post 2026-05-13

First Bounty Awarded

FARPSEC receives its first paid vulnerability bounty through coordinated disclosure on HackerOne. Details after remediation.

Maliq Barnard Founder

FARPSEC just got paid for its first vulnerability report.
The bug turned up during a deep audit of a macOS security product. I reported it through the vendor's bug bounty program on HackerOne, and it was triaged a couple of days later.

<h2>What I can say so far</h2>
<ul>
<li>Platform: HackerOne</li>
<li>Severity: High</li>
<li>Status: Triaged, fix in progress</li>
<li>Bounty: Paid</li>
</ul>

That's about all I can share right now. The full writeup, covering what the bug is, the root cause, and how the proof of concept works, goes up here once the vendor ships a fix and the report is opened to the public under HackerOne's coordinated disclosure policy.

<h2>Why this one matters to me</h2>
It's the first paid result out of the FARPSEC research pipeline, which is a good sign the approach holds up. There are more findings from the same audit already queued for submission, and I'll update this post as the disclosure process moves along.

This is a placeholder. It gets replaced with the full article once coordinated disclosure is done.

Analyst: Maliq Barnard Date: 13 MAY 2026

bounty hackerone macos disclosure