Work at Rec Room Video Games? Claim it to respond to reviews as the verified owner.
Found a vulnerability?
If you would rather not deal with the vendor yourself, a BugRater analyst will submit it upstream on your behalf, with your explicit permission, and tell you what came back.
Ask BugRater to submit itPrivate. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.
Reviews
0 publishedNo reviews yet.
Facts published by Bugcrowd on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 19 Sep 2026.
Important: Do not use vulnerability scanners on this program. Rec Room is the best place to build and play games together. Party up with friends from all around the world to chat, hang out, explore MILLIONS of player-created rooms, or build something new and amazing to share with us all. Rec Room is free, and cross plays on everything from phones to VR headsets. It’s the social app you play like a video game! No technology is perfect and Rec Room believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. We are excited for you to participate as a security researcher to help us identify vulnerabilities in our targets. Good luck, and happy hunting! Support: For bugs/issues pertaining to in game experience (that don't pose a security impact), please refer to our Submitting an In-Game Bug Report support article. Changelog: New updates can be found here: https://recroom.com/ship-notes Ratings/Rewards: For the initial prioritization/rating of findings, this program will use the Bugcrowd Vulnerability Rating Taxonomy. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority. In-game Items As a thanks for keeping Rec Room secure, we are also rewarding exclusive in-game items in addition to cash. Item Requirements Requirement Reward Submission was rewarded points Hackola 25 points earned total Hacker Suit (white) 50 points earned total Hacker Hat (white) All the items above require a Rec Room account to be received. For the Hacker Suit and Hacker Hat, we require you to share your Rec Room username in order for us to process the rewards. We reserve the right to not reward Rec Room items for submissions, based off of our discretion after review. Collaborator Points Bonus For any submission with collaborators, the points given will be doubled and capped at total number of points rewarded for the given priority. For example, Researcher A is getting 60%, and Researcher B is getting 40%. The submission is rewarded a total of 20 points. Researcher A gets 12 points, and Researcher B gets 8 points. With item rewards, we will count these points as 20 points for Researcher A, and 16 points for Researcher B. Please note that if you have collaborated, your total points in our program does not include our bonus.
Scope
11 assets| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| ███ | ios | ✓ bounty | not set |
| ████ | other | ✓ bounty | not set |
| ███████ | android | ✓ bounty | not set |
| █████████████ | other | ✓ bounty | not set |
| ███████████████ | other | ✓ bounty | not set |
Show all 11 assets
| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| ████████████████ | website | ✓ bounty | not set |
| ███████████████████ | api | ✓ bounty | not set |
| ████████████████████ | api | ✓ bounty | not set |
| ███████████████████████ | other | ✓ bounty | not set |
| ██████████████████████████ | api | ✓ bounty | not set |
| █████████████████████████████████████████████ | other | ✓ bounty | not set |
Bugcrowd lists 15 scope entries; its public listing groups many assets under one label, so identical entries are shown once.