Skip to content

Bug bounty program

Platform
Bugcrowd
Bounties
Pays
Assets in scope
5
Disclosed reports
0
Subdomains
2,379
Vendor on CyberSIXT
Bitdefender (104 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains2,379

Subdomains of Bitdefender
NameScopeFirst seen
api.ti.bitdefender.comapiIn scope2026-11-14
api.pan.bitdefender.comapiIn scope2026-11-14
api.tip.bitdefender.comapiIn scope2026-11-14
api.login.bitdefender.comapi, authIn scope2026-11-14
api.account.bitdefender.comapiIn scope2026-11-14
deskpro-api.bitdefender.comapiIn scope2026-11-14
www.api.pan.bitdefender.comapiIn scope2026-11-14
csrtools-api.bitdefender.comapiIn scope2026-11-14
omnicert-api.bitdefender.comapiIn scope2026-11-14
rmmi-api.rmm.bitdefender.comapiIn scope2026-11-14
omnicert-api2.bitdefender.comapiIn scope2026-11-14
omnicert-api3.bitdefender.comapiIn scope2026-11-14
pan-stage-api.bitdefender.comapi, stagingIn scope2026-11-14
www.api.login.bitdefender.comapi, authIn scope2026-11-14
api.beta-login.bitdefender.comapi, auth, stagingIn scope2026-11-14
www.api.account.bitdefender.comapiIn scope2026-11-14
www.deskpro-api.bitdefender.comapiIn scope2026-11-14
api.beta-account.bitdefender.comapi, stagingIn scope2026-11-14
api.customerzone.bitdefender.comapiIn scope2026-11-14
customerzone-api.bitdefender.comapiIn scope2026-11-14
www.csrtools-api.bitdefender.comapiIn scope2026-11-14
www.omnicert-api.bitdefender.comapiIn scope2026-11-14
www.rmmi-api.rmm.bitdefender.comapiIn scope2026-11-14
external-api.data.bitdefender.comapiIn scope2026-11-14
www.omnicert-api2.bitdefender.comapiIn scope2026-11-14
www.omnicert-api3.bitdefender.comapiIn scope2026-11-14
www.pan-stage-api.bitdefender.comapi, stagingIn scope2026-11-14
cwautomate-api.rmm.bitdefender.comapiIn scope2026-11-14
www.api.beta-login.bitdefender.comapi, auth, stagingIn scope2026-11-14
api-stage.pan-stage.bitdefender.comapi, stagingIn scope2026-11-14
rmmi-api-backend.rmm.bitdefender.comapiIn scope2026-11-14
www.api.beta-account.bitdefender.comapi, stagingIn scope2026-11-14
www.api.customerzone.bitdefender.comapiIn scope2026-11-14
www.customerzone-api.bitdefender.comapiIn scope2026-11-14
www.external-api.data.bitdefender.comapiIn scope2026-11-14
api.di-dev.gravityzone.bitdefender.comapi, devIn scope2026-11-14
www.cwautomate-api.rmm.bitdefender.comapiIn scope2026-11-14
www.api-stage.pan-stage.bitdefender.comapi, stagingIn scope2026-11-14
omnicert-api-for-reissue.bitdefender.comapiIn scope2026-11-14
www.rmmi-api-backend.rmm.bitdefender.comapiIn scope2026-11-14
rmm-cw-rmm-api-uat.dev.rmm.bitdefender.comapi, dev, testIn scope2026-11-14
www.omnicert-api-for-reissue.bitdefender.comapiIn scope2026-11-14
rmm-cw-client-api-uat.dev.rmm.bitdefender.comapi, dev, testIn scope2026-11-14
rmm-cw-rmm-api-plugin-stg.dev.rmm.bitdefender.comapi, dev, stagingIn scope2026-11-14
rmm-cw-rmm-api-plugin-uat.dev.rmm.bitdefender.comapi, dev, testIn scope2026-11-14
rmm-cw-rmm-api-plugin-demo.dev.rmm.bitdefender.comapi, dev, testIn scope2026-11-14
rmm-cw-rmm-api-plugin-intgr.dev.rmm.bitdefender.comapi, devIn scope2026-11-14
rmm-cw-client-api-plugin-stg.dev.rmm.bitdefender.comapi, dev, stagingIn scope2026-11-14
rmm-cw-client-api-plugin-uat.dev.rmm.bitdefender.comapi, dev, testIn scope2026-11-14
rmm-cw-rmm-api-plugin-dklein.dev.rmm.bitdefender.comapi, devIn scope2026-11-14
rmm-cw-client-api-plugin-demo.dev.rmm.bitdefender.comapi, dev, testIn scope2026-11-14
rmm-cw-client-api-plugin-intgr.dev.rmm.bitdefender.comapi, devIn scope2026-11-14
rmm-cw-client-api-plugin-dklein.dev.rmm.bitdefender.comapi, devIn scope2026-11-14
staging.account.api-system.oem-central-stage.bitdefender.comapi, stagingIn scope2026-11-14

2,355 names are covered by the program's own scope; 5 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.