{"id":"96267c44-4fde-4575-a2ce-5fd89bb24596","engagementId":"04466941-3d80-427a-bd1b-112a71b59476","data":{"brief":{"id":"984db9b3-04ea-4b3f-ab2a-08d0d29e73a4","name":"Dyson Demo VDP Engagement","tagline":"Help us make Dyson more secure! ","description":"\u003ch2\u003eProgram Overview\u003c/h2\u003e\n\n\u003cp\u003eWelcome to the Dyson Vulnerability Disclosure Program, powered by Bugcrowd! At Dyson, we’re committed to pushing the boundaries of technology to solve everyday problems—whether it’s through our cutting-edge appliances, connected devices, or digital platforms. Security is at the core of our mission to deliver exceptional experiences to our customers worldwide. That’s why we’re inviting the global security researcher community to help us identify and address vulnerabilities in our systems.\u003c/p\u003e\n\n\u003cp\u003eThis program is designed to reward talented researchers like you for finding security issues in our in-scope assets. Whether you’re testing our web applications, mobile apps, or IoT devices, your efforts will help us ensure our products remain safe, reliable, and trusted. Let’s work together to keep Dyson at the forefront of innovation and security!\u003c/p\u003e\n\n\u003ch2\u003eRules of Engagement\u003c/h2\u003e\n\n\u003cp\u003eTo ensure a smooth and productive experience for everyone, please adhere to the following guidelines:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eRespect the Scope:\u003c/strong\u003e Only test against the targets listed as in-scope. Testing out-of-scope assets may result in a report being marked as Out of Scope and a -1 point penalty.\u003c/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eNo Disruption:\u003c/strong\u003e Avoid actions that could degrade service availability or performance for Dyson customers (e.g., excessive automated testing).\u003c/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eConfidentiality:\u003c/strong\u003e Do not disclose any vulnerabilities publicly without explicit permission from Dyson and Bugcrowd. All submissions are considered confidential unless otherwise stated.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eSubmission Guidelines\u003c/h2\u003e\n\n\u003cp\u003eWhen you find a vulnerability, submit it through the Bugcrowd platform:\u003c/p\u003e\n\n\u003col\u003e\n\u003cli\u003eClick “Submit Report” on this program page.\u003c/li\u003e\n\u003cli\u003eProvide a clear title (e.g., “XSS in shop.dyson.com checkout”).\u003c/li\u003e\n\u003cli\u003eInclude detailed steps to reproduce, including:\n\n\u003cul\u003e\n\u003cli\u003eURL or target affected\u003c/li\u003e\n\u003cli\u003eHTTP requests/responses (if applicable)\u003c/li\u003e\n\u003cli\u003eScreenshots or video proof-of-concept\u003c/li\u003e\n\u003cli\u003eDescription of potential impact\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eHit “Submit” and track your report’s status in real-time.\u003c/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eResponsible Testing:\u003c/strong\u003e Provide detailed steps to reproduce any vulnerabilities you find, including proof-of-concept code where applicable.\u003c/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eQuestions?\u003c/strong\u003e Contact Bugcrowd Support via the platform if you’re unsure about scope or rules.\n## Rewards\nWe value your contributions and offer monetary rewards for valid, in-scope vulnerabilities. Rewards are determined based on the severity and impact of the finding, aligned with Bugcrowd’s Vulnerability Rating Taxonomy (VRT).\u003c/li\u003e\n\u003c/ol\u003e\n\n\u003ch2\u003eDisclosure Policy\u003c/h2\u003e\n\n\u003cp\u003eDyson follows a \u003cstrong\u003eCoordinated Disclosure\u003c/strong\u003e policy. Please do not share details of any vulnerabilities publicly until we’ve had a chance to investigate and remediate them. We’ll work with you to ensure timely resolution and, where appropriate, coordinate public acknowledgment of your contribution.\u003c/p\u003e","industryTagId":"6825f068-7447-450e-9134-158ae26e18d4","targetsOverview":"\u003cp\u003eThis program focuses on anything that is or could potentially be own, created or manufactured by Dyson. We want to hear your feedback surrounding security concerns; all of it! As much as possible. \u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[],"resources":[],"engagement":{"id":"04466941-3d80-427a-bd1b-112a71b59476","code":"dyson-demo-vdp-engagement","state":"in_progress","endsAt":"2025-07-15T00:00:00Z","bountyId":"966b631c-8477-4fbd-af85-8ef1ab24ba70","startsAt":"2025-04-15T06:26:26Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Computer Hardware","methodologyName":null,"logoUrl":"https://assets.bugcrowdusercontent.com/assets/2014/icons/logo-empty-ca064fa6.png","logoBackgroundColor":"#2a2d40","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2025-04-15T06:26:26.735Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/dyson-demo-vdp-engagement","changelogs":"/engagements/dyson-demo-vdp-engagement/changelog","submissions":null,"announcements":"/engagements/dyson-demo-vdp-engagement/announcements","hallOfFame":"/engagements/dyson-demo-vdp-engagement/hall_of_fames","crowdstream":"/engagements/dyson-demo-vdp-engagement/crowdstream"},"announcementsCount":0,"knownIssuesEnabled":true,"isDemo":true,"serviceLevel":"Platform","submitReportUrl":"/engagements/dyson-demo-vdp-engagement/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=dyson-demo-vdp-engagement\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/dyson-demo-vdp-engagement/engagement_subscribers","engagementChangelogsUrl":"/engagements/dyson-demo-vdp-engagement/changelog","publishedAt":"2025-04-15T06:26:26.776Z","engagementChangelogUrl":"/engagements/dyson-demo-vdp-engagement/changelog/96267c44-4fde-4575-a2ce-5fd89bb24596","createUserFeedbacksUrl":"/engagements/dyson-demo-vdp-engagement/feedbacks","engagementCrowdstreamUrl":"/engagements/dyson-demo-vdp-engagement/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}