Tools(315)

huntr.com

Bug bounty platform for AI/ML open-source apps, libraries, and model file formats.

Source rating 5.0 (75) 91k views 91k/mo traffic 0 saves Unknown
More categories (9)

Verdict

A quick read before you dig into the full page.

Best if
You are security researchers and need: Identifying and resolving vulnerabilities in AI/ML open-source projects
Pick this when
Bug bounty platform for AI/ML open-source apps, libraries, and model file formats

Overview

huntr is the world’s first bug bounty platform for AI/ML, providing a single place for security researchers to submit vulnerabilities to ensure the security and stability of AI/ML open-source apps and libraries and ML model file formats.

huntr.com screenshot

Best for

Short scenarios where huntr.com tends to shine.

  • Identifying and resolving vulnerabilities in AI/ML open-source projects

    Best for Security researchers

  • Securing ML model file formats

    Best for AI/ML developers

  • Rewarding security researchers for finding and reporting vulnerabilities

    Best for Open-source maintainers

  • Improving the overall security posture of AI/ML applications

    Best for MLSecOps engineers

Example outputs 1

Sample generations and before/after results for huntr.com.

Access & connections

Where you can use huntr.com.

Platforms

Web

Capabilities

What this tool accepts, produces, and is strongest at.

Highlights

  • Vulnerability submission platform
  • Bug bounty program management
  • CVE assignment for open-source vulnerabilities
  • Secure vulnerability disclosure process
  • AI/ML security focus

People also view

Tools that often show up alongside huntr.com in collections and comparisons.

FAQ 5

What is huntr?
huntr is the world’s first bug bounty platform for AI/ML, providing a single place for security researchers to submit vulnerabilities to ensure the security and stability of AI/ML open-source apps and libraries and ML model file formats.
How to use huntr?
Security researchers can submit vulnerabilities through a secure form. huntr validates the report, contacts the maintainer, and if the report is valid, the researcher is rewarded a bounty. Open source reports go public on day 90, but maintainers may request an extension.
How does the vulnerability disclosure process work?
Researchers submit vulnerabilities through a secure form. huntr validates the report and contacts the maintainer, allowing them 31 days to respond. If the report is valid, the researcher receives a bounty. Open source reports go public on day 90, with possible extensions for maintainers. Model File Format reports are not disclosed publicly.
What happens if a maintainer doesn't respond to a vulnerability report?
If no response is received within 31 days, huntr will manually resolve high and critical reports within 14 days.
When do open source vulnerability reports go public?
All open source vulnerability reports go public on day 90, but maintainers may request an extension if needed. Open source reports marked informational or invalid go public immediately.
huntr.com