Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
1 in-scope
All assets owned by or attributable to Dropboxother· No BountyThird-party systems or domains referencing Dropboxotherfirst indexed
92d ago · 1 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Dropbox Vulnerability Disclosure Program .
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "b31aef04-c63f-429f-b965-f92c94e5eec3",
"url": "https://www.intigriti.com/programs/dropbox/dropbox-vdp/detail",
"name": "Dropbox Vulnerability Disclosure Program ",
"handle": "dropbox-vdp",
"status": "open",
"targets": {
"in_scope": [
{
"type": "other",
"impact": "No Bounty",
"endpoint": "All assets owned by or attributable to Dropbox",
"description": null
}
],
"out_of_scope": [
{
"type": "other",
"impact": "Out of scope",
"endpoint": "Third-party systems or domains referencing Dropbox",
"description": "Before testing or reporting a vulnerability, confirm that the target asset is owned or managed by Dropbox. Terms like “Dropbox-compatible” do not mean Dropbox controls the system. If you're unsure, contact the program team to avoid interacting with assets outside of scope at bugbounty@dropbox.com."
}
]
},
"max_bounty": {
"value": 0,
"currency": "USD"
},
"min_bounty": {
"value": 0,
"currency": "USD"
},
"tacRequired": false,
"company_handle": "dropbox",
"twoFactorRequired": false,
"confidentiality_level": "public"
}