# Bitdefender: bug bounty program on Bugcrowd

> Bitdefender is a bug bounty program on Bugcrowd. Bounties range from $100 to $15,000. 5 assets are listed in scope, 5 of them bounty-eligible.

- **Company:** Bitdefender
- **Platform:** Bugcrowd
- **Program page:** /engagements/bitdefender
- **Pays bounties:** yes
- **Submissions:** open
- **Bounty range:** $100 to $15,000
- **BugRater grade:** not graded yet (fewer than three reviewers)
- **BugRater page:** https://bugrater.com/programs/bitdefender

## Scope

As imported from Bugcrowd on November 7, 2026: 5 assets in scope (5 bounty-eligible), 24 out of scope. The policy page is the authority.

- `*.bitdefender.com` (website): in scope, bounty-eligible
- `*.bitdefender.net` (website): in scope, bounty-eligible
- `Bitdefender Antimalware Engines` (other): in scope, bounty-eligible
- `Bitdefender GravityZone Business Security` (other): in scope, bounty-eligible
- `Bitdefender Total Security` (other): in scope, bounty-eligible
- `brand.bitdefender.com/` (website): out of scope
- `businessemail.bitdefender.com` (website): out of scope
- `businessinsights.bitdefender.com` (website): out of scope
- `businessresources.bitdefender.com` (website): out of scope
- `community.bitdefender.com/` (website): out of scope
- `crp.bitdefender.com` (website): out of scope
- `demo.bitdefender.com` (website): out of scope
- `explore-lb.bitdefender.com` (website): out of scope
- `explore.bitdefender.com` (website): out of scope
- `lsems.gravityzone.bitdefender.com/` (website): out of scope
- `oemhub.bitdefender.com` (website): out of scope
- `oemresources.bitdefender.com` (website): out of scope
- `partner-marketing.bitdefender.com` (website): out of scope
- `resellerportal.bitdefender.com/` (website): out of scope
- `seems.gravityzone.bitdefender.com` (website): out of scope
- `ssems.gravityzone.bitdefender.com/` (website): out of scope
- `sstats.bitdefender.com/` (website): out of scope
- `stats.bitdefender.com/` (website): out of scope
- `telcosuccess.bitdefender.com` (website): out of scope
- `translate.bitdefender.com` (website): out of scope
- `trust.bitdefender.com` (website): out of scope
- `workflow-dev.bitdefender.com` (website): out of scope
- `workflow-test.bitdefender.com` (website): out of scope
- `workflow.bitdefender.com` (website): out of scope

## Recent public accepted findings

- November 3, 2026: medium severity on *.bitdefender.com, awarded $500
- November 3, 2026: high severity on *.bitdefender.com, awarded $2,000
- November 3, 2026: medium severity on *.bitdefender.com, awarded $500
- November 3, 2026: medium severity on *.bitdefender.net
- November 3, 2026: medium severity on Bitdefender Antimalware Engines, awarded $500

---

Generated November 7, 2026 from BugRater data. Platform figures are the platform's own; grades and reviews are BugRater's. Agents can check targets against this scope with the check_scope tool at https://bugrater.com/mcp.