Apple has opened a five-day window for security researchers to request a hand-built iPhone stripped of the protections most people never see. Applications close October 30, 2026.
The Security Research Device Program supplies a specially fused handset that runs iOS without the usual barriers. Shell access is available, entitlements are the researcher’s choice, and even the kernel can be modified, opening layers a retail phone locks away.
What researchers get on loan
Approved applicants receive the device as a 12-month renewable loan. It stays Apple’s property, must remain on the participant’s premises, and is barred from daily carry.
Every component of iOS and the iPhone falls inside scope except Apple Pay and third-party apps. Findings are automatically considered for the Apple Security Bounty, including bonus tiers reserved for preview and beta builds.
The trade is obligation. Anyone who uses the device to find, test, or confirm a flaw must report it promptly, and must tell the relevant vendor when the bug sits in someone else’s code.
Why the programme exists at all
Apple frames the scheme as an answer to a starting problem. Hardening makes a retail iPhone difficult to explore, so newcomers spend months building an entry point before they can study anything.
The deadline lands while Apple faces pressure over how it handles incoming reports. Its bounty operation tightened submission limits this year after AI-assisted filings flooded the queue, drawing criticism from researchers.
A device that eases exploitation sits oddly beside a process that narrows who may submit, but Apple presents both as filters: hardware for serious work, a queue for serious reports.
Applying before Friday
Participation depends on Apple reviewing the application, with eligibility rules listed on the programme page. Anyone who misses the cutoff waits for the next intake.
