generated: '2026-09-04'
method: searched
probe: true
source: https://www.boydgaming.com/security-policy
program:
  name: Boyd Gaming Security Policy
  type: vulnerability-disclosure
  intake_partner: Bugcrowd
  bounty: unknown
  note: >-
    Boyd Gaming publishes a security policy page inviting security researchers to report
    potential security issues. The page states the company "partnered with Bugcrowd, a
    company that uses crowdsourcing to find and fix security issues" and embeds a Bugcrowd
    external report form. No public Bugcrowd program page exists (bugcrowd.com/boydgaming
    and bugcrowd.com/boyd-gaming both 404), so the engagement is run as an embedded/private
    intake rather than a listed public program. The page does not state a reward structure,
    a scope list, or a safe-harbor clause.
policy:
- https://www.boydgaming.com/security-policy
contact:
- mailto:intel@boydgaming.com
- https://bugcrowd.com/4f0c7af4-5c95-403a-83ad-78bb561d6a24/external/report
related:
- url: https://www.boydgaming.com/company/corporate-responsibility/corporate-governance/data-security
  title: Data Security (corporate governance)
  note: >-
    Describes a CISO-led information security program with leadership oversight, system
    testing and monitoring. Names NO certifications (no SOC 2, ISO 27001, PCI DSS or
    NIST claim in the published text), so no Compliance or TrustCenter pointer is emitted.
evidence:
- url: https://www.boydgaming.com/security-policy
  http_status: 200
  fetched: '2026-09-04'
  kind: vulnerability disclosure policy page (Bugcrowd intake form embedded)
  quote: >-
    "Thank you for helping us find potential security issues. We partnered with Bugcrowd,
    a company that uses crowdsourcing to find and fix security issues. ... If you would
    like to share more, please email us: intel@boydgaming.com"
- url: https://bugcrowd.com/4f0c7af4-5c95-403a-83ad-78bb561d6a24/external/report
  http_status: 200
  fetched: '2026-09-04'
  kind: Bugcrowd external report endpoint referenced by the embedded intake script
- url: https://bugcrowd.com/boydgaming
  http_status: 404
  fetched: '2026-09-04'
  kind: control probe — no public Bugcrowd program page
- url: https://www.boydgaming.com/company/corporate-responsibility/corporate-governance/data-security
  http_status: 200
  fetched: '2026-09-04'
  kind: corporate data-security governance page