In your email to the Security team, include in the subject line: Bug Bounty Program Disclose: [vulnerability]
Public proof receipt / delayed sample
Weights & Biases Weave P1 · ENTERPRISE
An enterprise policy or control changed.
See the relevant before and after, when the change was found, and the official page behind it.
Email reports to security@coreweave.com with steps to reproduce, a proof of concept and the impact. Our bug bounty is a private HackerOne program. We invite reporters after reviewing their report, and bounties are paid through HackerOne. Valid reports receive a response within five business days.
Check the record
Read the evidence in plain language.
The before-and-after text above shows what was present on the official page at each capture. This summary explains the reviewed change.
An enterprise policy or control changed.
Vulnerability reporting is now directed to security@coreweave.com with required reproduction steps, proof of concept, and impact details, replacing the previous wandb.com contact and subject line format.
- Before captured
- Sep 29, 2026, 1:31 AM PDT
- After captured
- Sep 29, 2026, 1:57 PM PDT
- Reviewed
- Sep 30, 2026, 3:01 PM PDT
WHY IT MAY MATTER
A new security, governance, or deployment capability can open larger accounts and reduce procurement friction.
Keep this record for the competitors that affect you.
Start with Scout for one competitor, then expand the watchlist when you need to.
Start Tracking →