As we’ve just wrapped up our second year on the platform, we would like to extend our sincere appreciation to our entire researcher community.
Your dedication, professionalism, and technical excellence have been instrumental in shaping the BMW Bug Bounty Program into what it is today. Over the past two years, your contributions have not only strengthened our security posture but have also continuously driven us to evolve and improve our internal processes.

We truly value the time, creativity, and persistence you put into every report — it makes a real difference and does not go unnoticed. 🔍
To keep the program evolving, we’ve introduced several updates:

• Improved handling of duplicate submissions
• Refined expectations around report quality
• Clarified eligibility requirements
• And several additional enhancements

We’re excited to continue building on this momentum together and to keep raising the bar with you. 💪

After our break, the BMW Bug Bounty Program will be officially back online on 11th of May — and we’re excited to continue working with all of you!

During the pause, we took time to streamline internal processes, improve response workflows, and prepare the next phase of our collaboration.
Now we're ready — and we can’t wait to see your upcoming submissions.

Thank you for your patience, your passion, and your continued support.

Let’s make this next chapter even better. Happy hunting! 🐛🔍

The BMW Bug Bounty Program will be temporarily paused due to technical adjustments aimed at improving our processes and overall quality.
Unfortunately it won't be possible to submit reports during the pause.

Please do not write e-mails and be patient. We will be available again shortly.
All reports already submitted will continue to be reviewed as usual.

We appreciate your support and valuable contributions and will inform you as soon as the program is back online.
Thank you for your understanding.

Your BMW Bug Bounty Team

As we just celebrated our first year on the platform, we want to extend a huge thank you to everyone who participated in our bug bounty program. The response has been overwhelming, and we truly appreciate the dedication and expertise of our security community.

What's New?
To make our program even better, we've made several important updates:

• Clarifications regarding Duplicates
• Mandatory and Recommended Report Content
• Reporter Eligibility Criteria
• Minor general adjustments

Please review the latest program details on our program page.

Thank you again for helping us make BMW more secure!
Here's to another great year of collaboration!