At Trend Micro, we believe we can make the digital world safer by proactively discovering threats and vulnerabilities that others haven’t yet seen. That’s why, every year, we invest millions of dollars in the Trend Zero Day Initiative™ (ZDI)—the world’s largest vendor-agnostic bug bounty program. Through Trend ZDI, we proactively research and acquire software vulnerabilities discovered by researchers around the globe and engage in coordinated disclosure with our partners and software vendors.
We take this mission to the public through our flagship hacking competition: Pwn2Own. This high-stakes event brings together elite researchers, top-tier vendors, and Trend’s own security experts to uncover critical vulnerabilities in widely used software and hardware.
This time, we’re breaking new ground. At Pwn2Own Berlin 2025, we’re putting AI infrastructure in scope for the first time.
Here’s why that matters:
1. AI is becoming infrastructure, and it needs to be secured as such.
AI is no longer just an experimental toolset. It’s now integrated into products, cloud pipelines, and enterprise decision-making. But with rapid adoption comes risk. Our investment in identifying vulnerabilities in AI infrastructure is about more than finding bugs. It’s about proactively safeguarding the future of computing.
2. The unknown is real, and we’re hunting it.
Because this is our first bounty category focused on AI infrastructure, we fully expect new and possibly significant vulnerabilities to surface. That’s the point. Our goal is to offer and financially compensate researchers to coordinate their findings with vendors to expose this before bad actors take advantage.
3. Collaboration is the future of security.
Pwn2Own isn’t just about breaking things; it’s about building a better cybersecurity landscape. By bringing researchers and vendors together in a coordinated, public forum, we accelerate the path from vulnerability discovery to patch, ensuring rapid protection.
4. We can’t do it alone: partners are essential.
Security is a team sport. We’re proud to work with technology partners, software developers, and the research community to shine a light on emerging threats. Together, we’re faster, smarter, and more resilient.
We’re excited to see what’s uncovered in Berlin. Because when the unknown becomes known, we all become more secure.