Cisco Networking
Cisco Networking · Bugcrowd · launch date not exposed by platform
Live public bug bounty program on Bugcrowd with partial safe harbor. Max payout $10,000.
Metrics
Beginner fit
76/100
Estimated: this program has a wide attack surface to explore.
Activity metrics for this program aren't exposed by the platform API, so the scores above are conservative estimates. Always verify on the program page before submitting.
Engage
Open on BugcrowdAlways read the full policy on the platform before submitting. Scope below is a summary only.
In-scope assets
- *.meraki.com
- *.ikarem.io
- Cisco Meraki Systems Manager
- *.network-auth.com
- Cisco Meraki Dashboard Mobile Application (iOS and Android)
- Cisco Campus Gateways
- Cisco Catalyst 9200L Series Switches (Cloud-Managed)
- Cisco Meraki MX & Z Series Security Appliances (Including vMX)
- Cisco Meraki MS Switches
- Cisco Meraki MR Access Points
- Cisco Meraki MV Smart Cameras
- Cisco Meraki MG Fixed Wireless Access Devices
Wanted categories
Tech stack
Detected from the program's own description and scope assets — always confirm on the program page before relying on it.
Who should hunt here
Beginners
Workable- 12 assets in scope gives you room to explore without fighting a crowd for the same endpoints.
- Wide attack surface — 12 assets means overlooked corners (old subdomains, staging hosts) are statistically likely.
- Fast feedback — triage lands in ~3 days, so you learn what this team pays for quickly.
Intermediate
Good target- Real ceilings — payouts reach $10k, so chaining two medium findings into one report actually pays.
- IOT assets included — less-tested terrain than plain web.
Pros
High value- $10k ceiling — worth deep recon and targeted fuzzing; one critical here outearns a month of small programs.
- IOT surface — mobile/IoT/desktop flaws are rarely the first thing other pros automate.
- 12 assets scale well with automation — attack-surface monitoring and diffing pay off at this size.
Think twice if
- Heavily crowded — duplicates arrive within hours; only novel vectors or automation win here.
- Bugcrowd doesn't publish report volume — the competition and fit scores here are conservative estimates, not measurements.
- Program age is unknown — Bugcrowd doesn't expose start dates, so "freshness" can't be verified.
Where these numbers come from
Live from Bugcrowd
- Max payout & safe-harbor status — from the hourly public Bugcrowd crawl
- Full in-scope asset list — crawled from Bugcrowd's public program
Modeled estimates
- Minimum bounty — not exposed; assumed $0 floor
- Report volume — unknown; competition is scored from neutral defaults
- Triage & payout speed — modeled, not measured
- Beginner fit — computed from the signals above (methodology on this page)
Recon launchpad
One-click starting points per asset — certificate history, archived pages, leaked code, and exposed hosts. Open results in their own tabs.