Skip to content

bug bounty program · Bugcrowd

Etsy

0 disclosed reports · 10 assets in scope · 169,749 subdomains

First the weakness classes of its disclosed reports, then what it has in scope. Each square is a report or an asset, or a group of names. The last strips are its subdomains by root domain, from ProjectDiscovery's public Chaos dataset; the bright part of each is what the program's own scope covers.

Open Etsy on Bugcrowd
pays bounties
Yes
subdomains
169,749
in scope
169,743

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.