In brief

• NASK is launching a platform where ethical hackers can test public online services and get paid for confirmed vulnerabilities.
• The program has a budget of 1 million zloty, with single rewards of up to 20,000 zloty.
• Covered systems include government services such as the gov.pl portal.

Bug bounty platform for public services

NASK, the Polish state research institute for cybersecurity, is launching its own platform where ethical hackers can test the security of selected public websites and information systems (NASK zapłaci za wykrycie luk w publicznych serwisach internetowych – Rzeczpospolita). Deputy Prime Minister and Minister of Digital Affairs Krzysztof Gawkowski announced the program on Tuesday. NASK has set aside 1 million zloty for the rewards (20 tys. zł za znalezienie błędu. Państwo płaci hakerom za szukanie luk – Bankier.pl).

Payouts and scope

Participants who prove a vulnerability exists receive a one-time payment. The top reward is 20,000 zloty. Money.pl reports that the program covers government systems, including the gov.pl portal (Państwo płaci za znalezienie luk. Nawet 20 tys. zł nagrody – Money.pl). Researchers may report weaknesses in public systems, not only the flagship site.

Comparison of announced figures

| Item | Value | |---|---| | Total program budget | 1,000,000 zloty | | Maximum single reward | 20,000 zloty |

Why it matters

The program puts a fixed price on finding flaws before criminals do. Public administration systems hold personal and official data, so unpatched weaknesses carry real risk. Paying for reports gives researchers a legal channel to disclose problems instead of publishing them or selling them.