SO
BugcrowdOffers Rewards
Sophos
Sophos appears to run a bug bounty or vulnerability disclosure program on Bugcrowd. It also offers rewards for valid security reports.
Created: February 15, 2026
Last Updated: October 5, 2026
In Scope (15)
https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial
https://central.sophos.com/
Sophos Firewall (XG/XGS, SFOS) - Pre-auth RCE
https://central.sophos.com
https://www.sophos.com/en-us/products/next-gen-firewall
https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial
https://www.sophos.com/en-us/products/mobile-control/free-trial
https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/ThreatAnalysisCenter/Integrations/Sophos/NDR/index.html
https://www.sophos.com/en-us/products
https://www.sophos.com/
SOPHOS/Secureworks : Taegis
SOPHOS/Secureworks : Redcloak
3rd party services hosted at *.sophos.com
Sophos IT Infrastructure (all other Sophos domains)
Any Other Sophos Product or Service
Out of Scope (5)
community.sophos.com
Any Cyberoam Product or Service
sophos.atlassian.net (Public service desk)
SPF/DKIM/DMARC issues
Sophos Firewall (Early Access Program (EAP) versions)