CA
BugcrowdOffers Rewards
Canva
Canva appears to run a bug bounty or vulnerability disclosure program on Bugcrowd. It also offers rewards for valid security reports.
Created: February 15, 2026
Last Updated: October 5, 2026
In Scope (18)
https://www.canva.com
https://www.canva.com/developers/
Apps SDK Sandboxing
https://api.canva.com
*.canva.com
*.canva-apps.com
https://*.canva.tech
https://www.canva.com/en_au/help/chatgpt-templates/
https://www.canva.com/integrations/slack/
Canva Desktop (macOS / Windows)
Canva
Canva
Canva (Chrome Extension)
*.canva.cn
*.canva-apps.cn
Leaked Credentials and Secrets (Canva Employee/Contractor)
Leaked Credentials and Secrets (Canva User)
3rd-Party Provider Vulnerability
Out of Scope (0)
No out-of-scope items specified