Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

In brief. Arlo Cash Rewards is a bug bounty program on Bugcrowd. Bounties range from $25 to $4,500. 33 assets are listed in scope, 33 of them bounty-eligible. As of Aug 12, 2026. Markdown for agents

NR Unrated

Arlo Cash Rewards

Arlo Cash Rewards Bugcrowd $25–$4,500
3 more reviews needed for a grade
Write a review Claim this company profile

Work at Arlo Cash Rewards? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.

Ask BugRater to submit it

Reports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.

Reviews

0 published

No reviews yet.

Be the first to review

Program profile Bugcrowd, imported

Bugcrowd published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade. Last checked 7 Nov 2026.

About Arlo Cash Rewards Program This program encourages and rewards contributions by developers and security researchers who help make Arlo’s products more secure. Arlo provides monetary rewards and kudos for qualifying vulnerability submissions to this program. For submissions outside the scope of this program, please submit to the Arlo Kudos Rewards Program. NETGEAR products have their own Bug Bounty program. Please click the following link to NETGEAR Cash Rewards Program. Only vulnerabilities found in the latest version of the above are eligible. Targets listed below denote Cloud Infrastructure that support in-scope devices and are included in scope: A note about business impact Arlo appreciates the efforts and contributions from the security research community. In order to provide researchers with timely and accurate rewards, Arlo requests that submitters include a statement about perceived impact to arlo, along with the submission details. Not only will this help Arlo reproduce, rate and reward your findings in a timely manner -- it is likely to help improve the severity score of your finding as well!

Currency
USD
Submissions
Open
Scope entries
39 Bugcrowd’s count

Scope

39 assets
AssetTypeEligibilityMax severity
*.arlo.com (subdomains impacting production customer-facing services) other ✓ bounty not set
*.arlocloud.com website ✓ bounty not set
*.arloxcld.com other ✓ bounty not set
Arlo All-In-One Sensor (Home Security System) iot ✓ bounty not set
Arlo Base Station iot ✓ bounty not set
Show all 39 assets
AssetTypeEligibilityMax severity
Arlo Cellular & Battery Backup (Home Security System) iot ✓ bounty not set
Arlo Chime 2 iot ✓ bounty not set
Arlo Essential 2 & 3 (indoor & outdoor camera, doorbell) iot ✓ bounty not set
Arlo Go v2 iot ✓ bounty not set
Arlo Home Security System iot ✓ bounty not set
Arlo Pro 3 Floodlight iot ✓ bounty not set
Arlo Pro 5S iot ✓ bounty not set
Arlo Pro 6 iot ✓ bounty not set
Arlo Pro SmartHub iot ✓ bounty not set
Arlo Safe Android App android ✓ bounty not set
Arlo Safe Button iot ✓ bounty not set
Arlo Safe iOS App ios ✓ bounty not set
Arlo Secure Android App android ✓ bounty not set
Arlo Secure iOS App ios ✓ bounty not set
Arlo Ultra 2 iot ✓ bounty not set
Arlo Wire-Free Outdoor Siren (Home Security System) iot ✓ bounty not set
Arlo Wired Floodlight iot ✓ bounty not set
Arlo Wireless Video Doorbell iot ✓ bounty not set
https://*-prod.arlo.com api ✓ bounty not set
https://*dev*.arlo.com website ✓ bounty not set
https://*qa*.arlo.com website ✓ bounty not set
https://beta.arlo.com website ✓ bounty not set
https://mcs.arlo.com api ✓ bounty not set
https://my.arlo.com website ✓ bounty not set
https://myapi.arlo.com api ✓ bounty not set
https://partnerapi.arlo.com api ✓ bounty not set
https://updates.arlo.com api ✓ bounty not set
https://www.arlo.com website ✓ bounty not set
*streaming*.arlo.com api out not set
cvrstreaming*.arlo.com api out not set
http://community.arlo.com/ website out not set
http://research.arlo.com/ website out not set
http://survey.arlo.com/ website out not set
https://investor.arlo.com website out not set