Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
2 in-scope
Core Assets In-Scope Products (for…tencent.com/index.php/policy)otherNon Core Assets In-Scope Products …tencent.com/index.php/policy)otherPlease note that the vulnerabiliti…not be eligible for bounties.other*.qzoneapp.comother*. myqcloud.comotherThird-party applications and websitesother*Notes about Tencent Cloud (cloud.…as included in *.tencent.com)otherOnly vulnerabilities affecting the…t is not considered in scope.otherfirst indexed
92d ago · 2 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Tencent Bug Bounty Program.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "tencent-bug-bounty-program",
"name": "Tencent Bug Bounty Program",
"public": true,
"managed": null,
"targets": {
"in_scope": [
{
"type": "other",
"target": "Core Assets In-Scope Products (for the full list please visit https://en.security.tencent.com/index.php/policy)"
},
{
"type": "other",
"target": "Non Core Assets In-Scope Products (for the full list please visit https://en.security.tencent.com/index.php/policy)"
}
],
"out_of_scope": [
{
"type": "other",
"target": "Please note that the vulnerabilities reported for the following assets will not be eligible for bounties."
},
{
"type": "other",
"target": "*.qzoneapp.com"
},
{
"type": "other",
"target": "*. myqcloud.com"
},
{
"type": "other",
"target": "Third-party applications and websites"
},
{
"type": "other",
"target": "*Notes about Tencent Cloud (cloud.tencent.com as included in *.tencent.com)"
},
{
"type": "other",
"target": "Only vulnerabilities affecting the platform itself and IP owned by Tencent will be accepted. If an IP belongs to Tencent Cloud external customer, it is not considered in scope."
}
]
},
"disabled": false,
"max_bounty": 5000,
"min_bounty": 8
}