Does Crowdstrike have a bug bounty program?

Yes, Crowdstrike runs a public bug bounty program on HackerOne. It currently lists 20 in-scope assets.

bounty.index

Featured on

Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates

programs/HackerOne/crowdstrike

Crowdstrike

HackerOne·updated 12h ago

bountyopen

Discord → RSS

payout: no bounty
scope: 20 in · 3 out
safe harbor: unknown
response: no reports

open program

hunt score

cashfresh

formula →

payout

0/55

bounty

20/20

freshness

25/25

how we sort the index, not an estimate of what you’ll earn

Attack surface

20 in-scope

9wildcards
8urls
2other
1ios

Scope

In scope

020

wildcards09

urls08

+falcon-sandbox.com· critical
+hybrid-analysis.com· critical
+sgnl.ai· critical
+sgnl.cloud· critical
+sgnl.team· critical
+sgnlapis.cloud· critical
+www.crowdstrike.com· critical
+www.crowdstrike.org· critical

ios01

+apps.apple.com/us/app/crowdstrike-falcon/id1458815656· critical

other02

+CrowdStrike public infrastructure· critical
+play.google.com/store/apps/details…=com.crowdstrike.falconmobile· critical

Out of scope

003

urls02

−onum-labs.com
−onum.com

other01

−Falcon Browser Extension V2

Change history

2 events

in-scope over 58dpeak 22

first indexedscope addedscope removedreward change

2026-10-03
− removed 2 scopes · onum-labs.com, onum.com
35d ago
2026-08-06
first indexed
93d ago · 22 in-scope assets

Community reports

0 reports

No reports yet. Be the first to share your triage timing for Crowdstrike.

// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.

Your notes

▸ raw source payload

{
  "id": 0,
  "url": "https://hackerone.com/crowdstrike",
  "name": "Crowdstrike",
  "handle": "crowdstrike",
  "targets": {
    "in_scope": [
      {
        "asset_type": "WILDCARD",
        "instruction": "Excluding 3rd party maintained targets",
        "max_severity": "critical",
        "asset_identifier": "*.adaptive-shield.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "Excluding 3rd party maintained targets",
        "max_severity": "critical",
        "asset_identifier": "*.bionic.ai",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "**Excluding 3rd party maintained targets**",
        "max_severity": "critical",
        "asset_identifier": "*.crowdstrike.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "Excluding 3rd party maintained targets ",
        "max_severity": "critical",
        "asset_identifier": "*.flowsecurity.app",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "**Excluding 3rd party maintained targets**",
        "max_severity": "critical",
        "asset_identifier": "*.humio.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "**Excluding 3rd party maintained targets**",
        "max_severity": "critical",
        "asset_identifier": "*.preempt.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "**Excluding 3rd party maintained targets**",
        "max_severity": "critical",
        "asset_identifier": "*.preemptsecurity.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "**Excluding 3rd party maintained targets**",
        "max_severity": "critical",
        "asset_identifier": "*.reposify.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "**Excluding 3rd party maintained targets**",
        "max_severity": "critical",
        "asset_identifier": "*.securecircle.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "OTHER",
        "instruction": "**Excluding 3rd party maintained targets**",
        "max_severity": "critical",
        "asset_identifier": "CrowdStrike public infrastructure",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "APPLE_STORE_APP_ID",
        "instruction": null,
        "max_severity": "critical",
        "asset_identifier": "apps.apple.com/us/app/crowdstrike-falcon/id1458815656",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "falcon-sandbox.com",
        "eligible_for_bounty": true,
        "integrity_requirement": "high",
        "eligible_for_submission": true,
        "availability_requirement": "high",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "hybrid-analysis.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "instruction": null,
        "max_severity": "critical",
        "asset_identifier": "play.google.com/store/apps/details?id=com.crowdstrike.falconmobile",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "Including all public SGNL infrastructure",
        "max_severity": "critical",
        "asset_identifier": "sgnl.ai",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "Including all public SGNL infrastructure",
        "max_severity": "critical",
        "asset_identifier": "sgnl.cloud",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "Including all public SGNL infrastructure",
        "max_severity": "critical",
        "asset_identifier": "sgnl.team",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "Including all public SGNL infrastructure",
        "max_severity": "critical",
        "asset_identifier": "sgnlapis.cloud",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "**Including all localized sites: crowdstrike.de, crowdstrike.com.au, crowdstrike.co.uk, crowdstrike.fr, crowdstrike.jp, crowdstrike.com.br**",
        "max_severity": "critical",
        "asset_identifier": "www.crowdstrike.com",
        "eligible_for_bounty": true,
        "integrity_requirement": "high",
        "eligible_for_submission": true,
        "availability_requirement": "high",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "URL",
        "instruction": "**CrowdStrike Foundation Website**\n",
        "max_severity": "critical",
        "asset_identifier": "www.crowdstrike.org",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      }
    ],
    "out_of_scope": [
      {
        "asset_type": "OTHER",
        "instruction": "This asset is temporarily out of scope of our program.",
        "max_severity": "none",
        "asset_identifier": "Falcon Browser Extension V2",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "Excluding 3rd party maintained targets",
        "max_severity": "none",
        "asset_identifier": "onum-labs.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "Excluding 3rd party maintained targets",
        "max_severity": "none",
        "asset_identifier": "onum.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      }
    ]
  },
  "website": "https://www.crowdstrike.com/",
  "offers_swag": false,
  "managed_program": false,
  "offers_bounties": true,
  "submission_state": "open",
  "allows_bounty_splitting": true,
  "average_time_to_bounty_awarded": 20,
  "response_efficiency_percentage": 100,
  "average_time_to_report_resolved": null,
  "average_time_to_first_program_response": 28
}