In brief. ClickHouse is a bug bounty program on Bugcrowd. Bounties range from $50 to $2,500. 4 assets are listed in scope, 4 of them bounty-eligible.
ClickHouse
Work at ClickHouse? Claim it to respond to reviews as the verified owner.
Found a vulnerability?
If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.
Ask BugRater to submit itReports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.
Reviews
0 publishedNo reviews yet.
Bugcrowd published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade. Last checked 6 Nov 2026.
No technology is perfect and ClickHouse believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. We are excited for you to participate as a security researcher to help us identify vulnerabilities in our open-source assets. Good luck, and happy hunting! Ratings/Rewards: For the initial prioritization/rating of findings, this program will use the Bugcrowd Vulnerability Rating Taxonomy. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.
Scope
8 assets| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| ClickHouse Cloud environment hosted by ClickHouse | other | ✓ bounty | not set |
| https://clickhou.se/bugcrowd | website | ✓ bounty | not set |
| https://cloud.langfuse.com/ | website | ✓ bounty | not set |
| https://github.com/ClickHouse/ClickHouse | other | ✓ bounty | not set |
| learn.clickhouse.com | website | out | not set |
Show all 8 assets
| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| New support cases, Chat, Request new integration form | website | out | not set |
| Share feedback form | website | out | not set |
| Vulnerability scanners | website | out | not set |