SoundCloud

SoundCloud is the world’s largest open audio platform. With over 200 million tracks from 20 million creators heard in 190 countries, what’s next in music is first on SoundCloud.

  • $200 – $4,500 per vulnerability
  • Safe harbor
Submit report

Scope update for *.soundcloud.com and mobile clients

We have exciting news for SoundCloud!

There have been updates within all in-scope targets as of February 17, 2021. This update brings about the following changes with links to relevant resources.

Adding Mobile clients into scope:

Broaden the in-scope targets of Soundcloud subdomains:

  • *.soundcloud.com is now in-scope to allow testing against all subdomains of Soundcloud (excluding those mentioned in the out-of-scope section)

Before submitting a new vulnerability for mobile please review the new "Out-of-Scope mobile" and changes to the "Out-of-Scope" section in the program brief.

As always, please be sure to review the full program brief in detail, and if you have any questions, please reach out support@bugcrowd.com.

Happy Hunting!
@Anrock

anrock
anrock