What this record establishes
Scope capture
Published asset rows were captured. The full policy and eligibility were not individually reviewed.
Directory row 443; Active program checkbox checked; Bounties minimum displayed $0. Program type unknown: no positive displayed minimum; absence or zero does not establish VDP. Policy and live submission availability unverified.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
dash.cloudflare.com | URL | Bounty eligible: Yes |
cloudflareworkers.com | URL | Bounty eligible: Yes |
*.teams.cloudflare.com | URL | Bounty eligible: Yes |
api.cloudflare.com | URL | Bounty eligible: Yes |
*.cloudflare.com | URL | Bounty eligible: Yes |
http://github.com/cloudflare | URL | Bounty eligible: Yes |
one.dash.cloudflare.com | URL | Bounty eligible: Yes |
https://github.com/cloudflare/workerd | SOURCE_CODE | Bounty eligible: Yes |
https://github.com/cloudflare/vinext | SOURCE_CODE | Bounty eligible: Yes |
Cloudflare Pages | OTHER | Bounty eligible: Yes |
CDNJS | OTHER | Bounty eligible: Yes |
WARP Mobile Apps | OTHER | Bounty eligible: Yes |
Cloudflare Access | OTHER | Bounty eligible: Yes |
Stream | OTHER | Bounty eligible: Yes |
1.1.1.1 Resolver | OTHER | Bounty eligible: Yes |
Magic Transit | OTHER | Bounty eligible: Yes |
Spectrum | OTHER | Bounty eligible: Yes |
Load Balancing | OTHER | Bounty eligible: Yes |
Bot Management | OTHER | Bounty eligible: Yes |
Cloudflare Zero Trust/Cloudflare One | OTHER | Bounty eligible: Yes |
Open source tools from Cloudflare | OTHER | Bounty eligible: Yes |
Area 1 | OTHER | Bounty eligible: Yes |
Cloudflare D1 | OTHER | Bounty eligible: Yes |
Cloudflare R2 | OTHER | Bounty eligible: Yes |
WARP desktop client | OTHER | Bounty eligible: Yes |
*.cloudflarepartners.com | OTHER | Bounty eligible: Yes |
Cloudflare DNS | OTHER | Bounty eligible: Yes |
Cloudflare CASB | OTHER | Bounty eligible: Yes |
Workers | OTHER | Bounty eligible: Yes |
Cloudflare Tunnel | OTHER | Bounty eligible: Yes |
AMP Real URL | OTHER | Bounty eligible: Yes |
Cloudflare Cache | OTHER | Bounty eligible: Yes |
Magic Firewall | OTHER | Bounty eligible: Yes |
Cloudflare Zaraz | OTHER | Bounty eligible: Yes |
China Network | OTHER | Bounty eligible: Yes |
API Shield | OTHER | Bounty eligible: Yes |
Gateway | OTHER | Bounty eligible: Yes |
Browser Isolation | OTHER | Bounty eligible: Yes |
AI Gateway | OTHER | Bounty eligible: Yes |
Vectorize | OTHER | Bounty eligible: Yes |
Hyperdrive | OTHER | Bounty eligible: Yes |
Workers KV | OTHER | Bounty eligible: Yes |
Cloudflare Analytics | OTHER | Bounty eligible: Yes |
Cloudflare Durable Objects | OTHER | Bounty eligible: Yes |
Waiting Room | OTHER | Bounty eligible: Yes |
Magic WAN | OTHER | Bounty eligible: Yes |
Data Loss Prevention (DLP) | OTHER | Bounty eligible: Yes |
SSL/TLS | OTHER | Bounty eligible: Yes |
Cloudflare Workers CI | OTHER | Bounty eligible: Yes |
Images | OTHER | Bounty eligible: Yes |
Workers AI | AI_MODEL | Bounty eligible: Yes |
| Asset | Type | Group / eligibility |
|---|---|---|
*.plugins.realtime.cloudflare.com | WILDCARD | Bounty eligible: No |
support.cloudflare.com | URL | Bounty eligible: No |
community.cloudflare.com | URL | Bounty eligible: No |
support.cloudflarewarp.com | URL | Bounty eligible: No |
waf.cumulusfire.net | URL | Bounty eligible: No |
events.www.cloudflare.com | URL | Bounty eligible: No |
demo.realtime.cloudflare.com | URL | Bounty eligible: No |
api.staging.realtime.cloudflare.com | URL | Bounty eligible: No |
examples.realtime.cloudflare.com | URL | Bounty eligible: No |
react-examples.realtime.cloudflare.com | URL | Bounty eligible: No |
app.dyte.io | URL | Bounty eligible: No |
test.realtime.cloudflare.com | URL | Bounty eligible: No |
files.plugins.realtime.cloudflare.com | URL | Bounty eligible: No |
https://github.com/cloudflare/vinext-private | SOURCE_CODE | Bounty eligible: No |
https://github.com/cloudflare/moq-rs | SOURCE_CODE | Bounty eligible: No |
https://github.com/cloudflare/privacy-gateway-server-go | SOURCE_CODE | Bounty eligible: No |
https://github.com/cloudflare/saffron.git | SOURCE_CODE | Bounty eligible: No |
https://github.com/cloudflare/realtimekit-web-examples | SOURCE_CODE | Bounty eligible: No |
https://github.com/cloudflare/recapn | SOURCE_CODE | Bounty eligible: No |
https://github.com/cloudflare/computer | SOURCE_CODE | Bounty eligible: No |
https://github.com/cloudflare/cloudflare-os | SOURCE_CODE | Bounty eligible: No |
https://github.com/cloudflare/templates | SOURCE_CODE | Bounty eligible: No |
https://github.com/cloudflare/pp-browser-extension | SOURCE_CODE | Bounty eligible: No |
https://github.com/cloudflare/agentic-inbox | SOURCE_CODE | Bounty eligible: No |
https://github.com/cloudflare/cf | SOURCE_CODE | Bounty eligible: No |
Turnstile | OTHER | Bounty eligible: No |
172.65.0.0/16 | OTHER | Bounty eligible: No |
Capture limits
- Only the published asset table was captured; program rules and eligibility still require individual review.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty. No identity match is inferred from a shared company name.