Okta

  • $100 – $75,000 per vulnerability
  • Safe harbor

Okta - Update to the scope! Okta Device Access!

We have exciting news for Okta!

We have added Okta Device Access to the program scope.

Okta Device Access extends IAM (Identity and Access Management) capabilities across devices and applications, increasing your org's security posture and protecting you from phishing attacks. Local device data is protected by the same Identity Provider that protects access to data and applications in the cloud.

Users access sensitive information by signing in to their computers with their authenticated Okta credentials from anywhere, even without an internet connection. Okta Device Access secures devices, simplifies the single sign-on experience, and streamlines access to devices and apps. Organizations can meet compliance needs and equip employees to work productively.

Documentation

Downloads

Download Okta Verify for Windows & macOS

  • Desktop MFA is part of Okta Device Access, which uses Okta Verify for device registration and user authentication. In the Admin Console, go to Settings -> Downloads and download either Okta Verify for Windows (.exe) or Okta Verify for macOS

Bonus

The bonus will run until the end of January 2024.

  • $500 bonus will be awarded for all valid and accepted P3 submissions
  • $1000 bonus will be awarded for all valid and accepted P1 & P2 submissions

As always, please be sure to review the program brief in detail, and if you have any questions, please reach out support@bugcrowd.com.

Happy Hunting!