Skip to content

Cvent bug bounty programs

cvent.com Updated

Cvent runs two public programs: a Bugcrowd bug bounty paying up to $3,000 and a self-hosted disclosure program with no cash rewards.

Top reward
$3,000
Bugcrowd
Programs
2
1 pays cash
Targets in scope
15
6 types, deduplicated
Last change
4 Nov 2026
1 week ago

Where to report

2 programs, side by side. Report where the affected target is in scope; when two programs cover it, pick the one that pays more.

Start here

Cvent Bug Bounty

Bugcrowd · Pays the most of the 2 programs: up to $3,000.

Amounts are the top reward per severity in the currency each program pays. Green marks the highest per severity. First response is the platform's measured average when it publishes one, else what the policy promises.

What is in scope

15 targets across all 2 programs, each listed once with the programs that cover it. 1 excluded.

  • Cvent Core-Admin -> https://app.cvent.com/Subscribers/Admin/*

    Wildcards

    Covered by Bugcrowd

  • Cvent Core-Appointments -> https://app.cvent.com/Subscribers/Appointments/*

    Wildcards

    Covered by Bugcrowd

  • Cvent Core-Attendee Hub Web -> https://web.cvent.com/hub/events/*

    Wildcards

    Covered by Bugcrowd

  • Cvent Core-Flex -> https://web.cvent.com/event/*

    Wildcards

    Covered by Bugcrowd

  • Cvent Core-Planner -> https://app.cvent.com/Subscribers/Events2/* & https://events.app.cvent.com/events/*

    Wildcards

    Covered by Bugcrowd

  • Cvent Core-Survey -> https://app.cvent.com/Subscribers/Inquisium/*

    Wildcards

    Covered by Bugcrowd

  • Cvent CSN Destination Guide -> https://www.cvent.com/meeting-event-planning/*

    Wildcards

    Covered by Bugcrowd

  • Cvent CSN Suppliers -> https://app.cvent.com/Subscribers/RFP/*

    Wildcards

    Covered by Bugcrowd

  • cvent.com

    Domains

    Covered by Self-hosted

  • https://accounts.app.cvent.com/paygo/signup

    Web

    Covered by Bugcrowd

  • Cvent Core-Attendee Hub Mobile Android -> https://play.google.com/store/apps/details?id=com.cvent.mobile.eventapp

    Android

    Covered by Bugcrowd

  • Cvent OSS-OnArrival Mobile Android -> https://play.google.com/store/apps/details?id=com.cvent.onarrival

    Android

    Covered by Bugcrowd

  • Cvent Core-Attendee Hub Mobile iOS -> https://apps.apple.com/us/app/cvent-events/id1491335576

    iOS

    Covered by Bugcrowd

  • Cvent OSS-OnArrival Mobile iOS -> https://apps.apple.com/us/app/onarrival/id680778967

    iOS

    Covered by Bugcrowd

  • Cvent services and products

    Products and areas

    Covered by Self-hosted

No target matches. Try part of a host name, such as the company name.

Out of scope 1

Don't test these. A program can exclude a host another program covers; the program you report to decides.

  • third party websites, applications, or services that integrate with Cvent services

    Self-hosted

Recent changes

Reward and scope changes across every Cvent program, newest first.

All changes · RSS feed

About this page

This page gathers every public program listed under cvent.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.

Something wrong or missing? Report a correction.