Which products or software are eligible? What is Crowdfense’s scope?

We acquire vulnerability research and exploits affecting modern, widely used operating systems, applications, and devices, including mobile, desktop, embedded, and enterprise platforms.

Our focus is primarily on zero-day vulnerabilities; however, from time to time, we may also acquire recent n-day vulnerabilities (typically up to six months old) for mobile platforms, depending on their impact and exploitability.

For a detailed list of in-scope targets and requirements, please refer to our Exploit Acquisition Program.