Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
aiven-mbb-og
20
In Scope
14
Out of Scope
In-Scope Assets (20)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| Aiven for AlloyDB Omni | OTHER | No | - | |
| Aiven for Apache Cassandra | OTHER | No | - | |
| Aiven for Apache Flink | OTHER | No | - | |
| Aiven for Apache Kafka | OTHER | No | - | |
| Aiven for Caching | OTHER | No | - | |
| Aiven for Dragonfly | OTHER | No | - | |
| Aiven for Grafana | OTHER | No | - | |
| Aiven for MySQL | OTHER | No | - | |
| Aiven for OpenSearch | OTHER | No | - | |
| Aiven for PostgreSQL | OTHER | No | - | |
| Aiven for Valkey | OTHER | No | - | |
| http://falcon-bug-bounty-flag-pgsql-dev-sandbox.aivencloud.com/ | OTHER | No | - | |
| https://aiven.io/ | URL | No | ||
| https://aiven.io/clickhouse | OTHER | No | - | |
| https://aiven.io/docs/products/metrics/concepts/metrics-overview | OTHER | No | - | |
| https://api.aiven.io/login | URL | No | ||
| https://console.aiven.io/login | URL | No | ||
| https://github.com/Aiven | OTHER | No | - | |
| https://github.com/Aiven-Open | OTHER | No | - | |
| https://regatta.aiven.io/ | URL | No |
Out-of-Scope Assets (14)
| Asset | Category | Bounty | |
|---|---|---|---|
| *.aiven.fi | OTHER | No | |
| *.avns.net | OTHER | No | |
| Creation of support tickets | URL | No | |
| Customer services you did not create | OTHER | No | |
| aquarium.aiven.io | URL | No | |
| github.com/Aiven-Labs | OTHER | No | |
| https://aiven.io/community | URL | No | |
| https://aiven.io/contact | URL | No | |
| https://aivenhelp.zendesk.com | URL | No | |
| https://events.aiven.io | URL | No | |
| https://support.aiven.io | URL | No | |
| ideas.aiven.io | OTHER | No | |
| uptime.aiven.io | URL | No | |
| video.aiven.io | URL | No |