UIDAI Unveils Bug Bounty Initiative to Enhance Aadhaar Security
Synopsis
In a bold move to reinforce Aadhaar security, UIDAI has launched a Bug Bounty Programme, inviting cybersecurity experts to identify vulnerabilities. This initiative emphasizes ongoing commitment to safeguarding digital platforms for residents.
Key Takeaways
Bug Bounty Programme launched to enhance Aadhaar security.
Independent cybersecurity experts invited to identify vulnerabilities.
20 experienced researchers selected for assessments.
Rewards based on vulnerability severity.
Collaboration with a cybersecurity solutions provider.
New Delhi, March 11 (NationPress) The Unique Identification Authority of India has officially introduced its structured Bug Bounty Programme on Wednesday, aiming to enhance the security of the Aadhaar system. This initiative invites independent cybersecurity professionals to discover vulnerabilities across various digital platforms.
A dedicated team of 20 skilled security researchers and ethical hackers has been appointed to investigate potential weaknesses in several of UIDAI’s crucial digital platforms, as per an official announcement.
The researchers will assess UIDAI's digital assets, including the UIDAI official website, myAadhaar portal, and the Secure QR Code application.
These experts will evaluate these systems for vulnerabilities categorized into Critical, High, Medium, and Low risk levels. They will be rewarded based on the severity of the issues identified, according to a statement from the Ministry of Electronics & IT.
The ministry further mentioned that this programme is being executed in collaboration with M/s ComOlho IT Private Limited, a recognized cybersecurity solutions provider.
This new Bug Bounty Programme exemplifies UIDAI's ongoing commitment to fortifying its platforms, ensuring they remain safe for both residents and stakeholders, as highlighted in the statement.
Such initiatives are prevalent globally among leading technology platforms, aiming to enhance the safety and future readiness of digital systems.
UIDAI emphasizes that information security is paramount in today’s digital landscape, and it is continuously working towards improving its digital assets with the public's best interests at heart.
The authority has already implemented multiple security measures, including regular security audits, vulnerability assessments, penetration testing, and ongoing monitoring.
Recently, UIDAI announced its initiative to cover over 1.03 lakh schools nationwide, facilitating mandatory biometric updates (MBU) for students under the Aadhaar framework. This has enabled nearly 1.2 crore children to complete their biometric updates within school premises.
The mission-mode drive commenced in September 2025, following integration with the Unified District Information System for Education Plus (UDISE+) platform of the Department of School Education & Literacy.
Point of View
I see UIDAI's Bug Bounty Programme as a significant step forward in ensuring the security of sensitive digital information. In a rapidly evolving technological landscape, such proactive measures are essential for maintaining public trust and safeguarding personal data.
NationPress
1 Jul 2026
Frequently Asked Questions
What is the purpose of UIDAI's Bug Bounty Programme?
The Bug Bounty Programme aims to enhance the security of the Aadhaar system by inviting independent cybersecurity experts to identify vulnerabilities in its digital platforms.
Who is involved in the Bug Bounty Programme?
A panel of 20 experienced security researchers and ethical hackers has been selected to look for weaknesses in UIDAI's key digital platforms.
How will researchers be rewarded?
Researchers will receive rewards based on the severity of the vulnerabilities they identify, classified as Critical, High, Medium, or Low risk.
What digital assets will be assessed?
The assessment will cover the UIDAI official website, myAadhaar portal, and the Secure QR Code application.
What other security measures does UIDAI employ?
UIDAI uses several layers of protection, including regular security audits, vulnerability assessments, penetration testing, and continuous monitoring.
