The winter cohort starts January 11, 2027. Applications close December 18, and the class size is 6 students.
Applying is free, takes about five minutes and doesn't create an account. A parent can apply for their kid, or the student can apply for themselves with a parent or guardian's name and email. Either way the parent gets a copy of every email about it. There's one hard rule: the student has to be 14 to 17 on January 11, 2027.
What the eight weeks look like
Week 0 is self-paced. It covers ethics and how bug bounties work, and it ends with your kid's first bug report and an ethics agreement they sign with you. Weeks 1 through 7 each have one 90-minute live session (Tuesdays, 7 to 8:30 PM Eastern), a lab and a write-up. Recordings cover a missed session. No coding required, and I mean that: every bug in the course gets found with clicks and explained in plain English.
What happens after you apply
I read every application myself and reply within 5 business days. If it looks like a fit, I set up a short call with you and your kid. It's mostly me asking what they're curious about and them asking me whatever they want.
If they're accepted, I set up the accounts and send you an invoice. [FACT: payment method] It's $349, once, in US dollars. Nothing is charged when you apply, and there's a full refund any time during the first four weeks (through [FACT: refund deadline]). I'll ask why, but the answer doesn't change whether you get it.
If $349 is a problem, tell me on the call or email hello@bugclubhq.com. It has no effect on whether your kid is accepted.
Why it's so small
I read every write-up closely and send back feedback on each one, and that stops working somewhere past 6 students. If the cohort fills up, accepted applicants are first in line for the next one.
Questions first? The FAQ covers most of them, and hello@bugclubhq.com covers the rest. When you're ready, apply here.
