Each bug bounty has a “scope”, or in other words, a section of a bounty program’s details that will describe what type of security vulnerabilities a program is interested in receiving, where a researcher is allowed to test and what type of testing is permitted. On Bugcrowd, a bounty’s scope can be found in the “Program Details” bounty brief section of a program page. It is extremely important to understand the scope and rules of a program. as this is what leads to your bounty being eligible or ineligible for an award.