Arrow Electronics VDP

  • Safe harbor
  • No collaboration

Discontinue use of scanners and please add a header while testing on Arrow VDP

We have been asked by Arrow Electronics to discontinue the use of all automated vulnerability scanners on their program, as it has been disruptive for them. If you are identified as using automated scanning tools, you will be asked to leave the Arrow VDP program.

If you have any questions, please reach out to support@bugcrowd.com for any clarification on why scanners are no longer allowed.

Also, for testing, please add the following HTTP header that includes your Bugcrowd username. This will help the Arrow Electronics team identify that activity is coming from a researcher on the program and ensure that your testing is not blocked or interrupted.

Identifier Header Example
Username X-Bug-Bounty: Bugcrowd-<Username> X-Bug-Bounty: Bugcrowd-proresearcher

Thank you for your help with this.