Work at Optimizely? Claim it to respond to reviews as the verified owner.
Found a vulnerability?
If you would rather not deal with the vendor yourself, a BugRater analyst will submit it upstream on your behalf, with your explicit permission, and tell you what came back.
Ask BugRater to submit itPrivate. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.
Reviews
0 publishedNo reviews yet.
Facts published by Bugcrowd on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 3 Oct 2026.
At Optimizely, we're on a mission to help people unlock their digital potential. We do that by reinventing how marketing and product teams work to create and optimize digital experiences across all channels. With our leading digital experience platform (DXP), we help companies around the world orchestrate their entire content lifecycle, monetize every digital experience and experiment across all customer touchpoints. Optimizely has 700+ partners and nearly 1500 employees across our 21 global offices. We live each day with a simple philosophy: large enough to serve, small enough to care.
Scope
16 assets| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| https://accounts.cmp.optimizely.com/ | website | ✓ bounty | not set |
| https://accounts.welcomesoftware.com/ | website | ✓ bounty | not set |
| https://analytics.welcomesoftware.com/ | website | ✓ bounty | not set |
| https://api.optimizely.com/ | api | ✓ bounty | not set |
| https://api.welcomesoftware.com/ | api | ✓ bounty | not set |
Show all 16 assets
| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| https://app.optimizely.com/ | website | ✓ bounty | not set |
| https://app.welcomesoftware.com/ | website | ✓ bounty | not set |
| https://cdn-app.welcomesoftware.com/ | website | ✓ bounty | not set |
| https://cdn-pci.optimizely.com/ | website | ✓ bounty | not set |
| https://cdn.optimizely.com/ | website | ✓ bounty | not set |
| https://dxc.episerver.net/ | website | ✓ bounty | not set |
| https://flags.expeng.optimizely.com | api | ✓ bounty | not set |
| https://optimizely-edge.com | website | ✓ bounty | not set |
| https://paasportal.episerver.net/ | website | ✓ bounty | not set |
| https://paasportal.episerver.net/api/v1.0/ | website | ✓ bounty | not set |
| https://www.optimizely.com/ | website | out | not set |