bug bounty program · Bugcrowd
Asana
0 disclosed reports · 10 assets in scope · 4,717 subdomains
First the weakness classes of its disclosed reports, then what it has in scope. Each square is a report or an asset, or a group of names. The last strips are its subdomains by root domain, from ProjectDiscovery's public Chaos dataset; the bright part of each is what the program's own scope covers.
Open Asana on Bugcrowd- pays bounties
- Yes
- subdomains
- 4,717
- in scope
- 4,476
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.