TrendAI Zero Day Initiative

Zero Day Initiative (ZDI) is the world's largest vendor-agnostic bug bounty program, created with the goal of encouraging the responsible reporting of 0-day vulnerabilities. ZDI aims to protect Trend Micro customers from harm by financially rewarding skilled researchers who discover vulnerabilities and privately report them to affected vendors. Unlike other programs, ZDI does not disclose any technical details about the vulnerabilities until the vendor releases a patch.

Additionally, ZDI does not resell or redistribute the vulnerabilities acquired through their program. Researchers who submit vulnerabilities through ZDI are relieved from the burden of tracking the bug with the vendor. The acquired vulnerabilities are disclosed to vendors in accordance with ZDI's disclosure policy, ensuring a professional and standard set of guidelines throughout the disclosure process.

Once a patch is ready, ZDI works collaboratively with the vendor to publicly disclose the vulnerability and provides full credit to the researcher. Trend Micro customers are protected in advance, although they are provided with a generic description of the filter, not the vulnerability itself. ZDI's mission is to amplify the effectiveness of their team by creating a virtual community of skilled researchers and incentivize the responsible reporting of zero-day vulnerabilities