Apple opens 2026 applications for Security Research Device iPhones

Applications open for Apple's researcher iPhone program

Apple is now accepting applications for its Security Research Device (SRD) Program, an annual initiative that loans modified iPhones to security researchers so they can study iOS without first having to break through the platform's defenses. According to Apple's security research site, which surfaced on the front page of Hacker News, this year's application window closes on October 30, 2026.

A purpose-built iPhone for research

Apple frames the program as a response to a practical problem: iOS is locked down tightly enough that even skilled security researchers can struggle to get a foothold. The SRD is the company's answer — an iPhone whose hardware is fused differently from retail units, granting deep access to iOS internals by design rather than by exploit.

According to Apple, SRD holders get shell access, can run their own tools, select their own entitlements, and even modify the kernel. Participants also receive software previews, access to security beta projects, membership in the SRD research community, and specialized tooling to support vulnerability discovery.

The research scope is broad: every iOS and iPhone component is eligible for study except Apple Pay and third-party apps.

Findings feed into the bug bounty

Vulnerabilities discovered with an SRD are automatically considered for the Apple Security Bounty, Apple says, and bugs found in preview or beta software through the program can qualify for bonus awards. The company stresses that reporting findings carries no penalty for access: researchers who use the device to identify, test, or confirm a flaw must report it promptly to Apple, and to the relevant third party if the bug lives in third-party code, but they do so without risking their privileged view into iOS.

Apple also notes that reports are welcome even without an SRD. Any vulnerability submitted to the company is reviewed, and eligible reports can still earn bounty rewards.

Strings attached

The device is provided as a 12-month renewable loan and remains Apple property throughout. It is intended strictly for security research in a controlled setting — not for personal use or as an everyday phone — and must stay on the premises of program participants. Access is limited to people Apple has explicitly authorized.

Eligibility requirements include a demonstrated history of uncovering security issues on Apple platforms or other modern operating systems, residence in an eligible country or region, being of legal age of majority, and not having worked at Apple within the past 12 months. Apple says only a limited number of devices are available each year. Companies, universities, and other organizations can enroll as well, provided the applicant is authorized to act on the organization's behalf and names every person who will need device access.

Why it matters

Studying iOS internals on a normal iPhone ordinarily requires an exploit or jailbreak first — often the very thing researchers are trying to discover in the first place. By distributing pre-unlocked hardware, Apple removes that chicken-and-egg problem and widens the pool of people who can audit one of the world's most widely used operating systems.

The program also channels discoveries directly into Apple's bounty pipeline, which means vulnerabilities are more likely to reach Apple's engineers before they are exploited in the wild. For researchers, the roughly week-long application window and the limited supply of devices make this a competitive, once-a-year opportunity rather than an open enrollment.

The annual cadence is worth watching too: security bugs reported through the SRD program tend to surface later as fixed iOS updates, and past participant research has repeatedly shaped how iPhone defenses have evolved.