Work at Aiven Managed Bug Bounty? Claim it to respond to reviews as the verified owner.
Found a vulnerability?
If you would rather not deal with the vendor yourself, a BugRater analyst will submit it upstream on your behalf, with your explicit permission, and tell you what came back.
Ask BugRater to submit itPrivate. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.
Reviews
0 publishedNo reviews yet.
Facts published by Bugcrowd on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 3 Oct 2026.
Aiven is a next-generation managed cloud database platform as a service. Its focus is in ease of adoption, high fault resilience, customer's peace of mind and advanced features at competitive price points. See https://aiven.io/ for more information. No technology is perfect, and Aiven believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. We are excited for you to participate as a security researcher to help us identify vulnerabilities in our assets. Good luck and happy hunting! Ratings/Rewards For the initial prioritization/rating of findings, this program will use the Bugcrowd Vulnerability Rating Taxonomy. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority. We will not accept issues that have been previously reported to Aiven through other channels, regardless if whether they have not yet been reported within the Bugcrowd platform.
Scope
31 assets| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| Aiven for Apache Kafka | other | ✓ bounty | not set |
| Aiven for Clickhouse | other | ✓ bounty | not set |
| Aiven for Grafana | other | ✓ bounty | not set |
| Aiven for Metrics | other | ✓ bounty | not set |
| Aiven for MySQL | other | ✓ bounty | not set |
Show all 31 assets
| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| Aiven for OpenSearch | other | ✓ bounty | not set |
| Aiven for PostgreSQL | other | ✓ bounty | not set |
| Aiven for Valkey | other | ✓ bounty | not set |
| aiven.io | website | ✓ bounty | not set |
| api.aiven.io | api | ✓ bounty | not set |
| console.aiven.io | website | ✓ bounty | not set |
| falcon-bug-bounty-flag-pgsql-dev-sandbox.e.aivencloud.com | other | ✓ bounty | not set |
| github.com/Aiven | other | ✓ bounty | not set |
| github.com/Aiven-Open | other | ✓ bounty | not set |
| regatta.aiven.io | website | ✓ bounty | not set |
| Third-party dependency versions | other | ✓ bounty | not set |
| *.aiven.fi | other | out | not set |
| *.avns.net | other | out | not set |
| Aiven Runtime | website | out | not set |
| aiven.io/community | website | out | not set |
| aiven.io/contact | website | out | not set |
| aivenhelp.zendesk.com | website | out | not set |
| aquarium.aiven.io | website | out | not set |
| Creation of support tickets | website | out | not set |
| Customer services you did not create | other | out | not set |
| events.aiven.io | website | out | not set |
| github.com/Aiven-Labs | other | out | not set |
| ideas.aiven.io | other | out | not set |
| support.aiven.io | website | out | not set |
| uptime.aiven.io | website | out | not set |
| video.aiven.io | website | out | not set |