[an4rchy]

Does anyone know if these types of bug bounties are negotiable?

As several people have mentioned, hackers can sell to the highest bidder and having proof that you have an exploit is probably sufficient, but what if Apple was willing to pay as much as the highest bidder?

This may also likely convince people who have sold bugs to reach out to Apple.

It probably costs them a fraction of the PR spend or risk of data breach/user exposure etc.

[jimmyjohndoe]

The press release specifies that the $1000000 quoted figures are minimum payments for the given category of bug, so the actual amount paid could be anywhere upwards from that.