Sophos

At a glance#

• Maximum payout: $80,000
• Public disclosure: Allowed
• Managed by the platform: Yes
• Safe harbour: Full

In scope#

• https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial
• https://central.sophos.com/
• Sophos Firewall (XG/XGS, SFOS) - Pre-auth RCE
• https://central.sophos.com
• https://www.sophos.com/en-us/products/next-gen-firewall
• https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial
• https://www.sophos.com/en-us/products/mobile-control/free-trial
• https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/ThreatAnalysisCenter/Integrations/Sophos/NDR/inde...
• https://www.sophos.com/en-us/products
• https://www.sophos.com/
• SOPHOS/Secureworks : Taegis
• SOPHOS/Secureworks : Redcloak
• 3rd party services hosted at *.sophos.com
• Sophos IT Infrastructure (all other Sophos domains)
• Any Other Sophos Product or Service

Out of scope#

• community.sophos.com
• Any Cyberoam Product or Service
• sophos.atlassian.net (Public service desk)
• SPF/DKIM/DMARC issues
• Sophos Firewall (Early Access Program (EAP) versions)

Imported from the public directory. Always confirm scope on the official program page before testing.