Welcome to the Cyber Armory WAPT & Bug Bounty Internship Program.
Applications are now open for our six-month remote training and internship program.
Before applying, please read the following information carefully.
IMPORTANT: PLEASE READ
This is a structured training program that participants enrol in and pay for. It is NOT a job vacancy.
Participants are not being hired as employees. There is no salary, and employment placement with an external company is not guaranteed.
PROGRAM FEE: £59 for the complete six-month program.
PROGRAM STRUCTURE
PHASE 1 – FOUNDATIONS (WEEKS 1–10)
A structured learning path covering core web application security concepts.
Participants will complete: guided practical labs, weekly quizzes, technical write-ups, and structured learning assignments.
PHASE 2 – BUG BOUNTY HUNTING (WEEKS 11–24)
Participants transition into practical bug bounty hunting. Includes: video courses (How to Approach a Target, Mastering P4 Vulnerabilities, Broken Access Control), practical hunting on VDPs or paid programs, weekly live Q&A, community chat, and report reviews.
ELIGIBILITY REQUIREMENTS
Applicants must:
1. Be a final-year student OR have more than six months remaining until graduation.
2. Be able to dedicate at least 20 hours per week.
3. Have basic knowledge of how the web works.
SUPPORT GUARANTEE
Participants choosing VDPs who actively hunt and complete the program requirements but do not find a valid vulnerability by the end of month six will receive continued support free of charge until they find one.
WHAT YOU CAN EXPECT
You will gain practical bug bounty experience, technical reports for your portfolio, and the opportunity to demonstrate real-world security research experience on your CV.
PROGRAM DATES
Start date: 23 November 2026.
Registration deadline: 29 November 2026. Limited seats available.
The continued-support guarantee applies only to participants choosing VDPs.