Indeed bug bounty program
Indeed runs a public bug bounty program hosted on Bugcrowd. The program currently lists 17 in-scope assets that authorised security researchers may test under the program's rules. Valid findings are rewarded, with payouts reaching up to $10k depending on severity.
// example in-scope assets
https://indeed.comhttps://*.indeedflex.comhttps://apis.indeed.com/graphqlhttps://play.google.com/store/apps/details?id=com.indeed.android.jobsearchAlways read the official policy before testing — scope, exclusions and safe-harbor terms are set by the program, and testing outside the authorised scope is not permitted. New to bug bounty? Warm up in our free hands-on labs and academy first.
// more Bugcrowd programs
// data aggregated from public Bugcrowd listings · refreshed 8/24/2026 · the official program page is authoritative