Skip to content

Bug bounty program

Platform
Bugcrowd
Bounties
Pays
Assets in scope
5
Disclosed reports
0
Subdomains
2,374
Vendor on CyberSIXT
Bitdefender (104 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains2,374

Subdomains of Bitdefender
NameScopeFirst seen
dev.bmdr-tst.bitdefender.comdevIn scope2026-11-14
dev1.bitdefender.comdevIn scope2026-11-14
api.di-dev.gravityzone.bitdefender.comapi, devIn scope2026-11-14
securitydatalake-dev.gravityzone.bitdefender.comdevIn scope2026-11-14
local-ntsa.bitdefender.comdevIn scope2026-11-14
local-ntsa-lb.bitdefender.comdevIn scope2026-11-14
cwse-plugin-deva.dev.rmm.bitdefender.comdevIn scope2026-11-14
cwse-plugin-stg.dev.rmm.bitdefender.comdev, stagingIn scope2026-11-14
cwse-plugin-uat.dev.rmm.bitdefender.comdev, testIn scope2026-11-14
gzevents-dev.dev.rmm.bitdefender.comdevIn scope2026-11-14
gzevents-uat.dev.rmm.bitdefender.comdev, testIn scope2026-11-14
poc-cloudflare-app.dev.rmm.bitdefender.comdevIn scope2026-11-14
www.poc-cloudflare-app.dev.rmm.bitdefender.comdevIn scope2026-11-14
poc-cloudflare-vm.dev.rmm.bitdefender.comdevIn scope2026-11-14
www.poc-cloudflare-vm.dev.rmm.bitdefender.comdevIn scope2026-11-14
rmm-cw-client-api-plugin-demo.dev.rmm.bitdefender.comapi, dev, testIn scope2026-11-14
rmm-cw-client-api-plugin-dklein.dev.rmm.bitdefender.comapi, devIn scope2026-11-14
rmm-cw-client-api-plugin-intgr.dev.rmm.bitdefender.comapi, devIn scope2026-11-14
rmm-cw-client-api-plugin-stg.dev.rmm.bitdefender.comapi, dev, stagingIn scope2026-11-14
rmm-cw-client-api-plugin-uat.dev.rmm.bitdefender.comapi, dev, testIn scope2026-11-14
rmm-cw-client-api-uat.dev.rmm.bitdefender.comapi, dev, testIn scope2026-11-14
rmm-cw-rmm-api-plugin-demo.dev.rmm.bitdefender.comapi, dev, testIn scope2026-11-14
rmm-cw-rmm-api-plugin-dklein.dev.rmm.bitdefender.comapi, devIn scope2026-11-14
rmm-cw-rmm-api-plugin-intgr.dev.rmm.bitdefender.comapi, devIn scope2026-11-14
rmm-cw-rmm-api-plugin-stg.dev.rmm.bitdefender.comapi, dev, stagingIn scope2026-11-14
rmm-cw-rmm-api-plugin-uat.dev.rmm.bitdefender.comapi, dev, testIn scope2026-11-14
rmm-cw-rmm-api-uat.dev.rmm.bitdefender.comapi, dev, testIn scope2026-11-14
dev.swimlane.bitdefender.comdevIn scope2026-11-14
www.dev.swimlane.bitdefender.comdevIn scope2026-11-14
workflow-dev.bitdefender.comdevListed out of scope2026-11-14
antivirusaws-develop.athena.bitdefender.netdevIn scope2026-11-14
brasil-dev.athena.bitdefender.netdevIn scope2026-11-14
treatwellationsdevdiscovid19.sa-api.brasil-dev.athena.bitdefender.netapi, devIn scope2026-11-14
treatwellationsdevdiscovid19.dev-sa-api.brasil.athena.bitdefender.netapi, devIn scope2026-11-14
treatwellationsdevdiscovid19.sa-api.dev.brasil.athena.bitdefender.netapi, devIn scope2026-11-14
dev.treatwellationsdevdiscovid19.sa-api.brasil.athena.bitdefender.netapi, devIn scope2026-11-14
treatwellationsdevdiscovid19dev.sa-api.brasil.athena.bitdefender.netapi, devIn scope2026-11-14
dev.athena.bitdefender.netdevIn scope2026-11-14
dev-devops.athena.bitdefender.netdevIn scope2026-11-14
dev-z.athena.bitdefender.netdevIn scope2026-11-14
i.dev.athena.bitdefender.netdevIn scope2026-11-14
stage.dev.athena.bitdefender.netdev, stagingIn scope2026-11-14
dev16.athena.bitdefender.netdevIn scope2026-11-14
develop-security.athena.bitdefender.netdevIn scope2026-11-14
prod.develop.athena.bitdefender.netdevIn scope2026-11-14
develop.engine.athena.bitdefender.netdevIn scope2026-11-14
dev.pl.athena.bitdefender.netdevIn scope2026-11-14
dev1.secure.athena.bitdefender.netdevIn scope2026-11-14
develop.system.athena.bitdefender.netdevIn scope2026-11-14
forensics-api-dev.bitdefender.netapi, devIn scope2026-11-14
www.forensics-api-dev.bitdefender.netapi, devIn scope2026-11-14

2,350 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in