Tesla Bug Bounty
Vehicle, energy, web, apps. Famous scope, famous swag, famous 'do not brick a car' rules.
Tags: vendor, bugcrowd, vehicle
- Program model
- Vendor on Bugcrowd
- Regions
- Global
- Payout
- USD via Bugcrowd; vehicle research has its own rules
Specialties: web, mobile, vehicle, hardware
How to approach it
Read the vehicle testing constraints. Remote web/API is the on-ramp; hardware is a different sport.
- Web/API IDOR and auth on owner services have been the volume play.
- Physical/vehicle research needs the policy's explicit permission model.