Huntr

Huntr is the world's first bug bounty platform focused on artificial intelligence and machine learning, connecting security researchers with AI open-source projects to improve the security of the AI ecosystem through responsible vulnerability disclosure.

The platform covers two main types of vulnerabilities: model-file vulnerabilities, focusing on machine learning model file formats and their loading processes; and open-source vulnerabilities, addressing security flaws in AI/ML open-source applications and libraries.

Researchers can submit vulnerability reports via the platform's security form; the platform will then contact the relevant maintainers for validation and manage rewards and disclosure.

Bounties vary by severity and project; public information shows rewards range from $0 to $4,000, with specifics listed in the platform's bounty projects.

Upon receipt, the platform will contact maintainers and grant a 31-day response window. For high-severity vulnerabilities with no maintainer reply, the platform may take manual action within 14 days. Valid vulnerabilities, once confirmed, earn researchers a bounty.

According to platform rules, open-source vulnerability reports are usually disclosed 90 days after verification and fix, with a potential extension; model-file vulnerability reports are generally not disclosed.

The platform is targeted at security researchers, AI open-source project maintainers, and organizations and individuals interested in AI/ML supply chain security. Users must log in and agree to the Terms of Service to access core features.

The platform's model-file vulnerability initiative covers 56 formats, including safetensors, GGUF, and other common ML model file formats.