Does CodeAI have a bug bounty program?

CodeAI runs a public vulnerability disclosure program (VDP) on Bugcrowd. It accepts good-faith security reports but does not offer cash rewards. It lists 2 in-scope assets.

Does CodeAI offer safe harbor for security researchers?

Yes, CodeAI publishes a safe-harbor clause protecting good-faith security research conducted within the program's scope and rules.

bounty.index

Featured on

Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates

programs/Bugcrowd/engagements/codeorg

CodeAI

Bugcrowd·updated 10h ago

vdpmanaged

Discord → RSS

payout: no bounty
scope: 2 in · 2 out
safe harbor: full
response: no reports

open program

hunt score

vdpfresh

formula →

payout

0/55

bounty

0/20

freshness

25/25

how we sort the index, not an estimate of what you’ll earn

Attack surface

2 in-scope

2urls

Scope

In scope

002

Out of scope

002

−hourofcode.comurl
−advocacy.code.orgurl

Change history

1 event

2026-08-06
first indexed
90d ago · 2 in-scope assets

// only one snapshot on record, changes appear from the next ingest onward

Community reports

0 reports

No reports yet. Be the first to share your triage timing for CodeAI.

// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.

Similar programs

by shared scope

BugcrowdCodeAI2× overlap

Your notes

▸ raw source payload

{
  "url": "https://bugcrowd.com/engagements/codeorg",
  "name": "CodeAI",
  "targets": {
    "in_scope": [
      {
        "uri": "https://adhoc-bugcrowd.cdn-code.org",
        "name": "adhoc-bugcrowd.cdn-code.org",
        "type": "website",
        "target": "https://adhoc-bugcrowd.cdn-code.org",
        "ipAddress": null
      },
      {
        "uri": "https://adhoc-bugcrowd-studio.cdn-code.org",
        "name": "adhoc-bugcrowd-studio.cdn-code.org",
        "type": "website",
        "target": "https://adhoc-bugcrowd-studio.cdn-code.org",
        "ipAddress": null
      }
    ],
    "out_of_scope": [
      {
        "uri": "https://hourofcode.com",
        "name": "hourofcode.com",
        "type": "website",
        "target": "https://hourofcode.com",
        "ipAddress": null
      },
      {
        "uri": null,
        "name": "advocacy.code.org",
        "type": "website",
        "target": "advocacy.code.org",
        "ipAddress": null
      }
    ]
  },
  "max_payout": null,
  "safe_harbor": "full",
  "allows_disclosure": false,
  "managed_by_bugcrowd": true
}