wildhunter logo
Back to programs

HPE Networking Product Public Program

HPE Networking Product Public Program · Bugcrowd · launch date not exposed by platform

Medium competitionWebIot

Live public bug bounty program on Bugcrowd with full safe harbor. Max payout $5,000.

Metrics

Bounty range$0 – $5.0k
Paid this month$0
Reports0/mo
Hunters0

Beginner fit

76/100

Estimated: this program has a wide attack surface to explore.

Time to triage3d
Time to first bounty21d

Activity metrics for this program aren't exposed by the platform API, so the scores above are conservative estimates. Always verify on the program page before submitting.

Engage

Open on Bugcrowd

Always read the full policy on the platform before submitting. Scope below is a summary only.

Scope assets20
Bounty floor$0

In-scope assets

  • HPE Aruba Networking Wireless - AOS-10.7 and above Gateways (GW)
  • HPE Aruba Networking Wireless - AOS-10.7 and above Access Points (AP)
  • HPE Aruba Networking Central - New UI (see Scope Details)
  • ArubaOS-CX Switches
  • HPE Aruba Networking Wireless - AOS-8 Controllers
  • HPE Aruba Networking Wireless - AOS-8 Instant AP (IAP)
  • HPE Aruba Networking Wireless - AOS-10.4 Gateways (GW)
  • HPE Aruba Networking Wireless - AOS-10.4 Access Points (AP)
  • HPE Aruba Networking ClearPass Policy Manager
  • HPE Aruba Networking EdgeConnect SD-WAN Orchestrator
  • HPE Networking Instant On APs and supporting backend infrastructure
  • HPE Aruba Networking Fabric Composer
  • HPE Aruba Networking NetEdit
  • HPE Aruba Networking Private 5G
  • HPE Aruba Networking SSE

Wanted categories

General

Who should hunt here

Beginners

Workable
  • 20 assets in scope gives you room to explore without fighting a crowd for the same endpoints.
  • Wide attack surface — 20 assets means overlooked corners (old subdomains, staging hosts) are statistically likely.
  • Fast feedback — triage lands in ~3 days, so you learn what this team pays for quickly.

Intermediate

Good target
  • Real ceilings — payouts reach $5.0k, so chaining two medium findings into one report actually pays.
  • IOT assets included — less-tested terrain than plain web.
  • Moderate crowding: enough competition that obvious finds go fast, but systematic work on less-visited assets still pays.

Pros

High value
  • $5.0k ceiling — worth deep recon and targeted fuzzing; one critical here outearns a month of small programs.
  • IOT surface — mobile/IoT/desktop flaws are rarely the first thing other pros automate.
  • 20 assets scale well with automation — attack-surface monitoring and diffing pay off at this size.

Think twice if

  • Bugcrowd doesn't publish report volume — the competition and fit scores here are conservative estimates, not measurements.
  • Program age is unknown — Bugcrowd doesn't expose start dates, so "freshness" can't be verified.

Where these numbers come from

Live from Bugcrowd

  • Max payout & safe-harbor status — from the hourly public Bugcrowd crawl
  • Full in-scope asset list — crawled from Bugcrowd's public program

Modeled estimates

  • Minimum bounty — not exposed; assumed $0 floor
  • Report volume — unknown; competition is scored from neutral defaults
  • Triage & payout speed — modeled, not measured
  • Beginner fit — computed from the signals above (methodology on this page)
HPE Networking Product Public Program (Bugcrowd) — wildhunter