Contrast Security

We hope your testing is going well. Here is an update that should make things a bit more interesting!

Future reports will be graciously accepted, however, please note that we are specifically interested in bypasses that can be performed remotely (versus requiring local access to the underlying application server). We are looking for researchers to find and report vulnerabilities in our Protect Product, including but not limited to:

All agents, all languages
Agent onboarding
Agent operator
Agent bypasses
Agent DOS
Remote code execution via our Agents

As always, please see the program brief for the full details around testing. If you have any questions, please reach out to Bugcrowd Support Portal.

Get out there and lay claim to those bugs!