Cloudflare VRP
Dashboard, Workers, Access, DNS, CDN bypasses. High bar, high quality, lots of 'this is intended edge behaviour'.
Tags: vendor, hackerone, cdn
- Program model
- Vendor on HackerOne
- Regions
- Global
- Payout
- USD via HackerOne
Specialties: web, cdn, workers, auth
How to approach it
Bypassing WAF on a customer zone is usually out. Bypassing Cloudflare's own auth is in. Read it twice.
- Workers / Access / Zero Trust have been the interesting surface.
- Do not DoS the anycast network. They mean it.