Work at Arlo Cash Rewards? Claim it to respond to reviews as the verified owner.
Found a vulnerability?
If you would rather not deal with the vendor yourself, a BugRater analyst will submit it upstream on your behalf, with your explicit permission, and tell you what came back.
Ask BugRater to submit itPrivate. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.
Reviews
0 publishedNo reviews yet.
Facts published by Bugcrowd on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 19 Sep 2026.
About Arlo Cash Rewards Program This program encourages and rewards contributions by developers and security researchers who help make Arlo’s products more secure. Arlo provides monetary rewards and kudos for qualifying vulnerability submissions to this program. For submissions outside the scope of this program, please submit to the Arlo Kudos Rewards Program. NETGEAR products have their own Bug Bounty program. Please click the following link to NETGEAR Cash Rewards Program. Only vulnerabilities found in the latest version of the above are eligible. Targets listed below denote Cloud Infrastructure that support in-scope devices and are included in scope: A note about business impact Arlo appreciates the efforts and contributions from the security research community. In order to provide researchers with timely and accurate rewards, Arlo requests that submitters include a statement about perceived impact to arlo, along with the submission details. Not only will this help Arlo reproduce, rate and reward your findings in a timely manner -- it is likely to help improve the severity score of your finding as well!
Scope
39 assets| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| *.arlo.com (subdomains impacting production customer-facing services) | other | ✓ bounty | not set |
| *.arlocloud.com | website | ✓ bounty | not set |
| *.arloxcld.com | other | ✓ bounty | not set |
| Arlo All-In-One Sensor (Home Security System) | iot | ✓ bounty | not set |
| Arlo Base Station | iot | ✓ bounty | not set |
Show all 39 assets
| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| Arlo Cellular & Battery Backup (Home Security System) | iot | ✓ bounty | not set |
| Arlo Chime 2 | iot | ✓ bounty | not set |
| Arlo Essential 2 & 3 (indoor & outdoor camera, doorbell) | iot | ✓ bounty | not set |
| Arlo Go v2 | iot | ✓ bounty | not set |
| Arlo Home Security System | iot | ✓ bounty | not set |
| Arlo Pro 3 Floodlight | iot | ✓ bounty | not set |
| Arlo Pro 5S | iot | ✓ bounty | not set |
| Arlo Pro 6 | iot | ✓ bounty | not set |
| Arlo Pro SmartHub | iot | ✓ bounty | not set |
| Arlo Safe Android App | android | ✓ bounty | not set |
| Arlo Safe Button | iot | ✓ bounty | not set |
| Arlo Safe iOS App | ios | ✓ bounty | not set |
| Arlo Secure Android App | android | ✓ bounty | not set |
| Arlo Secure iOS App | ios | ✓ bounty | not set |
| Arlo Ultra 2 | iot | ✓ bounty | not set |
| Arlo Wire-Free Outdoor Siren (Home Security System) | iot | ✓ bounty | not set |
| Arlo Wired Floodlight | iot | ✓ bounty | not set |
| Arlo Wireless Video Doorbell | iot | ✓ bounty | not set |
| https://*-prod.arlo.com | api | ✓ bounty | not set |
| https://*dev*.arlo.com | website | ✓ bounty | not set |
| https://*qa*.arlo.com | website | ✓ bounty | not set |
| https://beta.arlo.com | website | ✓ bounty | not set |
| https://mcs.arlo.com | api | ✓ bounty | not set |
| https://my.arlo.com | website | ✓ bounty | not set |
| https://myapi.arlo.com | api | ✓ bounty | not set |
| https://partnerapi.arlo.com | api | ✓ bounty | not set |
| https://updates.arlo.com | api | ✓ bounty | not set |
| https://www.arlo.com | website | ✓ bounty | not set |
| *streaming*.arlo.com | api | out | not set |
| cvrstreaming*.arlo.com | api | out | not set |
| http://community.arlo.com/ | website | out | not set |
| http://research.arlo.com/ | website | out | not set |
| http://survey.arlo.com/ | website | out | not set |
| https://investor.arlo.com | website | out | not set |