AS
BugcrowdOffers Rewards
Asana
Asana appears to run a bug bounty or vulnerability disclosure program on Bugcrowd. It also offers rewards for valid security reports.
Created: February 15, 2026
Last Updated: October 5, 2026
In Scope (10)
https://app.asana.com
https://asana.com
https://asana.com/apps?category=made-by-asana
https://asana.com/download
https://apps.apple.com/us/app/asana-mobile/id489969512
https://play.google.com/store/apps/details?id=com.asana.app&hl=en
https://form.asana.com
*.app.asana.com
https://*.asana.biz
Subdomain takeover at *asana.biz
Out of Scope (6)
Other subdomains of asana.com
Social engineering against Asana Support or Asana Employees
jira*.integrations.asana.plus
asana.okta.com
assets.asana.biz
Forms that you do not own