VulBox (漏洞盒子)

VulBox is a Chinese crowdsourced security testing platform that connects organizations with a community of independent security researchers, referred to as "white hat" hackers, to identify vulnerabilities in their digital assets. The platform operates a bug bounty and vulnerability disclosure model, hosting projects where companies can list assets for testing and reward researchers based on the severity and validity of the vulnerabilities they find. The platform includes a project hall listing active bug bounty programs, a rapid testing section for time-limited assessments, and an enterprise Security Response Center (SRC) offering that allows organizations to run their own branded vulnerability disclosure and bounty programs. VulBox also maintains a ranking system that scores and ranks participating researchers by season, based on points earned from validated submissions, and features a FAQ section and technical knowledge sharing content for the researcher community. VulBox works with corporate clients across various industries who need external validation of application and network security, and with individual security researchers seeking bounty-based work. The service model combines a self-service platform for smaller engagements with dedicated enterprise SRC programs for larger organizations, along with partner integrations referenced on the site. The company appears to operate primarily within the Chinese-language market, as reflected by the site's language and regional partner references.