SearchImagesVideoTranslateMail
Login

Bug Bounty Program

Yandex offers rewards for security bug reports. Reports about security vulnerabilities on Yandex's services or mobile applications sent to us can win a monetary reward. Bug hunters reporting especially important security problems are also inducted into our The Hall of Fame.

Scope

Yandex's web-based services, iOS- or Android-based apps, which process, store or use in one way or another sensitive user information, such as:

  • authentication data;

  • email correspondence;

  • personal photos or videos.

Web domains: .yandex.ru (except narod.yandex.ru), yandex.com, yandex.com.tr, yandex.kz, yandex.ua, yandex.by, yandex.net, yandex.st, .ya.ru, .moikrug.ru.

Mobile apps: Yandex.Maps, Yandex.Navigator, Yandex.Music, Yandex.Taxi, Yandex.Mail, Yandex.Market, Yandex.Metro, Yandex.Fotki, Yandex.Trains.

Focus

Any security bug that can violate confidentiality, integrity or availability of sensitive user data on websites in the scope of the Yandex Bug Bounty. Web service vulnerabilities are classified using OWASP Top-10. Mobile application vulnerabilities are classified using OWASP Mobile Top-10.

Sending a bug report

You can send a security problem description use the special form or at security-report-en@yandex-team.ru. The first way is preferable because we will process your message and answer you more quickly. You can also use our public PGP key to encrypt your message.

Reward

The amount of the reward depends on where the bug has been found - one of the key services or apps, or somewhere else. The bounty rates that you can see in the table below are approximate and may differ from the actual amount that you will receive, because we will be paying you your reward in roubles, which will be converted into U.S. dollars at the current exchange rate at the Central Bank of Russia on the day of payment. The amount of the reward may be increased in special circumstances.

OWASP Top-10 Key services Other services
A01. Injection 3,133.7 USD 800 USD
A02. Cross Site Scripting (XSS) – A05. Cross Site Request Forgery (CSRF) 320 USD 160 USD
A06. Security Misconfiguration – A10. Unvalidated Redirects and Forwards 160 USD 100 USD

Key services: Yandex.Passport, Yandex.Mail, Yandex.Disk, Yandex.Maps, Yandex.Calendar, Moi Krug, Yandex's home page and search results page.

OWASP Mobile Top-10 Key apps Other apps
M01. Insecure Data Storage – M05. Poor Authorization and Authentication 320 USD 160 USD
M06. Improper Session Handling – M08. Side Channel Data Leakage 160 USD 100 USD

Key apps: Yandex.Maps, Yandex.Navigator, Yandex.Mail, Yandex.Market.

Restrictions

You can test the Yandex services or mobile apps and demonstrate their vulnerabilities only from your own account. Hacking into someone else's account is strictly forbidden.

By submitting a bug report you agree to comply with Yandex’s Responsible Disclosure Policy, which forbids public or private disclosure of the details of any vulnerability found on Yandex within 90 days. We need this time to contact you and fix the problem. Please read our Responsible Disclosure Policy.

Yandex employees, the employees in any of Yandex’s partner companies, the authors of the code where security flaws have been reported, cannot participate in the Yandex Bug Bounty hunt.

The reward will be offered only for reporting those vulnerabilities that have not been previously detected.

The Yandex Bug Bounty terms and conditions

Yandex N.V.
Registered Office in Amsterdam
Address: Schiphol Boulevard 165
1118 BG Schiphol
The Netherlands
tel.: +31 (0) 20 206 6970
Yandex LLC
Headquarters in Russia
Office in 
Moscow
  • Moscow
  • Saint Petersburg
  • Ekaterinburg
  • Novosibirsk
  • Kazan
  • Rostov-on-Don
  • Nizhny Novgorod
  • Kiev
  • Odessa
  • Simferopol
  • Minsk
  • San Jose
  • Istanbul
  • Lucerne
  • Zürich
  • Berlin
Pic / Map
Address
16, Leo Tolstoy St., Moscow 119021, Russia
Reception
tel. +7 495 739-70-00, fax +7 495 739-70-70
Marketing & Media Relations
pr@yandex-team.ru
Investor Relations
tel. +7 495 974 3538
Office in 
Saint Petersburg
  • Moscow
  • Saint Petersburg
  • Ekaterinburg
  • Novosibirsk
  • Kazan
  • Rostov-on-Don
  • Nizhny Novgorod
  • Kiev
  • Odessa
  • Simferopol
  • Minsk
  • San Jose
  • Istanbul
  • Lucerne
  • Zürich
  • Berlin
Pic / Map
Address
Piskarevskiy prospekt, building 2, block 2, 4th floor, Benois Business Centre, 195027, Saint Petersburg, Russia
Reception
tel. +7 812 633-36-00, fax +7 812 633-36-99
Toll-free number for regional users 8 800 333-9639 (or 8 800 333-YNDX)
Office in 
Ekaterinburg
  • Moscow
  • Saint Petersburg
  • Ekaterinburg
  • Novosibirsk
  • Kazan
  • Rostov-on-Don
  • Nizhny Novgorod
  • Kiev
  • Odessa
  • Simferopol
  • Minsk
  • San Jose
  • Istanbul
  • Lucerne
  • Zürich
  • Berlin
Pic / Map
Address
10 Hohryakova St., Ekaterinburg 620014, Russia
Reception
fax +7 343 385-01-99
Sales Office
tel. +7 343 385-01-00 uralsales@yandex-team.ru
Toll-free number for regional users 8 800 333-9639 (or 8 800 333-YNDX)
Office in 
Novosibirsk
  • Moscow
  • Saint Petersburg
  • Ekaterinburg
  • Novosibirsk
  • Kazan
  • Rostov-on-Don
  • Nizhny Novgorod
  • Kiev
  • Odessa
  • Simferopol
  • Minsk
  • San Jose
  • Istanbul
  • Lucerne
  • Zürich
  • Berlin
Pic / Map
Address
35 Krasnoyarskaya St., Novosibirsk 630004, Russia
Reception
fax +7 343 385-01-99
Sales Office
tel. +7 383 230-43-06 sales-nsk@yandex-team.ru
Office in 
Kazan
  • Moscow
  • Saint Petersburg
  • Ekaterinburg
  • Novosibirsk
  • Kazan
  • Rostov-on-Don
  • Nizhny Novgorod
  • Kiev
  • Odessa
  • Simferopol
  • Minsk
  • San Jose
  • Istanbul
  • Lucerne
  • Zürich
  • Berlin
Pic / Map
Address
6 Spartakovskaya Street, 11th floor, right wing, Kazan 420107, Russia
Reception
tel. +7 843 524-71-71
Sales Office
kzn@yandex-team.ru
Office in 
Rostov-on-Don
  • Moscow
  • Saint Petersburg
  • Ekaterinburg
  • Novosibirsk
  • Kazan
  • Rostov-on-Don
  • Nizhny Novgorod
  • Kiev
  • Odessa
  • Simferopol
  • Minsk
  • San Jose
  • Istanbul
  • Lucerne
  • Zürich
  • Berlin
Pic / Map
Address
70D, Gvardeysky Business Centre, Dolomanovsky Lane, Rostov-on-Don, 344011, Russia
Tel. +7 (863) 2-688-300
Office in 
Nizhny Novgorod
  • Moscow
  • Saint Petersburg
  • Ekaterinburg
  • Novosibirsk
  • Kazan
  • Rostov-on-Don
  • Nizhny Novgorod
  • Kiev
  • Odessa
  • Simferopol
  • Minsk
  • San Jose
  • Istanbul
  • Lucerne
  • Zürich
  • Berlin
Pic / Map
Address:
Lobachevsky Plaza, ulitsa Alekseevskaya, 10/16, Nizhny Novgorod, 603000
Tel. +7 (831) 233 06 06
Office in 
Kiev
  • Moscow
  • Saint Petersburg
  • Ekaterinburg
  • Novosibirsk
  • Kazan
  • Rostov-on-Don
  • Nizhny Novgorod
  • Kiev
  • Odessa
  • Simferopol
  • Minsk
  • San Jose
  • Istanbul
  • Lucerne
  • Zürich
  • Berlin
Pic / Map
Address
Suite 30, 19–21 Bohdana Khmelnytskoho Street, Kyiv, 01030 Ukraine
Reception
+38 044 586 41 48, fax. +38 044 586 41 48 ext. 6665
Marketing & Media Relations
pr@yandex-team.com.ua
For general inquiries
info@yandex-team.com.ua
Client Service Department
+38 044 586 41 48 ext. 2601
Skype
yandex.ukraine (reception)
Office in 
Odessa
  • Moscow
  • Saint Petersburg
  • Ekaterinburg
  • Novosibirsk
  • Kazan
  • Rostov-on-Don
  • Nizhny Novgorod
  • Kiev
  • Odessa
  • Simferopol
  • Minsk
  • San Jose
  • Istanbul
  • Lucerne
  • Zürich
  • Berlin
Pic / Map
Address
Polsky Uzviz 11, Morsky-2 Business Center (8th floor), Odessa 65026, Ukraine
Reception
tel./fax: +38 0487 37 44 10, +38 0445 86 41 48
Marketing & Media Relations
pr@yandex-team.com.ua
For general inquiries
info@yandex-team.com.ua
Client Service Department
+38 044 586 41 48 ext. 2601
Skype
yandex.ukraine (reception)
Office in 
Simferopol
  • Moscow
  • Saint Petersburg
  • Ekaterinburg
  • Novosibirsk
  • Kazan
  • Rostov-on-Don
  • Nizhny Novgorod
  • Kiev
  • Odessa
  • Simferopol
  • Minsk
  • San Jose
  • Istanbul
  • Lucerne
  • Zürich
  • Berlin
Pic / Map
Address
1a (4th Floor), Kazanskaya St., Simferopol
Reception
tel. +7 495 739 70 00, fax +7 495 739 70 70
Office in 
Minsk
  • Moscow
  • Saint Petersburg
  • Ekaterinburg
  • Novosibirsk
  • Kazan
  • Rostov-on-Don
  • Nizhny Novgorod
  • Kiev
  • Odessa
  • Simferopol
  • Minsk
  • San Jose
  • Istanbul
  • Lucerne
  • Zürich
  • Berlin
Pic / Map
Address
Office 308, Rubin Plaza Business Center, 5 Dzerzhinskogo prospekt, Minsk, 220036, Belarus
Reception
+375 17 328-19-61, fax. +375 17 328-15-14
Office in 
San Jose
  • Moscow
  • Saint Petersburg
  • Ekaterinburg
  • Novosibirsk
  • Kazan
  • Rostov-on-Don
  • Nizhny Novgorod
  • Kiev
  • Odessa
  • Simferopol
  • Minsk
  • San Jose
  • Istanbul
  • Lucerne
  • Zürich
  • Berlin
Pic / Map
Address
2001 Gateway place, Suite 400W, San Jose, CA, 95110
Tel. +1-617-398-7870
Office in 
Istanbul
  • Moscow
  • Saint Petersburg
  • Ekaterinburg
  • Novosibirsk
  • Kazan
  • Rostov-on-Don
  • Nizhny Novgorod
  • Kiev
  • Odessa
  • Simferopol
  • Minsk
  • San Jose
  • Istanbul
  • Lucerne
  • Zürich
  • Berlin
Pic / Map
Address
Mecidiyeköy Yolu Caddesi No: 12,
Trump Towers 2. Kule, 15. Kat, Ofis No: 1501-1502
34387 Mecidiyeköy, Şişli, İstanbul - Türkiye
Tel. +90 212 386 87 60 (pbx), fax. +90 212 284 46 48
Marketing & Media Relations
pr@yandex.com.tr
Contact Us
Office in 
Lucerne
  • Moscow
  • Saint Petersburg
  • Ekaterinburg
  • Novosibirsk
  • Kazan
  • Rostov-on-Don
  • Nizhny Novgorod
  • Kiev
  • Odessa
  • Simferopol
  • Minsk
  • San Jose
  • Istanbul
  • Lucerne
  • Zürich
  • Berlin
Pic / Map
Address:
Citybay Business Center, Werftestrasse 4, CH 6005 Lucerne, Switzerland
Tel. +41-41-248-08-60, fax. +41-41-248-08-63
Office in 
Zürich
  • Moscow
  • Saint Petersburg
  • Ekaterinburg
  • Novosibirsk
  • Kazan
  • Rostov-on-Don
  • Nizhny Novgorod
  • Kiev
  • Odessa
  • Simferopol
  • Minsk
  • San Jose
  • Istanbul
  • Lucerne
  • Zürich
  • Berlin
Pic / Map
Address:
Odeonhaus Limmatquai 2, 8001 Zürich, Switzerland
Tel. + 41 44 252 50 00
Office in 
Berlin
  • Moscow
  • Saint Petersburg
  • Ekaterinburg
  • Novosibirsk
  • Kazan
  • Rostov-on-Don
  • Nizhny Novgorod
  • Kiev
  • Odessa
  • Simferopol
  • Minsk
  • San Jose
  • Istanbul
  • Lucerne
  • Zürich
  • Berlin
Pic / Map
Address:
Karl-Liebknecht-Straße, 1, 10178 Berlin, Germany
enEn