What this record establishes
Scope capture
Published asset rows were captured. The full policy and eligibility were not individually reviewed.
Directory row 320; Active program checkbox checked; Bounties minimum displayed $50. Positive displayed minimum supports paid bounty listing. Policy and live submission availability unverified.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
ap-s.cloud.com | URL | Bounty eligible: Yes |
eu.cloud.com | URL | Bounty eligible: Yes |
us.cloud.com | URL | Bounty eligible: Yes |
*.citrixworkspacesapi.net | URL | Bounty eligible: Yes |
onboarding.cloud.com | URL | Bounty eligible: Yes |
onboarding-*.cloud.com | URL | Bounty eligible: Yes |
accounts.cloud.com | URL | Bounty eligible: Yes |
adm.cloud.com | URL | Bounty eligible: Yes |
api.adm.cloud.com | URL | Bounty eligible: Yes |
Citrix Secure Access client for Windows | OTHER | Bounty eligible: Yes |
Citrix Secure Access client for iOS | OTHER | Bounty eligible: Yes |
Citrix Secure Access client for Linux | OTHER | Bounty eligible: Yes |
Citrix End Point Analysis (EPA) client for Linux | OTHER | Bounty eligible: Yes |
Citrix End Point Analysis (EPA) client for Windows | OTHER | Bounty eligible: Yes |
Citrix Secure Access client for Android | GOOGLE_PLAY_APP_ID | Bounty eligible: Yes |
Citrix Secure Access client for macOS | APPLE_STORE_APP_ID | Bounty eligible: Yes |
*developer.cloud.com | URL | Bounty eligible: No |
| Asset | Type | Group / eligibility |
|---|---|---|
citrix.cloud.com | URL | Bounty eligible: No |
www.cloud.com | URL | Bounty eligible: No |
accounts-internal.cloud.com | URL | Bounty eligible: No |
launch.cloud.com | URL | Bounty eligible: No |
*.citrix*.com | URL | Bounty eligible: No |
*.cloudburrito.com | URL | Bounty eligible: No |
*.securevdr.com | URL | Bounty eligible: No |
*.podio.com | URL | Bounty eligible: No |
(yoursubdomain).us.iws.cloud.com | URL | Bounty eligible: No |
(yoursubdomain).ap.iws.cloud.com | URL | Bounty eligible: No |
(yoursubdomain).eu.iws.cloud.com | URL | Bounty eligible: No |
(youriwssubdomain).cloud.com | URL | Bounty eligible: No |
*.xmtest.cloud.com | URL | Bounty eligible: No |
*.xmqa.cloud.com | URL | Bounty eligible: No |
*.xmdev.cloud.com | URL | Bounty eligible: No |
*.browser.cloud.com | OTHER | Bounty eligible: No |
Capture limits
- Only the published asset table was captured; program rules and eligibility still require individual review.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty. No identity match is inferred from a shared company name.