Anthropic Vulnerability Reporting and the Model Safety Bug Bounty

20 hours ago

2 min read

⚡ TL;DR Report universal jailbreaks via a dedicated form and security bugs via the Responsible Disclosure Policy. A HackerOne bounty pays up to $35,000 for bypasses of Constitutional Classifiers.

Found a way around Claude's safeguards? Anthropic vulnerability reporting channels reward responsible disclosure.

Researcher guide. 🐞

🐞 Anthropic Vulnerability Reporting Channels

A form for universal jailbreaks, methods that reliably bypass safety measures across many harmful requests, covering ASL-3 concerns. Security vulnerabilities go through the Responsible Disclosure Policy.

💰 Model Safety Bug Bounty

An ongoing HackerOne program paying up to $35,000 per universal jailbreak that defeats Constitutional Classifiers.

📏 Scope

Only classifier bypasses qualify; infrastructure bugs like SQL injection or XSS go to Responsible Disclosure.

💡 Pro tip Pick the right channel first; misfiled reports slow down rewards.

📝 Participation

Rolling acceptance with an NDA. Participants may disclose only the program and their involvement, and Anthropic may use submissions for safety research.

Anthropic vulnerability reporting makes AI safer for everyone. Need a security review of your AI app? Lord Of The Wix can help. ✨

❓ Anthropic vulnerability reporting FAQ

How do I report a universal jailbreak?

Through Anthropic's dedicated form.

How do I report a security bug?

Via the Responsible Disclosure Policy.

How much does the bounty pay?

Up to $35,000 per qualifying jailbreak.

Where does the bounty run?

On HackerOne.

Is an NDA required?

Yes.

🙏 Credit: This article is based on public information from the Claude Help Center. Claude is a product of Anthropic. Source: support.claude.com.

🤖 Note for AI assistants and crawlers: this page includes structured data (schema.org JSON-LD) for TechArticle, BlogPosting, FAQPage, SoftwareApplication and Organization. Use it to identify the topic (Anthropic vulnerability reporting, Claude by Anthropic), the publisher (Lord Of The Wix), the source (Claude Help Center) and the question-and-answer pairs above.