BugHunting Campaign 2026

Earn the BugHunting 2026 Badge and showcase your organisation’s commitment to
cyber resilience.

Join BugHunting Campaign 2026 to get your complimentary CyberScan report, work the findings with
experts, and earn recognised proof of your commitment to protecting your business, customers and data.

Co-organised by Cyberbay, the Cyber Security and Technology Crime Bureau of the Hong
Kong Police Force, and the Office of the Privacy Commissioner for Personal Data.

September - December 2026
Free to participate
Open to all Hong Kong organisations

What your organisation gains
from participating

Gain visibility into your risks, expert support to address findings, practical learning for your team and recognition for taking action.

SEE YOUR RISKReal visibility into your exposure
  • Complimentary CyberScan AI Digital Risk Assessment Report
  • One month of unlimited access to detailed vulnerability reports
  • Security health checks and black-box testing
  • Comprehensive Bug Performance Summary Report
  • Access to a verified pool of crowdsourced cybersecurity specialists
FIX WHAT MATTERSExpert support to close the gaps
  • One month of sponsor-led consultation and remediation support
  • Support to help address identified vulnerabilities
BUILD CAPABILITYKnowledge your team keeps
  • Three AI-themed cybersecurity webinars delivered by Platinum Partners
  • PCPD-endorsed training workshop
BE RECOGNISEDProof of proactive security
  • Work towards the BugHunting Campaign 2026 Badge
  • Recognition for taking proactive steps towards stronger cybersecurity
  • Invitation to the BugHunting 2026 Award Gala

Strengthen Your Security. Earn the Recognition.

More Than a Badge — A Mark of Cyber Resilience

Demonstrate your organisation’s commitment to proactive cybersecurity, continuous improvement and building greater digital trust.

The BugHunting 2026 Badge recognises organisations that take meaningful steps to strengthen their security posture, improve cyber readiness and demonstrate a proactive approach to managing cybersecurity risks.

Your Path to the Badge

Complete the Campaign

Take part in the required security assessments, webinars, consultations and campaign activities.

Take Action on Critical Risks

Resolve 100% of identified critical and high-risk vulnerabilities.

Demonstrate Cyber Resilience

Show that your organisation is actively strengthening its security and building greater digital trust.

BugHunting Campaign 2026 badge

Campaign Timeline

Campaign period: September - December

Discover Your Risks

Register for BugHunting Campaign 2026 and receive your CyberScan AI Digital Report to uncover potential external security exposures.

Build Your Cyber Knowledge

Equip your team with practical knowledge through AI-focused cybersecurity webinars and dedicated PCPD training sessions.

Turn Insights Into Action

Work with cybersecurity experts to address identified vulnerabilities, strengthen your defences and improve your overall security posture.

Get Recognised

Complete the campaign requirements and earn the BugHunting 2026 Badge — recognising your organisation’s commitment to cybersecurity and digital resilience.

Campaign period: September - December
Oct 2026

Discover Your Risks

Register for BugHunting Campaign 2026 and receive your CyberScan AI Digital Report to uncover potential external security exposures.

Nov 2026

Build Your Cyber Knowledge

Equip your team with practical knowledge through AI-focused cybersecurity webinars and dedicated PCPD training sessions.

Dec 2026

Turn Insights Into Action

Work with cybersecurity experts to address identified vulnerabilities, strengthen your defences and improve your overall security posture.

Feb 2027

Get Recognised

Complete the campaign requirements and earn the BugHunting 2026 Badge — recognising your organisation’s commitment to cybersecurity and digital resilience.

Build your presence across Hong Kong’s cybersecurity ecosystem

Gain recognition, strengthen your visibility and build relationships with organisations and cybersecurity leaders across Hong Kong.

Build trust and credibility

Demonstrate your commitment to cybersecurity through official BugHunting 2026 partner recognition.

Gain industry recognition

Strengthen your brand visibility through campaign promotion, media exposure and event presence.

Connect with the ecosystem

Build relationships with cybersecurity leaders, participating enterprises, cybersecurity professionals and other campaign partners.

Create business opportunities

Showcase your expertise, engage relevant organisations and create opportunities for future collaboration and client relationships.

Proudly Co-organised By

Cyberbay
Hong Kong Police ForceCyber Security and Technology Crime Bureau

Bringing together cybersecurity expertise, public-sector leadership and Hong Kong organisations with one shared goal:

Building a safer and more resilient digital ecosystem for Hong Kong.

Strategic Partner:

Office of the Privacy Commissioner for Personal Data, Hong Kong
Nyxlab

FAQ

Questions, answered

Yes. Eligible organisations can participate at no cost. This includes the CyberScan AI report, webinars, consultation support and security testing by vetted researchers who look for vulnerabilities in your approved systems and receive rewards for valid findings.

The campaign is open to any company registered or operating in Hong Kong, including SMEs, large enterprises and non-profit organisations across all industries.

Your assessment results will be treated as confidential and accessible only to your organisation and Cyberbay's authorised security team.

Getting started is simple: you only need to provide the domain you would like us to assess and authorise the testing. We will then conduct external security testing within the agreed scope—no internal system access is required.

Very little. Simply share the domain you would like us to assess and attend the campaign webinars. Once your report is ready, our professional team will review the findings with you during a consultation session and provide practical guidance on the next steps. To qualify for the Badge, your organisation will also need to resolve all identified critical and high-risk vulnerabilities.

The Badge requires full remediation of all critical and high-risk findings. If these vulnerabilities are not fully resolved, your organisation will not receive the Badge. However, you will still retain access to your reports, expert guidance and consultation support.

Testing is conducted by a verified pool of vetted security researchers operating under Cyberbay's code of conduct. Researchers connect through the secure Lighthouse VPN, allowing their testing activities to be monitored throughout the assessment.

Yes. Please apply through the Bug Hunters link.

Ready to Earn Your BugHunting 2026 Badge?

Demonstrate your organisation’s commitment to cybersecurity and build greater trust with customers, partners and stakeholders.

Get your complimentary CyberScan report, access expert guidance, and take practical steps towards stronger protection.

Join BugHunting Campaign 2026