Bug bounty program
FV
Fastly VDP
Most upvoted reports4
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Open Redirect on ███████#2265413 | Open Redirect | 2025-05-02 | – | 74 |
| Unauthenticated cache purging#1911568 | Access Control | 2023-05-01 | – | 16 |
| CVE-2018-6389 exploitation - using scripts loader#1912540 | Denial of Service | 2023-04-20 | – | 8 |
| Cache purge requests are not authenticated#1943117 | Access Control | 2023-05-01 | – | 7 |
Subdomains46
46 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.