Rewards for qualifying submissions range from $500 to $100,000. To be eligible for a bounty, submissions must identify an original and previously unreported flaw that allows for the takeover of a Microsoft account or Azure Active Directory account.
Source Link
