Cloudflare Public Bug Bounty

At a glance#

• Bounties: Yes
• Swag: No
• Managed by the platform: Yes
• Average first response: 0 days
• Average time to resolution: Not published

In scope#

• *.cloudflare.com
• *.cloudflarepartners.com
• *.teams.cloudflare.com
• 1.1.1.1 Resolver
• AI Gateway
• AMP Real URL
• API Shield
• Area 1
• Bot Management
• Browser Isolation
• CDNJS
• China Network
• Cloudflare Access
• Cloudflare Analytics
• Cloudflare CASB
• Cloudflare Cache
• Cloudflare D1
• Cloudflare DNS
• Cloudflare Durable Objects
• Cloudflare Pages
• Cloudflare R2
• Cloudflare Tunnel
• Cloudflare Workers CI
• Cloudflare Zaraz
• Cloudflare Zero Trust/Cloudflare One
• Data Loss Prevention (DLP)
• Gateway
• Hyperdrive
• Images
• Load Balancing
• Magic Firewall
• Magic Transit
• Magic WAN
• Open source tools from Cloudflare
• SSL/TLS
• Spectrum
• Stream
• Vectorize
• WARP Mobile Apps
• WARP desktop client

11 more assets on the official page.

Out of scope#

• 172.65.0.0/16
• Turnstile
• api.staging.realtime.cloudflare.com
• app.dyte.io
• community.cloudflare.com
• demo.realtime.cloudflare.com
• events.www.cloudflare.com
• examples.realtime.cloudflare.com
• files.plugins.realtime.cloudflare.com
• https://github.com/cloudflare/cloudflare-os
• https://github.com/cloudflare/computer
• https://github.com/cloudflare/moq-rs
• https://github.com/cloudflare/privacy-gateway-server-go
• https://github.com/cloudflare/realtimekit-web-examples
• https://github.com/cloudflare/recapn
• https://github.com/cloudflare/saffron.git
• https://github.com/cloudflare/templates
• https://github.com/cloudflare/vinext-private
• react-examples.realtime.cloudflare.com
• support.cloudflare.com
• support.cloudflarewarp.com
• test.realtime.cloudflare.com
• waf.cumulusfire.net

Imported from the public directory. Always confirm scope on the official program page before testing.