Butian
A third-party vulnerability aggregation platform under Qi An Xin, providing vulnerability submission and reward services for white-hat security researchers. It consolidates vulnerability collection requirements from multiple enterprise Security Response Centers (SRCs).
Core Facts
Common SRC platforms include Alibaba Cloud Xianzhī, Tencent Security Response Center, and Vulbox.
Major domestic SRCs include self-built platforms by large companies such as Alibaba, Tencent, and ByteDance, as well as third-party aggregation platforms such as CNVD (China National Vulnerability Database) and Butian.
Representative domestic SRC platforms include Butian (operated by QiAnXin) and Vulbox, while internationally there are HackerOne and Bugcrowd.
Timeline (last 90 days)
The reward range for a single vulnerability on the Butian platform varies from 10 yuan to 6,000 yuan, and a library coin exchange mechanism is provided for redeeming goods in the mall.
Third-party aggregation platforms such as Butian, Vulnerability Box, and HackerOne uniformly manage white-hat identity verification, vulnerability acceptance standards, and bounty disbursement processes, with HackerOne targeting overseas vendors.
Common SRC platforms include Alibaba Cloud Xianzhī, Tencent Security Response Center, and Vulbox.
Major domestic SRCs include self-built platforms by large companies such as Alibaba, Tencent, and ByteDance, as well as third-party aggregation platforms such as CNVD (China National Vulnerability Database) and Butian.
Butian and Vulnerability Box are SRC vulnerability submission platforms in China.
SRC has built a closed loop of discovering vulnerabilities, reporting vulnerabilities, and fixing vulnerabilities, while also providing white-hat hackers with a legal channel for monetization.
Representative domestic SRC platforms include Butian (operated by QiAnXin) and Vulbox, while internationally there are HackerOne and Bugcrowd.
补天、漏洞盒子是第三方漏洞聚合平台
All Facts (7)
Common SRC platforms include Alibaba Cloud Xianzhī, Tencent Security Response Center, and Vulbox.
65%VerifiedMajor domestic SRCs include self-built platforms by large companies such as Alibaba, Tencent, and ByteDance, as well as third-party aggregation platforms such as CNVD (China National Vulnerability Database) and Butian.
65%VerifiedRepresentative domestic SRC platforms include Butian (operated by QiAnXin) and Vulbox, while internationally there are HackerOne and Bugcrowd.
65%UnverifiedThird-party aggregation platforms such as Butian, Vulnerability Box, and HackerOne uniformly manage white-hat identity verification, vulnerability acceptance standards, and bounty disbursement processes, with HackerOne targeting overseas vendors.
50%UnverifiedButian and Vulnerability Box are SRC vulnerability submission platforms in China.
50%UnverifiedSRC has built a closed loop of discovering vulnerabilities, reporting vulnerabilities, and fixing vulnerabilities, while also providing white-hat hackers with a legal channel for monetization.
50%Unverified补天、漏洞盒子是第三方漏洞聚合平台
50%