How do I participate in the Trusted Firmware bug bounty?

Create an account on Intigriti, review the Trusted Firmware program scope and rules, identify a valid in-scope security vulnerability, and submit your report through the official program page. Valid reports are reviewed and rewarded with cash payments.

How much can I earn from the Trusted Firmware bug bounty?

This program offers $1,000–$20,000 per valid finding depending on severity and impact. Critical vulnerabilities typically earn the highest rewards.

Is the Trusted Firmware bug bounty program legitimate?

Yes. This program is hosted on Intigriti, an established security research platform trusted by thousands of companies worldwide. All programs go through a vetting process before listing.

Bounty Programs Online / National

Trusted Firmware

Reward Bug bounty: $1,000–$20,000 per valid vulnerability

Trusted Firmware provides a reference implementation of secure software for Arm Armv8-A, Armv9-A and Armv8-M. It provides SoC developers and OEMs with a reference trusted code base complying with the relevant Arm specifications. This Bug Bounty program rewards eligible vulnerability reports in the following Trusted Firmware projects: - Trusted Firmware-A (TF-A) - Trusted Firmware-M (TF-M) - OP-TEE - Mbed TLS & TF-PSA-Crypto Note: If you like this, you may also be interested in the Arm Bug Bounty Program at https://app.intigriti.com/company/programs/arm/arm/detail.

Reward Bug bounty: $1,000–$20,000 per valid vulnerability

Category Bounty Programs

Location National

Eligibility Security researchers worldwide. Create a free account at Intigriti.com to participate. Programs may require accepting specific terms before submitting.

Source Official Source ↗

✦ Get AI-Matched — See Every Reward You Qualify For

New here? Here's how Reward Opportunity works:

1. Answer 5 quick questions — your state, skills, background, and interests.

2. Our AI scans 8,000+ bounties, settlements, grants, recalls, and paid studies against your profile.

3. Get a ranked list of what you can actually claim — with a reason and source link for each one.

Get matched free — first 5 results are free → Full report $9 one-time · no account needed

💰 More Bounty Programs

Cash rewards for providing tips, information, or completing specific tasks for organizations.

Browse all bounty programs →

Related Bounty Programs

Nexuzhealth Bug bounty: €50–€2,500 per valid vulnerability

BountyNational

WP Engine Bug Bounty Bug bounty: up to €2,500 per valid vulnerability

BountyNational

SimScale Bug bounty: €250–€6,000 per valid vulnerability

BountyNational

Dropbox Bug Bounty Bug bounty: $100–$15,000 per valid vulnerability

BountyNational

Nexuzhealth Web PACS Bug bounty: up to €1,000 per valid vulnerability

BountyNational

Port of Antwerp-Bruges Bug bounty: €50–€4,500 per valid vulnerability

BountyNational

View all bounty programs →

Not just this one — find everything you qualify for

Our AI scans 8,000+ bounties, settlements, grants, recalls, and paid studies against your profile to rank what you can actually claim.

Get My Free Match Report