Wyze Bug Bounty
Wyze Bug Bounty · Bugcrowd · launch date not exposed by platform
Live public bug bounty program on Bugcrowd. Max payout $5,000.
Metrics
Beginner fit
62/100
Estimated: this program accepts low-severity findings worth reporting.
Activity metrics for this program aren't exposed by the platform API, so the scores above are conservative estimates. Always verify on the program page before submitting.
Engage
Open on BugcrowdAlways read the full policy on the platform before submitting. Scope below is a summary only.
In-scope assets
- https://auth.wyze.com
- https://my.wyze.com
- https://api.wyzecam.com
- Wyze Cam V3
- https://www.wyze.com/products/wyze-cam
Wanted categories
Tech stack
Detected from the program's own description and scope assets — always confirm on the program page before relying on it.
Who should hunt here
Beginners
Workable- 5 assets in scope gives you room to explore without fighting a crowd for the same endpoints.
- Wide attack surface — 5 assets means overlooked corners (old subdomains, staging hosts) are statistically likely.
- Fast feedback — triage lands in ~3 days, so you learn what this team pays for quickly.
Intermediate
Good target- Real ceilings — payouts reach $5.0k, so chaining two medium findings into one report actually pays.
- APIs are in scope — where medium hunters get paid: broken object-level authorization, mass assignment, and rate-limit gaps.
- IOT assets included — less-tested terrain than plain web.
Pros
High value- $5.0k ceiling — worth deep recon and targeted fuzzing; one critical here outearns a month of small programs.
- IOT surface — mobile/IoT/desktop flaws are rarely the first thing other pros automate.
Think twice if
- Heavily crowded — duplicates arrive within hours; only novel vectors or automation win here.
- Bugcrowd doesn't publish report volume — the competition and fit scores here are conservative estimates, not measurements.
- Program age is unknown — Bugcrowd doesn't expose start dates, so "freshness" can't be verified.
Where these numbers come from
Live from Bugcrowd
- Max payout & safe-harbor status — from the hourly public Bugcrowd crawl
- Full in-scope asset list — crawled from Bugcrowd's public program
Modeled estimates
- Minimum bounty — not exposed; assumed $0 floor
- Report volume — unknown; competition is scored from neutral defaults
- Triage & payout speed — modeled, not measured
- Beginner fit — computed from the signals above (methodology on this page)
Recon launchpad
One-click starting points per asset — certificate history, archived pages, leaked code, and exposed hosts. Open results in their own tabs.
auth.wyze.com
api.wyzecam.com
www.wyze.com