records with PII or sensitive data (e.g. email, phone number, physical address, religious or political affiliation). The reported dataset must be unique & not previously known or reported to Meta.
Bounty Awards
Meta will award rewards in both programs based on the maximum impact of each report, with a minimum reward of $500 per each scraping bug or datasets.
