Zoom’s Bug Bounty Program incentivizes the discovery and responsible disclosure of security vulnerabilities. Here's a look at the past year's highlights.

At Zoom, security isn’t just a feature — it’s foundational to everything we build. We’re excited to share the remarkable progress we’ve made through our bug bounty initiatives in partnership with HackerOne. This year represented our strongest commitment yet to crowdsourced security, engaging with nearly 1000 talented researchers worldwide to make our products more secure for millions of people.

Our multi-layered security approach

This year, we continued our strategic approach of running multiple complementary programs:

• Public “VDP” Bug Bounty Program: our front door for the global security researcher community
• Private Program: working closely with select researchers on sensitive features
• Zoom VIP: collaborating with elite researchers on our most critical systems
• Specialized challenges: targeted security initiatives for emerging products

“Our multi-tiered approach lets us match the right security talent with the right testing environments,” explained Sandra McLeod, interim Chief Information Security Officer at Zoom. “This strategy delivered exceptional results throughout 2024.”

By the numbers: A year of security wins

Our bug bounty programs saw impressive engagement this year, with hundreds of unique vulnerabilities identified and addressed. Zoom’s engineering team’s efforts have resulted in a significant reduction in the average time-to-fix compared to previous years. Average time to resolution improved by over 90% from February 2024 to January 2025, and researcher participation doubled during the same period. According to HackerOne, the Zoom Bug Bounty program is among the top 10 with regard to bounty payouts across their entire platform. The statistics tell a compelling story: our security team resolved critical issues before they could be exploited, protecting our users while rewarding the talented researchers who help safeguard our platform.

Notable security improvements

Several standout vulnerabilities discovered through our programs led to key security improvements, including:

• Enhanced authentication mechanisms across multiple services
• Hardened API endpoints against emerging exploitation techniques
• Strengthened data access controls in our cloud infrastructure
• Refined permission systems in our collaboration tools

Each vulnerability addressed represents not just a patch, but a learning opportunity that has made our entire development process more secure.

Celebrating our security researchers

Behind every vulnerability report is a dedicated security researcher who chose to work with us to make Zoom more secure. We’re immensely grateful to this community and proud to highlight some exceptional contributors:

• Several researchers achieved “elite” status in our program this year
• Our top contributor identified 12 significant vulnerabilities
• We welcomed hundreds of first-time reporters to our program

“The relationship between Zoom and the security research community has never been stronger,” noted our Bug Bounty program manager Clara Andress. “The collaborative atmosphere has fostered mutual respect and produced outstanding security outcomes.”

Looking ahead: Security in 2025

As we enter the new year, we’re excited to announce several enhancements to our bug bounty initiatives:

• Expanded scope to include our newest product offerings
• Increased bounty amounts across all severity levels
• Faster triage process through enhanced automation
• More specialized challenge events focused on emerging technologies

Our commitment remains unwavering: to build the most secure communications platform possible through open collaboration with the security community.

Join us on our security journey

Whether you’re an experienced vulnerability researcher or just starting your security journey, we invite you to participate in our bug bounty programs. Together, we can continue building a more secure digital world. Submit your ‘@wearehackerone.com’ email address to bugbounty@zoom.us to join the team.

To learn more about Zoom privacy and security, visit our Trust Center. Found a bug? Submit a vulnerability issue here.

***Original article published in the Zoom Blog.

Get ready to explore, connect, and supercharge your Zoom experience! We’ve lined up a powerhouse series of events this month — all designed to boost your productivity, sharpen your skills, and keep you ahead of the game. Whether you're diving into new features or getting one-on-one time with Zoom experts, May is packed with opportunities you won't want to miss.

Here’s what’s coming up:

📅 May 7: Zoom Workplace (Meetings + Productivity) Open Office
Ready to transform your everyday meetings into powerful, productive sessions? Join us to discover insider tips, pro workflows, and new ways to get more from Zoom Workplace!

📅 May 8: What’s New at Zoom? (April Releases)
Be the first to explore Zoom’s newest features and enhancements! We’ll break down what’s fresh, what’s improved, and how it all makes your workday smoother and smarter.

📅 May 14: Zoom Phone Open Office
Take your Zoom Phone game to the next level! From smarter call handling to streamlined workflows, our experts will show you how to make every conversation count.

📅 May 21: Zoom AI Companion Open Office
Curious about AI at Zoom? See how our AI Companion can simplify your day, boost your efficiency, and help you work smarter — not harder. Bring your questions and get live answers!

📅 May 28: Zoom Contact Center Open Office
Deliver standout customer experiences with Zoom Contact Center! We’ll walk you through best practices, powerful features, and smart strategies to engage and support your customers like never before.

Don’t miss your chance to learn, grow, and lead with Zoom this May. We can’t wait to see you there!

 

Zoom Workplace for Frontline is a mobile-first solution tailored for industries like retail, healthcare, and manufacturing, where frontline workers need efficient on-shift communication and task management tools. Key features include auto-generated shift-based chat groups, real-time activity feeds, shift swapping, and task tracking—all accessible via the mobile app. The integration of AI Companion provides automated shift summaries and smart search capabilities, streamlining daily operations.

A standout feature is the push-to-talk (PTT) functionality, which enables instant voice communication at the press of a button. This feature, reminiscent of traditional walkie-talkies, allows employees to connect seamlessly without the need for additional hardware. It's especially beneficial in environments where quick, hands-free communication is essential.

For managing tasks and tracking progress, Zoom Workplace for Frontline offers robust tools. Another feature is the Activity Center which provides a centralized location to view and manage tasks, ensuring that frontline workers can stay organized and focused on their responsibilities.

Additionally, another feature called scheduling tracking fields for shift management which supports shift swapping, allowing employees to request and manage shift changes directly from their mobile devices. This feature enhances flexibility and ensures adequate staffing levels.

These innovations reflect Zoom's commitment to providing versatile solutions that cater to both frontline workers and knowledge-based teams, aiming to improve connectivity, efficiency, and overall workplace productivity.

Related Articles:

Zoom Communications Launches Zoom Workplace for Frontline to Enhance Mobile Connectivity and Efficiency for Frontline Workers

Zoom Workplace for Frontline now available to improve on-shift communications and work management for frontline workers

El Panel de Control para Administradores y Propietarios lleva años disponible para cuentas con licencias Business o superior.

Hoy les traigo una vista rápida de su nuevo diseño y la información que podemos extraer gracias a esta herramienta. Con la nueva página de inicio del Panel de Control tendremos acceso a novedades de Zoom así como un vistazo rápido al uso que le están dando los usuarios de nuestra cuenta a sus licencias y herramientas. Y por supuesto, todo esto conservando las funciones presentes en la versión anterior del Panel de Control (monitorización en vivo del sistema/producto, acceso a datos históricos, etc).

Echémosle un vistazo al siguiente video demostrativo creado con Zoom Clips:

IMPORTANTE: es posible que la nueva versión del Panel de Control aún no esté disponible en su región pero llegará muy pronto.

Espero que este post les haya resultado útil. No duden en dejar comentarios sobre funciones y herramientas que quieren que comentemos en el futuro.

¡Hasta la próxima!

Did you know that aside from the regular schedule booking on Zoom Scheduler, it also has a poll feature where you can gather availability information from participants for a new meeting? Yes, you read it right! Zoom Scheduler has the Availability Poll feature which is designed to simplify the process of finding a suitable meeting time that works for everyone on your invite list.

Zoom Scheduler’s Availability Poll can help you eliminate the back-and-forth emails typically involved in scheduling meetings as it can find your meeting participant’s available time, and provide you a visual representation of their preferred date and time, making it easier for you as the host, to find a common ground for your meetings and also gives people on your invite list a voice in scheduling.

So how does this work?

1. Create an Availability Poll: On the Zoom Scheduler, click on “Create Schedules”, and choose "Availability Poll".

2. Set Meeting Details: Fill in details like meeting topic, duration, and hosts. Then, on the calendar, select multiple date and time windows or specific times you're available.

3. Share the Poll: Once details are set, you can click on the “Publish” button, and share the link to your invitees. You do have the option to allow poll participants to see each other’s names and votes.

4. Attendees Vote: Attendees then receives a link to the poll and can select their available time slots from the options provided. They can also select multiple date and time that they're available.

5. Availability Poll Results Overview: You'll see a clear overview of everyone's availability through email. Based on the results, you can then choose the time that works best for the most attendees and proceed in scheduling the meeting.

Availability Poll is best used on all meetings where you’d need to find a common time, but the below are additional scenarios where you can use Availability Poll.

Internal / External Meetings:  If you want to find a new time slot for a meeting that better accommodates everyone's schedules, you can send a Scheduler Poll with various time options across different days to check your team’s preferences.  

Sales Calls / Demo Calls: If you are a sales specialist, you can schedule a call for a group of potential customers and use Scheduler Poll with various time slots to accommodate the schedules of multiple attendees, allowing the your customers to choose a convenient time within their busy schedule to ensure a high attendance rate.  

Webinar for a Big Team:  If you need to conduct a webinar for a big team, you can send a Scheduler Poll to check their availability across different time zones and choose a time that maximizes majority's participation.  

Team Building / Team Activity:  If you are a planning a meetup or an activity for your team members, you can use a Scheduler Poll to identify a time slot that accommodates the schedules of your team members.  

With Availability Poll, you can say goodbye to scheduling frustration. Just send a simple poll with your available date and time, and identify the sweet spot that works best for you and your attendees so you can maximize attendance and participation, and also minimize schedule conflicts.

Hello!  I was promised a BAA sent over as soon as I paid for the phone service. I paid for the phone service and my sales rep ghosted me - no emails or anything from the MOMENT I purchased the plan.  I have sent him 7 emails over the last week.  I am disappointed and frustrated - I would never have selected this service if I had known he would disappear as soon as I paid. Can someone please help me? He said that I didn't have to make any additional purchases, and that he would send me a BAA over right away as soon as I put my credit card in.