Rogo
Maximum reward
$25,000
Severity
Max. Reward
Critical$25,000
High$10,000
Medium$1,000
Deposit required
$50
Findings submitted
27
Start date
25 Jun 2026
KYC
Required to join
Please sign in as a researcher to join the bounty.
Log inIn scope
Severity
Min and Max Reward
CriticalUp to $25,000
High
Up to $10,000
Medium
Up to $1,000
The Rogo web interface and application, including all functionality served from app.rogo.ai.
Testing is limited to unauthenticated, external/perimeter surfaces. No authenticated access is provided for this program - do not request credentials or attempt to obtain authenticated access.
Name | Description | Asset |
|---|---|---|
| Rogo Web App | Rogo web interface and application. |
Out of scope
Out of Scope
The following are out of scope and not eligible for rewards.
For generic exclusions, see the Cantina Bug Bounty Out-of-Scope Policy.
Targets
- Authenticated, post-login, or internal functionality (no authenticated access is provided for this program)
- Subdomains outside of the
app.rogo.aiscope - Any Rogo domain that is not
rogo.ai - Third-party code not under Rogo's control
- Staging, development, and test environments
- Third-party services
Known Non-Issues
- Specific known non-issues, such as rounding errors, cross-site cookies, or features documented as out-of-scope
Default Out of Scope
Standard out-of-scope items per the Cantina Bug Bounty Out-of-Scope Policy.