Zendesk Managed Bug Bounty Engagement

Bugcrowd published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade. Last checked 5 Nov 2026.

Zendesk is the complete customer service platform, powered by AI. Equip your agents with powerful AI tools and workflows that boost efficiency and elevate customer experiences across every channel. Ratings/Rewards and Bounty Rules: For the initial prioritisation/rating of findings, this program will use the BugCrowd Vulnerability Rating Taxonomy. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority. Access The targets within scope are publicly accessible. Credentials All research must be conducted using your own Zendesk instance which you can sign up for here. When asked for an email, please provide your @bugcrowdninja.com email address. When asked for your company name, please use the following: bb-<bugcrowd-username> In cases where you need to create additional accounts or need to test beyond the trial period, please increment your company name with an appropriate integer or date-based string Your account should end up with a domain name that looks like bb-acidburn-01.zendesk.com