Crowdstrike

HackerOne live web

Bug bounty program on HackerOne. Official listing: https://hackerone.com/crowdstrike. Scope and rules are controlled by the program — always verify against the official listing before testing.

Max bounty
$8K
Starts
2018-01-17
In-scope assets
19
Last updated
2026-06-16

In-scope assets

TypeAssetDetail
web *.adaptive-shield.com Excluding 3rd party maintained targets
web *.bionic.ai Excluding 3rd party maintained targets
web *.crowdstrike.com **Excluding 3rd party maintained targets**
web *.flowsecurity.app Excluding 3rd party maintained targets
web *.humio.com **Excluding 3rd party maintained targets**
web *.preempt.com **Excluding 3rd party maintained targets**
web *.preemptsecurity.com **Excluding 3rd party maintained targets**
web *.reposify.com **Excluding 3rd party maintained targets**
web *.securecircle.com **Excluding 3rd party maintained targets**
web falcon-sandbox.com
web hybrid-analysis.com
web onum-labs.com Excluding 3rd party maintained targets
web onum.com Excluding 3rd party maintained targets
web sgnl.ai Including all public SGNL infrastructure
web sgnl.cloud Including all public SGNL infrastructure
web sgnl.team Including all public SGNL infrastructure
web sgnlapis.cloud Including all public SGNL infrastructure
web www.crowdstrike.com
web www.crowdstrike.org **CrowdStrike Foundation Website**

Watching Crowdstrike? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.

Track this program