Amazon announced an invitation-only bug bounty program for selected AI models and applications, including its Nova models, on November 11, 2025. If you are not invited to that private program, Amazon said you can report potential security issues in its AI applications through the public bug bounty by selecting “Gen AI Apps” under .amazon.
What Amazon’s AI bug bounty covers
Amazon described the private program as a way for security researchers and academic teams to test selected AI models and applications. Its announcement named three areas of interest:
- Prompt injection and jailbreaks when they have a security impact—not simply undesirable or unexpected model responses.
- Model vulnerabilities with potential for real-world exploitation.
- Ways a model might unintentionally assist harmful activity, including cybersecurity issues and chemical, biological, radiological, or nuclear (CBRN) scenarios.
Amazon included its Nova foundation models among the selected targets but did not publish a complete target list or detailed technical rules in the announcement. Read the Amazon announcement for its stated program focus.
Can you join the private program?
The private track was invitation-only. Amazon said it began with a live event at its Austin office in November 2025, bringing together university teams from the Amazon Nova AI Challenge and professional security researchers. The company said it planned to invite more security researchers and selected academic teams into a continuous private program in early 2026.
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
- Your favorite music and content – Play music, audiobooks, and podcasts from Amazon Music, Apple Music, Spotify and others or via Bluetooth throughout your home.
- Alexa is happy to help – Ask Alexa for weather updates and to set hands-free timers, get answers to your questions and even hear jokes. Need a few extra minutes in the morning? Just tap your Echo Dot to snooze your alarm.
- Keep your home comfortable – Control compatible smart home devices with your voice and routines triggered by built-in motion or indoor temperature sensors. Create routines to automatically turn on lights when you walk into a room, or start a fan if the inside temperature goes above your comfort zone.
- Do more with device pairing – Fill your home with music using compatible Echo devices in different rooms, or create a home theatre system with Fire TV.
- Say goodbye to drop-offs and buffering - With eero Built-in, Echo Dot doubles as a mesh wifi extender, adding up to 1,000 sq. ft. of wifi coverage to your existing eero network.
That announcement does not confirm whether invitations are currently being issued, and it provides no public application process. Its $200–$25,000 award range was stated for eligible participants in the private program; Amazon did not explain how individual findings map to particular amounts.
How to report an Amazon AI security issue
If you are outside the invitation-only program, Amazon’s announced route for potential security issues in its AI applications is its public bug bounty:
Rank #2
- Your favorite music and content – Play music, audiobooks, and podcasts from Amazon Music, Apple Music, Spotify and others or via Bluetooth throughout your home.
- Alexa is happy to help – Ask Alexa for weather updates and to set hands-free timers, get answers to your questions and even hear jokes. Need a few extra minutes in the morning? Just tap your Echo Dot to snooze your alarm.
- Keep your home comfortable – Control compatible smart home devices with your voice and routines triggered by built-in motion or indoor temperature sensors. Create routines to automatically turn on lights when you walk into a room, or start a fan if the inside temperature goes above your comfort zone.
- Do more with device pairing – Fill your home with music using compatible Echo devices in different rooms, or create a home theatre system with Fire TV.
- Say goodbye to drop-offs and buffering - With eero Built-in, Echo Dot doubles as a mesh wifi extender, adding up to 1,000 sq. ft. of wifi coverage to your existing eero network.
- Open Amazon’s public vulnerability reporting program on HackerOne.
- Choose “Gen AI Apps” under .amazon when submitting a report about a potential security issue in an Amazon AI application.
- Check the live program policy before testing or submitting. Scope, eligibility, and reward terms can depend on the current policy.
Amazon’s announcement directs outsiders to the public route, but it does not set out that program’s current payout terms or full technical scope. Stanford’s 2025 transparency report describes the public VRP as covering urgent security vulnerabilities in generative AI models and applications hosted on Bedrock or nova.amazon.com; consult the live policy for current rules. The Stanford Center for Research on Foundation Models’ 2025 transparency report provides that secondary context.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What Amazon says the program has found
Amazon reported that its public program had produced more than 30 validated findings and more than $55,000 in rewards as of its November 11, 2025 announcement. These are company-reported totals, not independently audited figures here; they describe the public program, not the private AI program’s results.
Rank #3
- MEET ECHO SPOT - A sleek smart alarm clock with Alexa and big vibrant sound. Ready to help you wake up, wind down, and so much more.
- CUSTOMIZABLE SMART CLOCK - See time, weather, and song titles at a glance, control smart home devices, and more. Personalize your display with your favorite clock face and fun colors.
- BIG VIBRANT SOUND - Enjoy rich sound with clear vocals and deep bass. Just ask Alexa to play music, podcasts, and audiobooks. See song titles and touch to control your music.
- EASE INTO THE DAY - Set up an Alexa routine that gently wakes you with music and gradual light. Glance at the time, check reminders, or ask Alexa for weather updates.
- KEEP YOUR HOME COMFORTABLE - Control compatible smart home devices. Just ask Alexa to turn on lights or touch the screen to dim. Create routines that use motion detection to turn down the thermostat as you head out or open the blinds when you walk into a room.
Amazon executives framed external testing as part of improving security. Rohit Prasad, SVP of Artificial General Intelligence at Amazon, said, “We believe the best way to make our models stronger and more secure is to partner with the broader community,” and, “By opening up Nova to external testing, we’re reinforcing our commitment to safety, transparency, and continuous improvement.” Hudson Thrift, CISO of Amazon Stores, said, “Security researchers are the ultimate real-world validators that our AI models and applications are holding up under creative scrutiny.”
Quick Recap
Best Value
- Alexa can show you more - Echo Show 5 includes a 5.5” display so you can see news and weather at a glance, make video calls, view compatible cameras, stream music and shows, and more.
- Small size, bigger sound – Stream your favorite music, shows, podcasts, and more from providers like Amazon Music, Spotify, and Prime Video—now with deeper bass and clearer vocals. Includes a 5.5" display so you can view shows, song titles, and more at a glance.
- Keep your home comfortable – Control compatible smart devices like lights and thermostats, even while you're away.
- See more with the built-in camera – Check in on your family, pets, and more using the built-in camera. Drop in on your home when you're out or view the front door from your Echo Show 5 with compatible video doorbells.
- See your photos on display – When not in use, set the background to a rotating slideshow of your favorite photos. Invite family and friends to share photos to your Echo Show. Prime members also get unlimited cloud photo storage.
Rank #4
- Your favorite music and content – Play music, audiobooks, and podcasts from Amazon Music, Apple Music, Spotify and others or via Bluetooth throughout your home.
- Alexa is happy to help – Ask Alexa for weather updates and to set hands-free timers, get answers to your questions and even hear jokes. Need a few extra minutes in the morning? Just tap your Echo Dot to snooze your alarm.
- Keep your home comfortable – Control compatible smart home devices with your voice and routines triggered by built-in motion or indoor temperature sensors. Create routines to automatically turn on lights when you walk into a room, or start a fan if the inside temperature goes above your comfort zone.
- Do more with device pairing – Fill your home with music using compatible Echo devices in different rooms, or create a home theatre system with Fire TV.
- Say goodbye to drop-offs and buffering - With eero Built-in, Echo Dot doubles as a mesh wifi extender, adding up to 1,000 sq. ft. of wifi coverage to your existing eero network.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
