What this record establishes
Scope capture
Published asset rows were captured. The full policy and eligibility were not individually reviewed.
Directory page 3 explicitly labels this Bug bounty program; full program policy not reviewed; no active/paused status shown.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
https://github.com/grafana/loki | Source code | Tier 1 |
https://github.com/grafana/mimir | Source code | Tier 1 |
https://github.com/grafana/grafana | Source code | Tier 1 |
https://github.com/grafana/pyroscope | Source code | Tier 1 |
https://github.com/grafana/tempo | Source code | Tier 1 |
https://github.com/grafana/* | Wildcard | Tier 2 |
Public Preview feature toggles in Tier 1 products | Other | Tier 2 |
Reports utilising feature toggles | Other | No bounty |
Non-Core Grafana Plugins | Other | No bounty |
| Asset | Type | Group / eligibility |
|---|---|---|
*.grafana.com | Wildcard | |
*.grafana.net | Wildcard |
Capture limits
- Only the published asset table was captured; program rules and eligibility still require individual review.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty. No identity match is inferred from a shared company name.