Disclaimer: Bug bounty programs change frequently. Always read the latest rules on the official ByteDance Security Response Center before submitting. This article is for informational purposes only and does not constitute legal or hacking advice.
As of my latest updates (April 2026), CapCut (owned by ByteDance, the parent company of TikTok) does operate a standalone, public bug bounty program under the name "CapCut Security Researcher Program." capcut bug bounty program