As of now, does not have a widely public, standalone bug bounty program on platforms like HackerOne or Bugcrowd. However, ByteDance (parent company) has a ByteDance Security Response Center (SRC) that covers TikTok, CapCut, and other products.

Many "bugs" are actually performance bottlenecks related to hardware encoding .