Work at Glean Technologies Public Engagement? Claim it to respond to reviews as the verified owner.
Found a vulnerability?
If you would rather not deal with the vendor yourself, a BugRater analyst will submit it upstream on your behalf, with your explicit permission, and tell you what came back.
Ask BugRater to submit itPrivate. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.
Reviews
0 publishedNo reviews yet.
Facts published by Bugcrowd on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 19 Sep 2026.
Glean Responsible Vulnerability Disclosure Glean is an enterprise search and work assistant designed to streamline the process of finding necessary information across various workplace tools such as chat, email, document repositories, bug tracking tools, customer support systems, and internal wikis. It aims to address the challenge of fragmented workplace information, making it easier for teams to accomplish their goals by providing exactly the information needed at the right time. Glean operates by searching all of your apps across your entire company, understanding context, language, behavior, and relationships to find personalized answers to your questions. At Glean we take security very seriously and recognise the value external security researchers bring to the overall security of Glean’s solution. If you believe that you have found a security vulnerability on Glean’s in-scope sites/domains/paths, we encourage you to let us know straight away. We will investigate all legitimate reports and do our best to quickly fix the problem. Before reporting, please review this page including the process and exceptions sections. Ratings/Rewards: For the initial prioritization/rating of findings, this program will use the Bugcrowd Vulnerability Rating Taxonomy. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, an explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.
Scope
5 assets| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| Backend endpoint: bug-bounty-be.glean.com | api | ✓ bounty | not set |
| Frontend portal: https://app.glean.com/login?qe=https://bug-bounty-be.glean.com&skip_to_sso=1 | website | ✓ bounty | not set |
| Glean Activity Plugin for Jira Cloud- https://marketplace.atlassian.com/apps/1229003/glean-activity-plugin-for-jira-cloud?hosting=cloud&tab=overview | website | ✓ bounty | not set |
| Scio Search Crawler for Confluence- https://marketplace.atlassian.com/apps/1222714/scio-search-crawler-for-confluence?hosting=cloud&tab=overview | website | ✓ bounty | not set |
| Scio Search Crawler for Jira- https://marketplace.atlassian.com/apps/1222715/scio-search-crawler-for-jira?hosting=cloud&tab=overview | website | ✓ bounty | not set |