Does Fivetran have a bug bounty program?

Yes, Fivetran runs a public bug bounty program on Bugcrowd, with rewards up to $7.5K. It currently lists 5 in-scope assets.

How much does Fivetran pay for bug bounties?

Fivetran's published reward range on Bugcrowd is up to $7.5K. Actual payouts depend on severity and scope.

Does Fivetran offer safe harbor for security researchers?

Yes, Fivetran publishes a safe-harbor clause protecting good-faith security research conducted within the program's scope and rules.

bounty.index

Featured on

Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates

programs/Bugcrowd/engagements/fivetran-mbb-og

Fivetran

Bugcrowd·updated 5h ago

bountymanaged

Discord → RSS

max reward: $7.5K
scope: 5 in · 9 out
safe harbor: full
response: no reports

open program

signalsscope ×3 in 90dderived from our snapshot history

hunt score

$$cashfresh

formula →

payout

24/55

bounty

20/20

freshness

25/25

how we sort the index, not an estimate of what you’ll earn

Attack surface

5 in-scope

4urls
1other

Scope

In scope

005

urls04

other01

+it-fivetran.com

Out of scope

009

urls07

−Any internal, staging, or development services.
−testing-datalake.fivetran.com
−shop.fivetran.com
−status.fivetran.com/
−support.fivetran.com
−community-stage.fivetran.com
−trust.fivetran.com

other02

−Social engineering against Fivetra…Support or Fivetran Employees
−*.db.fivetran.com

Change history

3 events

in-scope over 70dpeak 5

first indexedscope addedscope removedreward change

2026-10-15
+ added 4 scopes
22d ago
2026-10-01
reward: $15K → $7.5K
36d ago
2026-08-06
first indexed
92d ago · 2 in-scope assets

Community reports

0 reports

No reports yet. Be the first to share your triage timing for Fivetran.

// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.

Similar programs

by shared scope

BugcrowdFivetran1× overlap

Your notes

▸ raw source payload

{
  "url": "https://bugcrowd.com/engagements/fivetran-mbb-og",
  "name": "Fivetran",
  "targets": {
    "in_scope": [
      {
        "uri": "https://fivetran.com/login",
        "name": "*.fivetran.com",
        "type": "website",
        "target": "https://fivetran.com/login",
        "ipAddress": ""
      },
      {
        "uri": "https://it-fivetran.com",
        "name": "it-fivetran.com",
        "type": "other",
        "target": "https://it-fivetran.com",
        "ipAddress": null
      },
      {
        "uri": "https://*.getdbt.com",
        "name": "https://*.getdbt.com",
        "type": "website",
        "target": "https://*.getdbt.com",
        "ipAddress": null
      },
      {
        "uri": "https://*.dbt.com",
        "name": "https://*.dbt.com",
        "type": "website",
        "target": "https://*.dbt.com",
        "ipAddress": null
      },
      {
        "uri": "https://*.dbtlabs.com",
        "name": "https://*.dbtlabs.com",
        "type": "website",
        "target": "https://*.dbtlabs.com",
        "ipAddress": null
      }
    ],
    "out_of_scope": [
      {
        "uri": "",
        "name": "Any internal, staging, or development services.",
        "type": "website",
        "target": "Any internal, staging, or development services.",
        "ipAddress": ""
      },
      {
        "uri": "",
        "name": "Social engineering against Fivetran Support or Fivetran Employees",
        "type": "other",
        "target": "Social engineering against Fivetran Support or Fivetran Employees",
        "ipAddress": ""
      },
      {
        "uri": "",
        "name": "*.db.fivetran.com",
        "type": "other",
        "target": "*.db.fivetran.com",
        "ipAddress": ""
      },
      {
        "uri": "",
        "name": "testing-datalake.fivetran.com",
        "type": "website",
        "target": "testing-datalake.fivetran.com",
        "ipAddress": ""
      },
      {
        "uri": "https://shop.fivetran.com",
        "name": "shop.fivetran.com",
        "type": "website",
        "target": "https://shop.fivetran.com",
        "ipAddress": ""
      },
      {
        "uri": "https://status.fivetran.com/",
        "name": "status.fivetran.com",
        "type": "website",
        "target": "https://status.fivetran.com/",
        "ipAddress": ""
      },
      {
        "uri": "https://support.fivetran.com",
        "name": "support.fivetran.com",
        "type": "website",
        "target": "https://support.fivetran.com",
        "ipAddress": ""
      },
      {
        "uri": "https://community-stage.fivetran.com",
        "name": "community-stage.fivetran.com",
        "type": "website",
        "target": "https://community-stage.fivetran.com",
        "ipAddress": ""
      },
      {
        "uri": "https://trust.fivetran.com",
        "name": "trust.fivetran.com",
        "type": "website",
        "target": "https://trust.fivetran.com",
        "ipAddress": ""
      }
    ]
  },
  "max_payout": 7500,
  "safe_harbor": "full",
  "allows_disclosure": true,
  "managed_by_bugcrowd": true
}