BugHunting Campaign 2025 Highlights
Stronger Cybersecurity Through
Trusted Collaboration
In 2025, 185 organisations joined the BugHunting Campaign to identify vulnerabilities, strengthen their defences and turn security findings into practical improvements.
Co-hosted by Cyberbay, the Hong Kong Police Force’s Cyber Security and Technology Crime Bureau and the Office of the Privacy Commissioner for Personal Data, the campaign brought organisations, cybersecurity experts and government authorities together around one shared goal — building a safer and more resilient digital Hong Kong.
Three Years of Impact
More than 600 organisations working towards stronger cybersecurity
Over the past three years, organisations across nine industries have participated in the BugHunting Campaign with a shared mission: identify vulnerabilities early, address them effectively and build a culture of continuous improvement.
600+
Participating organisations over three years
3 Years
Of collaborative cybersecurity improvement
9 Industries
Represented across the campaign
Co-Hosted With
A trusted collaboration across cybersecurity and data protection
The 2025 BugHunting Campaign was co-hosted with two major Hong Kong government authorities, bringing together expertise in cybersecurity, technology crime prevention and personal data protection.
This collaboration strengthened the campaign’s credibility and alignment with Hong Kong’s cybersecurity and data protection priorities.
Hong Kong Police Force
Cyber Security and Technology Crime Bureau (CSTCB)
Office of the Privacy Commissioner
for Personal Data (PCPD)
What the Data Revealed
Three important insights from the
2025 campaign
01
145% more vulnerabilities detected than in 2024
The campaign identified substantially more vulnerabilities than the previous year, providing participating organisations with greater visibility into potential security weaknesses.
02
Access control and misconfigurations drove every critical and high-severity finding
All critical and high-severity vulnerabilities identified during the campaign were connected to access control or security misconfiguration — areas that can create significant exposure when left unresolved.
03
Organisations became more proactive after receiving their findings
Participating organisations submitted more retest requests and took further steps to verify that identified vulnerabilities had been addressed, demonstrating stronger engagement throughout the remediation process.
More Than a Technical Assessment
Building a culture of continuous security improvement
The BugHunting Campaign helps organisations turn security insights into lasting improvement. By participating, organisations demonstrate transparency, accountability and a proactive approach to managing cyber risk.
Moments from 2025
Inside the BugHunting Campaign 2025
A look at the organisations, partners, cybersecurity professionals and campaign moments that brought the 2025 programme to life.
185 organisations, one shared mission
Bringing cybersecurity leaders together
Turning findings into shared knowledge
Conversations that strengthen security
Recognising campaign participation
Sharing campaign insights with the media
BugHunting Campaign 2026
Join BugHunting Campaign 2026 to identify potential vulnerabilities, receive practical remediation guidance and strengthen your organisation’s cyber resilience.