The Unique Identification Authority of India (UIDAI) has launched its first structured Bug Bounty Programme aimed at further strengthening the security of the Aadhaar ecosystem. The initiative invites cybersecurity experts to identify potential vulnerabilities in some of UIDAI’s key digital platforms.
Under the programme, 20 experienced security researchers and ethical hackers have been selected to participate. They will examine important UIDAI digital assets including the UIDAI official website, myAadhaar portal and the Secure QR Code application for possible security weaknesses. Researchers who responsibly report genuine vulnerabilities will receive rewards based on the severity of the issues identified.
The discovered vulnerabilities will be categorized as Critical, High, Medium, or Low risk, and rewards will be provided accordingly. UIDAI is implementing the programme in partnership with ComOlho IT Private Limited, a cybersecurity solutions provider.
According to UIDAI, ensuring information security is crucial in today’s digital world. The authority already maintains multiple layers of protection, including regular security audits, vulnerability assessments, penetration testing, and continuous monitoring of its systems.
The new Bug Bounty Programme adds another layer of protection by allowing independent experts to identify hidden risks. Such initiatives are widely adopted by major technology organizations worldwide to make digital platforms safer and more resilient.



