Facts published by Bugcrowd on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 19 Sep 2026.

Introduction Cloudinary, a SaaS/API provider that streamlines a website's entire image management pipeline, is the market leader in providing a comprehensive cloud-based image and video management platform. Using Cloudinary you can easily move all your website’s images and other assets to the cloud. Automatically perform smart image resizing, cropping, merging, overlay, watermark, apply effects, rotations and perform format conversions. All this without installing any complex software. Simply put, if you have images in your web or mobile app, let Cloudinary manage them for you. Cloudinary offers comprehensive APIs and administration capabilities and is easy to integrate with any web application. To simplify integration further we also have client libraries for Ruby on Rails, Python/Django, PHP, .NET, Node.js and more. In addition, alternative integration methods allow non-developers, bloggers and website administrators to enjoy Cloudinary with nearly zero code changes. We truly believe that this program plays a key role in protecting our customers and their data. We appreciate all security submissions and strive to respond expediently. We are particularly interested and will consider extraordinary submissions for: Issues that result in a full compromise of a Production system (e.g, RCE, obtaining a shell back from our network) Business logic bypasses resulting in a significant impact Major operational failure (excluding Denial of Service related submissions) Please read carefully below for submission guidelines and targets