Arlo Technologies, Inc. bug bounty programs
arlo.com Updated
Arlo Technologies, Inc. runs one public program: a Bugcrowd bug bounty paying up to $10,000.
- Top reward
- $10,000
- Bugcrowd
- Programs
- 1
- 1 pays cash
- Targets in scope
- 33
- 6 types
- Last change
- None yet
- Tracked since Nov 2026
Where to report
The one public program Arlo Technologies, Inc. runs.
| Program | Critical | High | Medium | Low | Top reward | Safe harbor | KYC | First response | Status |
|---|---|---|---|---|---|---|---|---|---|
Arlo Cash Rewards
Bugcrowd · Bug bounty |
$4,500 | $1,500 | $600 | $100 | $10,000 | Partial | – | – | Open |
-
- Critical
- $4,500
- High
- $1,500
- Medium
- $600
- Low
- $100
- Safe harbor
- Partial
Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.
What is in scope
33 targets. 6 excluded.
-
*.arlo.com (subdomains impacting production customer-facing services)
Wildcards
-
*.arlocloud.com
Wildcards
-
*.arloxcld.com
Wildcards
-
https://*dev*.arlo.com
Wildcards
-
https://*qa*.arlo.com
Wildcards
-
https://beta.arlo.com
Web
-
https://my.arlo.com
Web
-
https://www.arlo.com
Web
-
https://*-prod.arlo.com
APIs
-
https://mcs.arlo.com
APIs
-
https://myapi.arlo.com
APIs
-
https://partnerapi.arlo.com
APIs
-
https://updates.arlo.com
APIs
-
Arlo Safe Android App
Android
-
Arlo Secure Android App
Android
-
Arlo Safe iOS App
iOS
-
Arlo Secure iOS App
iOS
-
Arlo All-In-One Sensor (Home Security System)
Hardware and IoT
-
Arlo Base Station
Hardware and IoT
-
Arlo Cellular & Battery Backup (Home Security System)
Hardware and IoT
-
Arlo Chime 2
Hardware and IoT
-
Arlo Essential 2 & 3 (indoor & outdoor camera, doorbell)
Hardware and IoT
-
Arlo Go v2
Hardware and IoT
-
Arlo Home Security System
Hardware and IoT
-
Arlo Pro 3 Floodlight
Hardware and IoT
-
Arlo Pro 5S
Hardware and IoT
-
Arlo Pro 6
Hardware and IoT
-
Arlo Pro SmartHub
Hardware and IoT
-
Arlo Safe Button
Hardware and IoT
-
Arlo Ultra 2
Hardware and IoT
-
Arlo Wire-Free Outdoor Siren (Home Security System)
Hardware and IoT
-
Arlo Wired Floodlight
Hardware and IoT
-
Arlo Wireless Video Doorbell
Hardware and IoT
No target matches. Try part of a host name, such as the company name.
Out of scope 6
Don't test these. A program can exclude a host another program covers; the program you report to decides.
-
http://community.arlo.com
-
http://research.arlo.com
-
http://survey.arlo.com
-
https://investor.arlo.com
-
cvrstreaming*.arlo.com
-
https://*streaming*.arlo.com
Recent changes
Reward and scope changes across every Arlo Technologies, Inc. program, newest first.
No changes recorded yet. New targets and reward moves show up here and in the RSS feed.
Recent CVEs
Published vulnerabilities in Arlo Technologies, Inc. products, from the NVD.
-
CVE-2021-31505 Medium
This vulnerability allows attackers with physical access to escalate privileges on affected installations of Arlo Q Plus 1.9.0.3_278. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SSH service. The device can be booted into a special operation mode where hard-coded credentials are accepted for SSH authentication. An attacker can leverage this vuln
-
CVE-2019-3949 Critical
Arlo Basestation firmware 1.12.0.1_27940 and prior firmware contain a networking misconfiguration that allows access to restricted network interfaces. This could allow an attacker to upload or download arbitrary files and possibly execute malicious code on the device.
-
CVE-2019-3950 Critical
Arlo Basestation firmware 1.12.0.1_27940 and prior contain a hardcoded username and password combination that allows root access to the device when an onboard serial interface is connected to.
About this page
This page gathers every public program listed under arlo.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.
Something wrong or missing? Report a correction.