Microsoft runs the Microsoft Security Response Center rather than a third-party platform, and there is no profile to claim here.
MSRC is not one bounty but many (Azure, Microsoft 365, Windows, Edge, identity, AI), each with its own scope and award table. Reading the right programme page before submitting is the highest-value thing you can do.
Getting credit
Microsoft publishes credit in its own advisories, often months after the report. We index those advisories, so your credit shows up here once it's published. That includes recognitions with no CVE that aren't listed anywhere else.
Company
Found a vulnerability?
Microsoft runs its own vulnerability reporting process. There are two ways to report, and we recommend the first.
Reports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.