Does Centers for Medicare & Medicaid Services - Public Bug Bounty Program 2026 offer safe harbor for security researchers?

Yes, Centers for Medicare & Medicaid Services - Public Bug Bounty Program 2026 publishes a safe-harbor clause protecting good-faith security research conducted within the program's scope and rules.

bounty.index

Featured on

Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates

programs/Bugcrowd/engagements/cms-bbpublic

Centers for Medicare & Medicaid Services - Public Bug Bounty Program 2026

Bugcrowd·updated 8h ago

bountymanaged

Discord → RSS

max reward: $7.0K
scope: 10 in · 2 out
safe harbor: full
response: no reports

open program

signalsscope ×1.4 in 90d3 changes in 90dderived from our snapshot history

hunt score

$$cashfresh

formula →

payout

23/55

bounty

20/20

freshness

25/25

how we sort the index, not an estimate of what you’ll earn

Attack surface

10 in-scope

10urls

Scope

In scope

010

+██████████████████████url
+███████████████████url
+█████████████████url
+████████████████████████████url
+██████████████████████████████url
+████████████████████url
+███████████████████████url
+███████████████████████████████████████████url
+████████████████url
+███████████████████████████url

Out of scope

002

−████████████████████████url
−█████████████████████████url

Change history

4 events

in-scope over 85dpeak 15

first indexedscope addedscope removedreward change

2026-10-30
− removed 1 scope · ████████████████████████
7d ago
2026-10-22
+ added 9 scopes
− removed 1 scope · █████████████
15d ago
2026-08-18
+ added 8 scopes
− removed 8 scopes
80d ago
2026-08-06
first indexed
92d ago · 8 in-scope assets

Community reports

0 reports

No reports yet. Be the first to share your triage timing for Centers for Medicare & Medicaid Services - Public Bug Bounty Program 2026.

// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.

Similar programs

by shared scope

Your notes

▸ raw source payload

{
  "url": "https://bugcrowd.com/engagements/cms-bbpublic",
  "name": "Centers for Medicare & Medicaid Services - Public Bug Bounty Program 2026",
  "targets": {
    "in_scope": [
      {
        "uri": null,
        "name": "██████████████████████",
        "type": "website",
        "target": "██████████████████████",
        "ipAddress": null
      },
      {
        "uri": null,
        "name": "███████████████████████",
        "type": "website",
        "target": "███████████████████████",
        "ipAddress": ""
      },
      {
        "uri": null,
        "name": "████████████████████",
        "type": "website",
        "target": "████████████████████",
        "ipAddress": null
      },
      {
        "uri": null,
        "name": "███████████████████████████████████████████",
        "type": "website",
        "target": "███████████████████████████████████████████",
        "ipAddress": ""
      },
      {
        "uri": null,
        "name": "████████████████",
        "type": "website",
        "target": "████████████████",
        "ipAddress": null
      },
      {
        "uri": null,
        "name": "███████████████████",
        "type": "website",
        "target": "███████████████████",
        "ipAddress": null
      },
      {
        "uri": null,
        "name": "███████████████████████████",
        "type": "website",
        "target": "███████████████████████████",
        "ipAddress": ""
      },
      {
        "uri": null,
        "name": "█████████████████",
        "type": "website",
        "target": "█████████████████",
        "ipAddress": ""
      },
      {
        "uri": null,
        "name": "██████████████████████",
        "type": "website",
        "target": "██████████████████████",
        "ipAddress": ""
      },
      {
        "uri": null,
        "name": "██████████████████████████████",
        "type": "website",
        "target": "██████████████████████████████",
        "ipAddress": null
      },
      {
        "uri": null,
        "name": "████████████████████████████",
        "type": "website",
        "target": "████████████████████████████",
        "ipAddress": ""
      }
    ],
    "out_of_scope": [
      {
        "uri": null,
        "name": "██████████████████████",
        "type": "website",
        "target": "██████████████████████",
        "ipAddress": null
      },
      {
        "uri": null,
        "name": "███████████████████████",
        "type": "website",
        "target": "███████████████████████",
        "ipAddress": null
      },
      {
        "uri": null,
        "name": "████████████████████████",
        "type": "website",
        "target": "████████████████████████",
        "ipAddress": null
      },
      {
        "uri": null,
        "name": "████████████████████████████",
        "type": "website",
        "target": "████████████████████████████",
        "ipAddress": null
      },
      {
        "uri": null,
        "name": "█████████████████████████",
        "type": "website",
        "target": "█████████████████████████",
        "ipAddress": null
      }
    ]
  },
  "max_payout": 7000,
  "safe_harbor": "full",
  "allows_disclosure": false,
  "managed_by_bugcrowd": true
}