Does Council on Foreign Relations have a bug bounty program?

Yes, Council on Foreign Relations runs a public bug bounty program on Bugcrowd, with rewards up to $2.1K. It currently lists 3 in-scope assets.

How much does Council on Foreign Relations pay for bug bounties?

Council on Foreign Relations's published reward range on Bugcrowd is up to $2.1K. Actual payouts depend on severity and scope.

bounty.index

Featured on

Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates

programs/Bugcrowd/engagements/cfr

Council on Foreign Relations

Bugcrowd·updated 10h ago

bountymanaged

Discord → RSS

max reward: $2.1K
scope: 3 in · 4 out
safe harbor: unknown
response: no reports

open program

hunt score

$cashfresh

formula →

payout

13/55

bounty

20/20

freshness

25/25

how we sort the index, not an estimate of what you’ll earn

Attack surface

3 in-scope

3urls

Scope

In scope

003

+████████████████████url
+█████████████████████████████url
+██████████████████████████url

Out of scope

004

−███████████████████████████████url
−█████████████████████████████████████url
−█████████████████████████url
−██████████████████████████████url

Change history

2 events

in-scope over 36dpeak 3

first indexedscope addedscope removedreward change

2026-09-11
+ added 3 scopes · ████████████████████, ██████████████████████████, █████████████████████████████
− removed 3 scopes · https://education.cfr.org/, https://thinkglobalhealth.org, https://www.cfr.org/
55d ago
2026-08-06
first indexed
91d ago · 3 in-scope assets

Community reports

0 reports

No reports yet. Be the first to share your triage timing for Council on Foreign Relations.

// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.

Similar programs

by shared scope

Your notes

▸ raw source payload

{
  "url": "https://bugcrowd.com/engagements/cfr",
  "name": "Council on Foreign Relations",
  "targets": {
    "in_scope": [
      {
        "uri": null,
        "name": "████████████████████",
        "type": "website",
        "target": "████████████████████",
        "ipAddress": null
      },
      {
        "uri": null,
        "name": "█████████████████████████████",
        "type": "website",
        "target": "█████████████████████████████",
        "ipAddress": null
      },
      {
        "uri": null,
        "name": "██████████████████████████",
        "type": "website",
        "target": "██████████████████████████",
        "ipAddress": ""
      }
    ],
    "out_of_scope": [
      {
        "uri": null,
        "name": "███████████████████████████████",
        "type": "website",
        "target": "███████████████████████████████",
        "ipAddress": null
      },
      {
        "uri": null,
        "name": "█████████████████████████████████████",
        "type": "website",
        "target": "█████████████████████████████████████",
        "ipAddress": null
      },
      {
        "uri": null,
        "name": "█████████████████████████",
        "type": "website",
        "target": "█████████████████████████",
        "ipAddress": null
      },
      {
        "uri": null,
        "name": "██████████████████████████████",
        "type": "website",
        "target": "██████████████████████████████",
        "ipAddress": null
      }
    ]
  },
  "max_payout": 2100,
  "safe_harbor": null,
  "allows_disclosure": false,
  "managed_by_bugcrowd": true
}