The Unique Identification Authority of India has introduced its first structured bug bounty programme to strengthen the security of the Aadhaar ecosystem, which supports digital identity services for over a billion users.
This initiative adopts a proactive, crowdsourced approach by collaborating with independent cybersecurity experts to identify and fix vulnerabilities before they can be exploited. For the initial phase, UIDAI has selected 20 experienced ethical hackers to assess critical digital assets.
The programme, conducted in partnership with ComOlho IT Private Limited, focuses on key platforms such as the UIDAI website, the myAadhaar portal, and the Secure QR Code application. Researchers will test these systems, including their APIs, to uncover hidden security flaws.
Discovered vulnerabilities will be classified into Critical, High, Medium, or Low categories based on severity. Ethical hackers must follow strict responsible disclosure practices, reporting issues through secure channels rather than publicly sharing them.
Rewards will depend on the impact of the findings, with higher payouts for critical and high-risk vulnerabilities. This ensures that the most serious threats to user data and privacy are addressed quickly.
The programme complements UIDAI’s existing security measures, including audits, penetration testing, and continuous monitoring. By adding external expertise, UIDAI aims to strengthen its defense strategy and stay resilient against evolving cyber threats.
Comments