Policy and restrictions
Intended execution of user-supplied code is not itself a security finding. Unlisted properties and third-party services are excluded. No staff contact through product features, service disruption or persistent public content. Low-impact configuration findings are generally excluded. Public disclosure is prohibited; safe harbor is conditional.
Eligibility and submission status
Designated researcher accounts and trial-license association are required, with activity limited to content they created. Reports need original analysis and reproducible impact; related instances generally share one report. Platform first-valid-report rules apply; monetary compensation requires age 18 or the applicable age of majority.
The official brief explicitly displays In progress and an ongoing period, with a submission link. Individual eligibility remains subject to live terms.
Advertised rewards
Advertised bands: P4 $200–$250, P3 $550–$750, P2 $1,200–$3,000 and P1 $3,000–$7,000. Priority may change with impact; some stored-script findings default to P3 unless broader impact is established. No individual award is asserted.
Advertised schedules and exceptional ceilings are not individual award evidence.
Published scope snapshot
Captured 2026-10-03. Check the current policy for changes before participating.
| Asset | Type | Group / eligibility |
|---|---|---|
https://matlab.mathworks.com/ [MATLAB ONLINE]Published location: https://matlab.mathworks.com/ | website | In Scope |
| Asset | Type | Group / eligibility |
|---|---|---|
| No rows captured. This does not establish that the program has no assets or restrictions. | ||
Review limitations
- Brief and reviewed change index show September 3, 2026 as the latest revision; individual diffs were not opened.
- The separately opened announcement archive explicitly contains no announcements. The separate unpaid disclosure route and license enrollment flow were not reviewed.
- USD normalization uses platform accounting documentation; the brief itself uses dollar signs. No individual award or payment is established.
- Public policy pages only; authenticated submission and incorporated legal documents were not exhaustively reviewed. Asset inventories and testing instructions are omitted. Live terms prevail; this summary grants no authorization.
Sources and provenance
- MATLAB Online - Ongoing Bug Bounty Engagement public brief MathWorks / Bugcrowd · reviewed 2026-10-03
- MATLAB Online - Ongoing Bug Bounty Engagement announcements MathWorks / Bugcrowd · reviewed 2026-10-03
- MATLAB Online - Ongoing Bug Bounty Engagement change index MathWorks / Bugcrowd · reviewed 2026-10-03
- Bugcrowd Organization Accounting Bugcrowd · reviewed 2026-10-03
- Bugcrowd Standard Disclosure Terms Bugcrowd · reviewed 2026-10-03
- Published Bugcrowd scope groups MathWorks · reviewed 2026-10-03
Record reviewed 2026-10-03. Snapshot 53796974ace8. Open the complete JSON contract.