Policy and restrictions
Protect customer privacy, integrity and availability. Social engineering and disruption are prohibited; automation and researcher identification are constrained. Disclosure requires written consent.
Eligibility and submission status
Reproducible findings and researcher-identified accounts are required. Platform first-valid-report, identity-check, adulthood or guardian-approved age-16, and legal/employer eligibility requirements apply.
Logged-out policy and login invitation do not independently verify current acceptance.
Advertised rewards
Tier 2: EUR 50–5,000; Tier 3: EUR 50–2,000. Shared causes yield one bounty. A discretionary EUR 25 delayed-validation bonus is excluded from these bounds.
Advertised schedules and exceptional ceilings are not individual award evidence.
Published scope snapshot
Captured 2026-10-03. Check the current policy for changes before participating.
| Asset | Type | Group / eligibility |
|---|---|---|
https://portal.exoscale.com/ | URL | Tier 2 |
https://api-*exoscale.com/v2 | Wildcard | Tier 2 |
https://sos-*.exo.io | Wildcard | Tier 2 |
https://sks-*.exo.io | Wildcard | Tier 2 |
*.internal.exoscale.ch | Wildcard | Tier 2 |
https://www.exoscale.com/ | URL | Tier 3 |
https://community.exoscale.com/ | URL | Tier 3 |
| Asset | Type | Group / eligibility |
|---|---|---|
https://changelog.exoscale.com/ | URL | |
https://exoscalestatus.com/ | URL | |
https://academy.exoscale.com/ | URL | |
https://jobs.exoscale.com/ | URL | |
CDN service | Other | |
Marketplace products | Other |
Review limitations
- No dedicated program announcement archive or complete revision history was established.
- Logged-out text review; authenticated eligibility and incorporated documents were not exhaustively checked.
- High-level summaries omit inventories and testing instructions. Live terms prevail; this record grants no authorization.
Sources and provenance
- Exoscale Bug Bounty policy Exoscale / Akenes SA / Intigriti · reviewed 2026-10-03
- Intigriti Researcher Terms & Conditions Intigriti · reviewed 2026-10-03
- Published Intigriti asset table Exoscale / Akenes SA · reviewed 2026-10-03
Record reviewed 2026-10-03. Snapshot 53796974ace8. Open the complete JSON contract.