Now that summer is well underway, we want to thank all security researchers who help keep our university safe.

Our vulnerability disclosure program remains public and open year-round. Based on our annual bounty listings, this has consistently been one of our highest-rewarding public programs overall. Why? Because we frequently grant bonus payouts for submissions that are especially well-documented and high-impact, or particularly important to us and our users’ security.

If you’re hunting this summer, we encourage you to report responsibly and include clear reproduction steps and impact details. Great reports get recognized!

Thank you again for your work and dedication. We’re looking forward to your findings.