Apple’s Security Research Device Program gives approved researchers access to a specially configured iPhone for investigating iOS security without first bypassing its protections. The device provides shell access, custom tools and entitlements, kernel customization, and access to software previews, security beta projects, and a research community. Researchers may examine iOS and iPhone components, but Apple Pay and third-party apps are excluded. Findings discovered with the device are automatically considered for Apple Security Bounty, including possible bonuses for issues found in preview or beta software.
The device is a renewable 12-month loan and remains Apple’s property. It must be used only for security research in a controlled setting, kept on the participant’s premises, and accessed only by people authorized by Apple. Vulnerabilities found or verified using it must be reported promptly to Apple and, where relevant, the third-party code owner. Applicants need a demonstrated record of finding security issues, must be of legal adult age and based in an eligible region, and cannot currently work for Apple or have done so in the previous 12 months. Places are limited; applications are open through October 30, 2026. Organizations may apply through an authorized representative and must identify everyone who will use the device.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.