Microsoft MSRC Replaces Bug Bounty Report Quality Tiers With 'Complete' and 'Not Complete' Assessments Affecting Rewards
Microsoft Security Response Center (MSRC) announced on October 20, 2026 that it is replacing the multiple report quality levels in its bug bounty programs with two assessments: "Complete" and "Not Complete". The rules apply to reports submitted on or after October 20, 2026, 8 AM Pacific Time. Earlier submissions remain under the previous …