{ "schema_version": "1.0.0", "directory_snapshot_date": "2026-10-03", "directory_observed_at": "2026-10-03T16:41:07Z", "directory_source_urls": [ "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=1&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=2&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=3&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=4&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=5&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=6&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=7&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=8&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=9&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=10&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=11&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=12&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=13&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=1&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=2&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=3&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=4&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=5&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=6&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=7&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=8&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=9&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=10&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=11&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=12&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=bug_bounty&page=13&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=1&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=2&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=3&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=4&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=5&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=6&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=7&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=8&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=9&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=10&sort_by=starts&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=1&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=2&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=3&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=4&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=5&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=6&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=7&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=8&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=9&sort_by=promoted&sort_direction=desc", "https://bugcrowd.com/engagement_listings?category=vdp&page=10&sort_by=promoted&sort_direction=desc" ], "notice": "Official public Bugcrowd directory and scope-table snapshots. A listing or asset row does not establish current testing permission, complete policy scope, report submission availability, or reward eligibility. Read the live program policy before research activity.", "counts": { "current_public_programs": 516, "bug_bounty_category": 293, "vulnerability_disclosure": 223, "published_scope_captured": 507, "scope_gaps": 9, "by_scope_status": { "captured": 507, "fetch_failed": 2, "no_published_assets": 7 }, "in_scope_entries": 5621, "out_of_scope_entries": 1394, "duplicate_source_rows_removed": 76 }, "programs": [ { "id": "bugcrowd-fea340e13c6aada4", "name": "20 Minuten", "program_url": "https://bugcrowd.com/engagements/twentyminuten", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $5,000", "reward_min": "$250", "reward_max": "$5,000", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:44Z", "scope_published_at": "2026-08-28T14:33:24.441Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/twentyminuten/changelog/a2833331-ef57-43c0-8b42-70713ea035d2.json" ], "in_scope": [ { "name": "https://www.20min.ch", "asset_type": "website", "location": "https://www.20min.ch", "group": "In scope targets" }, { "name": "https://cm.20min.ch/", "asset_type": "website", "location": "https://coral.20min.ch/", "group": "In scope targets" }, { "name": "https://api.20min.ch/", "asset_type": "api", "location": "https://api.20min.ch/", "group": "In scope targets" }, { "name": "https://videoplayer.20min.ch", "asset_type": "website", "location": "https://videoplayer.20min.ch", "group": "In scope targets" }, { "name": "https://partner-feeds.20min.ch", "asset_type": "website", "location": "https://partner-feeds.20min.ch", "group": "In scope targets" }, { "name": "https://screenplayer.20min.ch", "asset_type": "website", "location": "https://screenplayer.20min.ch", "group": "In scope targets" }, { "name": "https://audio.20min.ch", "asset_type": "website", "location": "https://audio.20min.ch/", "group": "In scope targets" } ], "out_of_scope": [ { "name": "https://tgt.tamedia.ch", "asset_type": "api", "location": null, "group": "Out of scope targets" }, { "name": "http://auth.20min.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://cre-api.tamedia.ch", "asset_type": "api", "location": null, "group": "Out of scope targets" }, { "name": "https://track.20min.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Social Media Links (older than 2 years)", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Subdomain Takeover", "asset_type": "other", "location": null, "group": "Out of scope targets" }, { "name": "DMARC, SPF, DKIM", "asset_type": "other", "location": null, "group": "Out of scope targets" }, { "name": "https://*.connect.ringier.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.onelog.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.20min-tv.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.newsnetz.tv", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.appuser.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.iagentur.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.streamboat.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.streamboatserver.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Other Domains and Subdomains not specifically in scope", "asset_type": "other", "location": null, "group": "Out of scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-fea340e13c6aada4.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-dd2a9315b7f5c866", "name": "55 Degrees", "program_url": "https://bugcrowd.com/engagements/fiftyfivedegrees", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:45Z", "scope_published_at": "2026-07-08T20:13:41.061Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/fiftyfivedegrees/changelog/f090483f-bf37-440c-9de4-e448146e5e7d.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=server&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "Anything related to the actionableagile.55degrees-apps.net subdomain is in scope.", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=server", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=server", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=datacenter", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1220160/issue-analyzer-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220160/issue-analyzer-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1224766/portfolio-forecaster?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224766/portfolio-forecaster?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1224766/portfolio-forecaster?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224766/portfolio-forecaster?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1227773/klar-issue-refinement-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227773/klar-issue-refinement-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [ { "name": "Any other subdomains on 55degrees-apps.net or any other domains owned by 55 Degrees AB is out of scope.", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "https://marketplace.atlassian.com/*", "asset_type": "website", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-dd2a9315b7f5c866.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-48ea6e730ccb9ec9", "name": "Accxia Marketplace Bug Bounty", "program_url": "https://bugcrowd.com/engagements/accxia-gmbh", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:46Z", "scope_published_at": "2026-08-25T15:20:04.598Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/accxia-gmbh/changelog/b56d3ca7-b60f-4c96-95d1-87313ae569bb.json" ], "in_scope": [ { "name": "Intelligent User Manager (IUM) for Confluence (Cloud) - https://marketplace.atlassian.com/apps/1235944/intelligent-user-manager-ium-for-confluence-cloud?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1235944/intelligent-user-manager-ium-for-confluence-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "IUM for Jira Cloud Forge - https://marketplace.atlassian.com/apps/1225449/intelligent-user-manager-ium-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225449/intelligent-user-manager-ium-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-48ea6e730ccb9ec9.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-cc55fb914f763851", "name": "Acorns Grow, Inc.", "program_url": "https://bugcrowd.com/engagements/acorns", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,000", "reward_min": "$100", "reward_max": "$4,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:53Z", "scope_published_at": "2026-10-01T17:54:49.265Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/acorns/changelog/0cbe41f4-1a15-4efa-a60e-65b338052dd6.json" ], "in_scope": [ { "name": "*.acorns.com/", "asset_type": "website", "location": "https://acorns.com/", "group": "Acorns Targets" }, { "name": "Acorns for iOS", "asset_type": "other", "location": "https://apps.apple.com/us/app/acorns-invest-spare-change/id883324671", "group": "Acorns Targets" }, { "name": "https://graphql.acorns.com", "asset_type": "api", "location": "https://graphql.acorns.com", "group": "Acorns Targets" }, { "name": "Acorns for Android", "asset_type": "other", "location": "https://play.google.com/store/apps/details?id=com.acorns.android&hl=en_US&gl=US", "group": "Acorns Targets" }, { "name": "https://www.pixpay.fr/", "asset_type": "website", "location": "https://www.pixpay.fr/", "group": "Acorns Targets" } ], "out_of_scope": [ { "name": "share.acorns.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "grow.acorns.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "store.acorns.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-cc55fb914f763851.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-b06a1a7effe4c3de", "name": "Aelbox Marketplace Bug Bounty", "program_url": "https://bugcrowd.com/engagements/aelbox", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:54Z", "scope_published_at": "2026-08-13T03:52:36.373Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/aelbox/changelog/e79fb6bc-4c49-4081-abcb-e7e6570a5ee3.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1219205/scrumpy-planning-poker-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219205/scrumpy-planning-poker-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-b06a1a7effe4c3de.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-bb5a580105b38587", "name": "Afterpay Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/afterpay", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $5,000", "reward_min": "$100", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "eCommerce", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:55Z", "scope_published_at": "2026-10-01T05:59:18.269Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 5, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/afterpay/changelog/c757b445-44cb-4d84-8bb1-e201aad31872.json" ], "in_scope": [ { "name": "████████████████", "asset_type": "ios", "location": null, "group": "████████" }, { "name": "████████████████████", "asset_type": "android", "location": null, "group": "████████" }, { "name": "███████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "██████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "██████████████████████", "asset_type": "api", "location": null, "group": "████████" }, { "name": "████████████████████████", "asset_type": "api", "location": null, "group": "████████" }, { "name": "███████████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "█████████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "███████████████████████████", "asset_type": "api", "location": null, "group": "████████" }, { "name": "████████████████", "asset_type": "api", "location": null, "group": "████████" } ], "out_of_scope": [ { "name": "████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-bb5a580105b38587.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "5 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-40d63da19d59ab5f", "name": "agile doyens", "program_url": "https://bugcrowd.com/engagements/agiledoyens-market", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:56Z", "scope_published_at": "2026-09-23T18:07:00.338Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/agiledoyens-market/changelog/e724e41a-0c4c-446b-8c63-a073dd1ad25b.json" ], "in_scope": [ { "name": "TIK for Jira - https://marketplace.atlassian.com/apps/628301060/tik-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/628301060/tik-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-40d63da19d59ab5f.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-53ab5d6d174f0369", "name": "AgilePulse Marketplace Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/agile-pulse", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:57Z", "scope_published_at": "2026-08-05T14:57:42.187Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/agile-pulse/changelog/6b5e8039-b5d7-471a-aef4-b231cc5b6f7f.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1233038/agility-poker-planning?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233038/agility-poker-planning?tab=overview&hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/187209184/sprintretro-free-retrospective-metrics-suite?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/187209184/sprintretro-free-retrospective-metrics-suite?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1143291390/sprintpoker-planning-poker-async-estimation?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1143291390/sprintpoker-planning-poker-async-estimation?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/2903137599/sprintretro-pro-retrospective-metrics-suite?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/2903137599/sprintretro-pro-retrospective-metrics-suite?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/3780102417/sprintpoker-free-planning-poker-async-estimation?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/3780102417/sprintpoker-free-planning-poker-async-estimation?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/3684126567/laya-workflowos-ai-automation-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/3684126567/laya-workflowos-ai-automation-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/4076194710/laya-export-studio-for-jira-and-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/4076194710/laya-export-studio-for-jira-and-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/3402280988/laya-board?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/3402280988/laya-board?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-53ab5d6d174f0369.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-2e14b20f0897659c", "name": "Agilis LT Bug Bounty", "program_url": "https://bugcrowd.com/engagements/agilislt", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:58Z", "scope_published_at": "2026-07-14T01:16:46.707Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/agilislt/changelog/b0a07d40-7f88-426a-a170-b25042bdf84d.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1219429/status-progress-report-structure-jira-dashboard-gadget?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219429/status-progress-report-structure-jira-dashboard-gadget?hosting=cloud&tab=overview", "group": "Agilis LT Apps for Atlassian Jira" }, { "name": "https://marketplace.atlassian.com/apps/1219761/individual-velocity-report-chart-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219761/individual-velocity-report-chart-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "group": "Agilis LT Apps for Atlassian Jira" }, { "name": "https://marketplace.atlassian.com/apps/1219487/simple-timesheet-worklog-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219487/simple-timesheet-worklog-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "group": "Agilis LT Apps for Atlassian Jira" }, { "name": "https://marketplace.atlassian.com/apps/1219703/time-tracking-estimation-report-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219703/time-tracking-estimation-report-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "group": "Agilis LT Apps for Atlassian Jira" }, { "name": "https://marketplace.atlassian.com/apps/1219872/advanced-burndown-chart-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219872/advanced-burndown-chart-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "group": "Agilis LT Apps for Atlassian Jira" }, { "name": "https://marketplace.atlassian.com/apps/1218888/simple-custom-reports-charts-time-in-status-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218888/simple-custom-reports-charts-time-in-status-for-jira?hosting=cloud&tab=overview", "group": "Agilis LT Apps for Atlassian Jira" }, { "name": "https://marketplace.atlassian.com/apps/1230997/time-in-status-report-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1230997/time-in-status-report-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "group": "Agilis LT Apps for Atlassian Jira" }, { "name": "https://marketplace.atlassian.com/apps/3747688267/simple-gantt-roadmap-timeline-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/3747688267/simple-gantt-roadmap-timeline-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "group": "Agilis LT Apps for Atlassian Jira" }, { "name": "app.simple-reports.com/demo", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*app.simple-reports.com/demo", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-2e14b20f0897659c.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-6b4160c4d3ab907f", "name": "AI | Apps+ Marketplace Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/apps-plus2", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:59Z", "scope_published_at": "2026-10-02T12:32:03.446Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/apps-plus2/changelog/ac70b5d8-96f2-4c70-a8e3-2373ed2665ee.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1227541/ai-badges-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227541/ai-badges-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227543/ai-grammar-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227543/ai-grammar-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227544/ai-summary-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227544/ai-summary-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227545/ai-sentiment-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227545/ai-sentiment-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227546/ai-glossary-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227546/ai-glossary-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227547/ai-tables-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227547/ai-tables-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227548/ai-polls-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227548/ai-polls-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227549/ai-tooltips-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227549/ai-tooltips-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227550/ai-tags-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227550/ai-tags-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227551/ai-tabs-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227551/ai-tabs-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227552/ai-latex-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227552/ai-latex-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227553/ai-headings-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227553/ai-headings-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227554/ai-forms-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227554/ai-forms-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227555/ai-copywriter-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227555/ai-copywriter-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227556/ai-code-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227556/ai-code-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227557/ai-labels-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227557/ai-labels-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227558/ai-macros-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227558/ai-macros-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227559/ai-checklists-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227559/ai-checklists-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227560/ai-buttons-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227560/ai-buttons-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227561/ai-images-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227561/ai-images-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1229018/ai-photos-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229018/ai-photos-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1232262/ai-support-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1232262/ai-support-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1235733/ai-autofill-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235733/ai-autofill-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1237726/ai-charts-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237726/ai-charts-for-confluence?hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-6b4160c4d3ab907f.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-3fdbea615f6309f5", "name": "Aiven Managed Bug Bounty", "program_url": "https://bugcrowd.com/engagements/aiven-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $25,000", "reward_min": "$50", "reward_max": "$25,000", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:00Z", "scope_published_at": "2026-09-28T20:46:08.739Z", "scope_group_count": 8, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/aiven-mbb-og/changelog/326ffefd-402d-4c50-a6c5-490f1286413a.json" ], "in_scope": [ { "name": "Aiven for Clickhouse", "asset_type": "other", "location": "https://aiven.io/clickhouse", "group": "Database Services Tier 1" }, { "name": "Aiven for Metrics", "asset_type": "other", "location": "https://aiven.io/docs/products/metrics/concepts/metrics-overview", "group": "Database Services Tier 1" }, { "name": "Aiven for Valkey", "asset_type": "other", "location": null, "group": "Database Services Tier 1" }, { "name": "Aiven for Apache Kafka", "asset_type": "other", "location": null, "group": "Database Services Tier 1" }, { "name": "Aiven for OpenSearch", "asset_type": "other", "location": null, "group": "Database Services Tier 2" }, { "name": "Aiven for Grafana", "asset_type": "other", "location": null, "group": "Database Services Tier 2" }, { "name": "Aiven for PostgreSQL", "asset_type": "other", "location": null, "group": "Database Services Tier 2" }, { "name": "Aiven for MySQL", "asset_type": "other", "location": null, "group": "Database Services Tier 2" }, { "name": "regatta.aiven.io", "asset_type": "website", "location": "https://regatta.aiven.io/", "group": "Database Services Tier 2" }, { "name": "aiven.io", "asset_type": "website", "location": "https://aiven.io/", "group": "In Scope (Website Console)" }, { "name": "console.aiven.io", "asset_type": "website", "location": "https://console.aiven.io/login", "group": "In Scope (Website Console)" }, { "name": "api.aiven.io", "asset_type": "api", "location": "https://api.aiven.io/login", "group": "In Scope (Website Console)" }, { "name": "github.com/Aiven-Open", "asset_type": "other", "location": "https://github.com/Aiven-Open", "group": "Aiven Open Source Repositories" }, { "name": "github.com/Aiven", "asset_type": "other", "location": "https://github.com/Aiven", "group": "Aiven Open Source Repositories" }, { "name": "falcon-bug-bounty-flag-pgsql-dev-sandbox.e.aivencloud.com", "asset_type": "other", "location": "http://falcon-bug-bounty-flag-pgsql-dev-sandbox.e.aivencloud.com/", "group": "Capture the Flag Challenge" }, { "name": "Third-party dependency versions", "asset_type": "other", "location": null, "group": "Third-Party Dependency Versions" } ], "out_of_scope": [ { "name": "aquarium.aiven.io", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "uptime.aiven.io", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "video.aiven.io", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "aiven.io/community", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "aiven.io/contact", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "Customer services you did not create", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "*.aiven.fi", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "github.com/Aiven-Labs", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "*.avns.net", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "events.aiven.io", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "ideas.aiven.io", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "aivenhelp.zendesk.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "support.aiven.io", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "Creation of support tickets", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "Aiven Runtime", "asset_type": "website", "location": "https://aiven.io/runtime", "group": "Aiven Runtime" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-3fdbea615f6309f5.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-f778ad855791c037", "name": "Akeles Marketplace Bug Bounty", "program_url": "https://bugcrowd.com/engagements/akeles", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:01Z", "scope_published_at": "2026-09-03T00:42:32.024Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/akeles/changelog/ac8ec0e3-508b-4822-a7b9-8a59d30fdda4.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1214613/multiple-filters-chart-gadget?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214613/multiple-filters-chart-gadget?hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1211976/gauge-gadget?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211976/gauge-gadget?hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1211314/three-dimensional-date-gadgets?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211314/three-dimensional-date-gadgets?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1225375/site-statistics-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225375/site-statistics-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1223780/tissue-table-of-linked-issues?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223780/tissue-table-of-linked-issues?hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1229447/site-statistics-for-confluence-cloud?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229447/site-statistics-for-confluence-cloud?tab=overview&hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1211116/countdown-timer?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211116/countdown-timer?tab=overview&hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1217056/canned-search-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217056/canned-search-for-confluence?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1217224/countdown-gadget?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217224/countdown-gadget?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1215764/calendar-heatmap-gadget?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215764/calendar-heatmap-gadget?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1214394/menu-gadget?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214394/menu-gadget?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1224848/banners-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224848/banners-for-confluence?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1237524/dashboard-assistant-for-jira-cloud?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237524/dashboard-assistant-for-jira-cloud?hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1238098/project-access-review-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1238098/project-access-review-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1238069/file-type-checker-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1238069/file-type-checker-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-f778ad855791c037.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-0c49646b362423d7", "name": "AppFox", "program_url": "https://bugcrowd.com/engagements/automationconsultants", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:02Z", "scope_published_at": "2026-02-19T01:08:33.157Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/automationconsultants/changelog/08e9af05-6d6e-420c-9fc2-9d5a3dbf38fe.json" ], "in_scope": [ { "name": "Approvals for Confluence - https://marketplace.atlassian.com/apps/1216387/approvals-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216387/approvals-for-confluence?hosting=cloud", "group": "Target Group" }, { "name": "Captionizer - https://marketplace.atlassian.com/apps/1237517/captionizer-ai-image-analyzer", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237517/captionizer-ai-image-analyzer", "group": "Target Group" }, { "name": "Compliance for Confluence - https://marketplace.atlassian.com/apps/1218474/compliance-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218474/compliance-for-confluence?hosting=cloud", "group": "Target Group" }, { "name": "Optimizer for Jira - https://marketplace.atlassian.com/apps/1217194/optimizer-for-jira-cleaner-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217194/optimizer-for-jira-cleaner-for-jira?hosting=cloud", "group": "Target Group" }, { "name": "Workflows for Confluence - https://marketplace.atlassian.com/apps/1222276/workflows-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222276/workflows-for-confluence?hosting=cloud", "group": "Target Group" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-0c49646b362423d7.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-dc54fddecbc8a1d7", "name": "Appliances - Barracuda Networks, Inc.", "program_url": "https://bugcrowd.com/engagements/barracuda", "program_type": "unknown", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:03:14Z", "scope_published_at": "2023-02-28T20:27:23.074Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/barracuda/changelog/960b7330-755a-47de-b374-88877585aa8d.json" ], "in_scope": [ { "name": "Barracuda Message Archiver", "asset_type": "other", "location": "https://www.barracuda.com/products/messagearchiver", "group": "In scope targets" }, { "name": "Barracuda Web Security Gateway", "asset_type": "other", "location": "https://www.barracuda.com/products/websecuritygateway", "group": "In scope targets" }, { "name": "Barracuda ADC", "asset_type": "other", "location": "https://www.barracuda.com/products/loadbalancer?utm_source=google&utm_medium=search_cpc&utm_campaign=387189501&utm_adgroup=116181947964&utm_term=&utm_position=&utm_matchtype=b&utm_device=c&utm_content=484352050459&_bt=484352050459&_bk=&_bm=b&_bn=g&_bg=116181947964&gclid=Cj0KCQjwvr6EBhDOARIsAPpqUPFtfKELYb2ysp1O29NyBMwStaYpYAxq1oso9BaXpcPo9yrcy13uuc0aAtQDEALw_wcB", "group": "In scope targets" }, { "name": "Barracuda Web Application Firewall", "asset_type": "other", "location": "https://www.barracuda.com/products/webapplicationfirewall", "group": "In scope targets" }, { "name": "Barracuda Email Security Gateway", "asset_type": "other", "location": "https://www.barracuda.com/products/emailsecuritygateway", "group": "In scope targets" }, { "name": "Barracuda CloudGen Firewall", "asset_type": "other", "location": "https://www.barracuda.com/products/cloudgenfirewall", "group": "In scope targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-dc54fddecbc8a1d7.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-9691997556b80c2e", "name": "AppLiger", "program_url": "https://bugcrowd.com/engagements/appliger", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:03Z", "scope_published_at": "2026-08-29T18:07:12.334Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/appliger/changelog/3068e974-06bc-42df-a96a-bc6dac7ca029.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1219112/easy-templates-for-jira-issues?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219112/easy-templates-for-jira-issues?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1236389/easy-progress-hill-charts-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236389/easy-progress-hill-charts-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1236512/easy-action-items-checklist-templates-and-automation?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236512/easy-action-items-checklist-templates-and-automation?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/2576221793/easy-markdown-exporter-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/2576221793/easy-markdown-exporter-for-confluence?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [ { "name": "https://appliger.com/", "asset_type": "website", "location": "https://appliger.com/", "group": "Out of Scope" }, { "name": "https://appliger.atlassian.net", "asset_type": "website", "location": "https://appliger.atlassian.net", "group": "Out of Scope" }, { "name": "https://marketplace.atlassian.com/apps/1219112/easy-issue-templates-for-jira?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219112/easy-issue-templates-for-jira?hosting=datacenter", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-9691997556b80c2e.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-9c6bce4319b2f6ba", "name": "Appsvio Marketplace Bug Bounty", "program_url": "https://bugcrowd.com/engagements/appsvio", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:04Z", "scope_published_at": "2026-06-18T05:14:32.053Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/appsvio/changelog/285d22c7-81e3-4857-9618-89a99ca21f44.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1224654/multilevel-select-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224654/multilevel-select-for-jira?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1229162/issue-templates-agent-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229162/issue-templates-agent-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1218221/feature-bundle-for-jira-service-management?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218221/feature-bundle-for-jira-service-management?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1238103/appsvio-test-management-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1238103/appsvio-test-management-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-9c6bce4319b2f6ba.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-e960cfd30d0290eb", "name": "APTIS", "program_url": "https://bugcrowd.com/engagements/epicsumup", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:05Z", "scope_published_at": "2026-09-03T00:34:38.916Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/epicsumup/changelog/8706557a-a964-4338-9fd4-b6ffce6f218b.json" ], "in_scope": [ { "name": "ESU for Jira - Cloud - https://marketplace.atlassian.com/apps/1213091/esu-sum-up-kpi-budget-reporting-project-epic-overview?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1213091/esu-sum-up-kpi-budget-reporting-project-epic-overview?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-e960cfd30d0290eb.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-2b536b1efefe8d1c", "name": "Arlo Cash Rewards", "program_url": "https://bugcrowd.com/engagements/arlo", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$25 - $4,500", "reward_min": "$25", "reward_max": "$4,500", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:06Z", "scope_published_at": "2026-07-21T17:16:56.332Z", "scope_group_count": 4, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/arlo/changelog/715a1af5-50c4-4cfa-842a-048134e77d84.json" ], "in_scope": [ { "name": "Arlo Safe Android App", "asset_type": "android", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Safe iOS App", "asset_type": "ios", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Secure Android App", "asset_type": "android", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Secure iOS App", "asset_type": "ios", "location": null, "group": "Arlo Devices" }, { "name": "Arlo All-In-One Sensor (Home Security System)", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Base Station", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Cellular & Battery Backup (Home Security System)", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Chime 2", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Essential 2 & 3 (indoor & outdoor camera, doorbell)", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Wired Floodlight", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Go v2", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Home Security System", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Pro 3 Floodlight", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Pro SmartHub", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Pro 5S", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Pro 6", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Safe Button", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Ultra 2", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Wireless Video Doorbell", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Wire-Free Outdoor Siren (Home Security System)", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "*.arlo.com (subdomains impacting production customer-facing services)", "asset_type": "other", "location": null, "group": "All Other Production Arlo Targets" }, { "name": "*.arloxcld.com", "asset_type": "other", "location": null, "group": "All Other Production Arlo Targets" }, { "name": "https://*-prod.arlo.com", "asset_type": "api", "location": null, "group": "All Other Production Arlo Targets" }, { "name": "https://beta.arlo.com", "asset_type": "website", "location": null, "group": "All Other Production Arlo Targets" }, { "name": "https://mcs.arlo.com", "asset_type": "api", "location": null, "group": "All Other Production Arlo Targets" }, { "name": "https://my.arlo.com", "asset_type": "website", "location": "https://my.arlo.com", "group": "All Other Production Arlo Targets" }, { "name": "https://myapi.arlo.com", "asset_type": "api", "location": null, "group": "All Other Production Arlo Targets" }, { "name": "https://www.arlo.com", "asset_type": "website", "location": "https://www.arlo.com", "group": "All Other Production Arlo Targets" }, { "name": "https://updates.arlo.com", "asset_type": "api", "location": null, "group": "All Other Production Arlo Targets" }, { "name": "https://partnerapi.arlo.com", "asset_type": "api", "location": "https://partnerapi.arlo.com", "group": "All Other Production Arlo Targets" }, { "name": "*.arlocloud.com", "asset_type": "website", "location": null, "group": "All Other Production Arlo Targets" }, { "name": "https://*dev*.arlo.com", "asset_type": "website", "location": null, "group": "Non-production Environments (Dev/QA/CAT/Test/Staging)" }, { "name": "https://*qa*.arlo.com", "asset_type": "website", "location": null, "group": "Non-production Environments (Dev/QA/CAT/Test/Staging)" } ], "out_of_scope": [ { "name": "*streaming*.arlo.com", "asset_type": "api", "location": "https://*streaming*.arlo.com", "group": "Out of Scope Targets" }, { "name": "cvrstreaming*.arlo.com", "asset_type": "api", "location": null, "group": "Out of Scope Targets" }, { "name": "http://community.arlo.com/", "asset_type": "website", "location": "http://community.arlo.com/", "group": "Out of Scope Targets" }, { "name": "https://investor.arlo.com", "asset_type": "website", "location": "https://investor.arlo.com", "group": "Out of Scope Targets" }, { "name": "http://research.arlo.com/", "asset_type": "website", "location": "http://research.arlo.com/", "group": "Out of Scope Targets" }, { "name": "http://survey.arlo.com/", "asset_type": "website", "location": "http://survey.arlo.com/", "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-2b536b1efefe8d1c.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-37fe3e47f087afa0", "name": "Asana", "program_url": "https://bugcrowd.com/engagements/asana", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $6,500", "reward_min": "$100", "reward_max": "$6,500", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:07Z", "scope_published_at": "2026-02-03T18:26:16.895Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/asana/changelog/ad976c03-b976-410d-bd0a-5d76d56b9477.json" ], "in_scope": [ { "name": "app.asana.com", "asset_type": "website", "location": "https://app.asana.com", "group": "Asana Targets" }, { "name": "asana.com", "asset_type": "website", "location": "https://asana.com", "group": "Asana Targets" }, { "name": "*.asana.plus", "asset_type": "website", "location": "https://asana.com/apps?category=made-by-asana", "group": "Asana Targets" }, { "name": "Asana Desktop App", "asset_type": "other", "location": "https://asana.com/download", "group": "Asana Targets" }, { "name": "Asana iOS app", "asset_type": "ios", "location": "https://apps.apple.com/us/app/asana-mobile/id489969512", "group": "Asana Targets" }, { "name": "Asana Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.asana.app&hl=en", "group": "Asana Targets" }, { "name": "form.asana.com", "asset_type": "website", "location": "https://form.asana.com", "group": "Asana Targets" }, { "name": "*.app.asana.com", "asset_type": "website", "location": null, "group": "Asana Targets" }, { "name": "*.asana.biz", "asset_type": "other", "location": "https://*.asana.biz", "group": "Asana Enterprise Technology Scope" }, { "name": "Subdomain takeover at *asana.biz", "asset_type": "other", "location": null, "group": "Asana Enterprise Technology Scope" } ], "out_of_scope": [ { "name": "Other subdomains of asana.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Social engineering against Asana Support or Asana Employees", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "jira*.integrations.asana.plus", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "asana.okta.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "assets.asana.biz", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Forms that you do not own", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-37fe3e47f087afa0.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-58c3412e03830b70", "name": "Atlassian", "program_url": "https://bugcrowd.com/engagements/atlassian", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $12,000", "reward_min": "$100", "reward_max": "$12,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T14:55:55Z", "scope_published_at": null, "scope_group_count": null, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/atlassian/changelog/c31ec9fd-9fff-4aa1-9b4e-aa9929f1086a.json" ], "in_scope": [ { "name": "Atlassian Guard Standard and Premium (https://admin.atlassian.com/atlassian-guard)", "asset_type": "website", "location": "https://admin.atlassian.com/atlassian-guard", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Atlassian Admin (https://admin.atlassian.com/)", "asset_type": "website", "location": "https://admin.atlassian.com/", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Atlassian Identity (https://id.atlassian.com/login)", "asset_type": "website", "location": "https://id.atlassian.com/login", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Atlassian Start (https://start.atlassian.com)", "asset_type": "website", "location": "https://start.atlassian.com", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Bitbucket Cloud including Bitbucket Pipelines (https://bitbucket.org)", "asset_type": "website", "location": "https://bitbucket.org", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Confluence Cloud (bugbounty-test-.atlassian.net/wiki)", "asset_type": "website", "location": "https://www.atlassian.com/software/confluence", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Confluence Cloud Premium (bugbounty-test-.atlassian.net/wiki)", "asset_type": "website", "location": "https://www.atlassian.com/software/confluence/premium", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Confluence Cloud Mobile App for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.atlassian.android.confluence.core&hl=en_US&gl=US", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Confluence Cloud Mobile App for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/confluence-cloud/id1006971684", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Cloud Mobile App for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&hl=en_US&gl=US", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Cloud Mobile App for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/jira-cloud-by-atlassian/id1006972087", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Service Management Cloud (bugbounty-test-.atlassian.net)", "asset_type": "website", "location": "https://www.atlassian.com/software/jira/service-management", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Software Cloud (bugbounty-test-.atlassian.net)", "asset_type": "website", "location": "https://www.atlassian.com/software/jira", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Work Management Cloud formerly Jira Core (bugbounty-test-.atlassian.net)", "asset_type": "website", "location": "https://www.atlassian.com/software/jira/work-management", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Any associated *.atlassian.com or *.atl-paas.net domain that can be exploited DIRECTLY from the *.atlassian.net instance", "asset_type": "other", "location": null, "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Rovo", "asset_type": "website", "location": "https://www.atlassian.com/software/rovo", "group": "Rovo, Rovo Dev and other AI Features", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Rovo Dev CLI", "asset_type": "other", "location": "https://support.atlassian.com/rovo/docs/use-rovo-dev-cli/", "group": "Rovo, Rovo Dev and other AI Features", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Other Rovo Dev", "asset_type": "website", "location": "https://www.atlassian.com/software/rovo-dev", "group": "Rovo, Rovo Dev and other AI Features", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Atlassian MCP Server", "asset_type": "other", "location": "https://mcp.atlassian.com", "group": "Rovo, Rovo Dev and other AI Features", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Atlassian Marketplace (https://marketplace.atlassian.com)", "asset_type": "website", "location": "https://marketplace.atlassian.com", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Atlassian Atlas", "asset_type": "website", "location": "https://www.atlassian.com/software/atlas", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.atlastunnel.com", "asset_type": "website", "location": "https://*.atlastunnel.com", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Any other *.atlassian.com or *.atl-paas.net domain that cannot be exploited directly from a *.atlassian.net instance", "asset_type": "website", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.loom.com", "asset_type": "website", "location": "https://www.loom.com/", "group": "Atlassian Loom", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Loom Desktop App (Windows)", "asset_type": "website", "location": "https://www.loom.com/download", "group": "Atlassian Loom", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Loom Desktop App (macOS)", "asset_type": "website", "location": "https://www.loom.com/download", "group": "Atlassian Loom", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Loom for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.loom.android&hl=en_US&pli=1", "group": "Atlassian Loom", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Loom for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/loom-screen-recorder/id1474480829", "group": "Atlassian Loom", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Loom Chrome Extension", "asset_type": "other", "location": "https://chromewebstore.google.com/detail/loom-%E2%80%93-screen-recorder-sc/liecbddmkiiihnedobmlmillhodjkdmb?hl=en-US&pli=1", "group": "Atlassian Loom", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Atlassian Compass", "asset_type": "website", "location": "https://www.atlassian.com/software/compass", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Bamboo", "asset_type": "website", "location": "https://www.atlassian.com/software/bamboo", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Bitbucket Data Center", "asset_type": "website", "location": "https://www.atlassian.com/enterprise/data-center/bitbucket", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Confluence Companion App for macOS and Windows", "asset_type": "other", "location": "https://confluence.atlassian.com/doc/install-atlassian-companion-992678880.html", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Confluence Data Center Mobile App for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.atlassian.confluence.server", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Confluence Data Center Mobile App for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/confluence-server/id1288365159", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Crucible", "asset_type": "website", "location": "https://www.atlassian.com/software/crucible", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Confluence Data Center", "asset_type": "other", "location": "https://www.atlassian.com/enterprise/data-center/confluence", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Crowd", "asset_type": "website", "location": "https://www.atlassian.com/enterprise/data-center/crowd", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "FishEye", "asset_type": "website", "location": "https://www.atlassian.com/software/fisheye", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Core Data Center", "asset_type": "website", "location": "https://www.atlassian.com/enterprise/data-center/jira", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Data Center Mobile App for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.atlassian.jira.server&hl=en_US&gl=US", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Data Center Mobile App for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/jira-server/id1405353949", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Product Discovery", "asset_type": "website", "location": "https://www.atlassian.com/software/jira/product-discovery", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Service Management Data Center", "asset_type": "website", "location": "https://www.atlassian.com/enterprise/data-center/jira/service-management", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Software Data Center", "asset_type": "website", "location": "https://www.atlassian.com/enterprise/data-center/jira", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Sourcetree for macOS and Windows (https://www.sourcetreeapp.com/)", "asset_type": "other", "location": "https://www.sourcetreeapp.com/", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Other - (all other Atlassian targets)", "asset_type": "other", "location": null, "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Forge Platform", "asset_type": "other", "location": null, "group": "Atlassian Forge", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "GraphQL API (bugbounty-test-.atlassian.net/gateway/api/graphql)", "asset_type": "api", "location": null, "group": "Atlassian Forge", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://www.npmjs.com/package/@forge/cli", "asset_type": "other", "location": "https://www.npmjs.com/package/@forge/cli\t", "group": "Atlassian Forge", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "Any internal or development services.", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "First and third party apps and plugins from the marketplace are excluded from this bounty but may be in scope for https://bugcrowd.com/atlassianapps", "asset_type": "website", "location": "https://bugcrowd.com/atlassianapps", "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "shop.atlassian.com", "asset_type": "website", "location": "https://shop.atlassian.com", "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "bytebucket.org", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.bitbucket.io", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://blog.bitbucket.org", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "HipChat (inc. HipChat Data Center, HipChat Desktop, HipChat Mobile)", "asset_type": "other", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Stride (inc. Stride Video, Stride Desktop, Stride Mobile)", "asset_type": "other", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "support.atlassian.com", "asset_type": "website", "location": "https://support.atlassian.com", "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Any customer instance. Do not test customer instances or affect customer data. Customer cloud instances may be in the form of .atlassian.net or .jira.com. Test only your own instances.", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Any repository that you are not an owner of - do not impact Atlassian customers in any way.", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "support.loom.com", "asset_type": "website", "location": "https://support.loom.com", "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "info.loom.com", "asset_type": "website", "location": "https://info.loom.com/", "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] } ], "policy_review_state": "verified_policy_record", "verified_policy_id": "atlassian-bug-bounty", "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-58c3412e03830b70.md", "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ] }, { "id": "bugcrowd-6936d77e5d79f257", "name": "Atlassian-Built Apps", "program_url": "https://bugcrowd.com/engagements/atlassianapps", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,000", "reward_min": "$100", "reward_max": "$4,000", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:08Z", "scope_published_at": "2026-09-16T18:48:27.359Z", "scope_group_count": 5, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/atlassianapps/changelog/ebcf3502-3dd1-4a0c-a0ab-2bcee23d5c16.json" ], "in_scope": [ { "name": "Opsgenie - Cloud - https://marketplace.atlassian.com/apps/1222147/opsgenie?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1222147/opsgenie?hosting=cloud", "group": "Preinstalled Apps in Jira and Confluence" }, { "name": "Analytics for Confluence - Cloud - https://marketplace.atlassian.com/apps/1215795/analytics-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215795/analytics-for-confluence?hosting=cloud", "group": "Preinstalled Apps in Jira and Confluence" }, { "name": "Automation for Jira - Cloud - https://marketplace.atlassian.com/apps/1215460/automation-for-jira-server?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215460/automation-for-jira-server?hosting=cloud", "group": "Preinstalled Apps in Jira and Confluence" }, { "name": "Opsgenie Incident Timeline - Cloud - https://marketplace.atlassian.com/apps/1221251/opsgenie-incident-timeline?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221251/opsgenie-incident-timeline?hosting=cloud", "group": "Preinstalled Apps in Jira and Confluence" }, { "name": "Opsgenie Incident Timeline EU - Cloud - https://marketplace.atlassian.com/apps/1221312/opsgenie-incident-timeline-eu?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221312/opsgenie-incident-timeline-eu?hosting=cloud", "group": "Preinstalled Apps in Jira and Confluence" }, { "name": "Jira Cloud for Outlook (Official) - Cloud - https://marketplace.atlassian.com/apps/1220666/jira-cloud-for-outlook-official?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220666/jira-cloud-for-outlook-official?hosting=cloud", "group": "Preinstalled Apps in Jira and Confluence" }, { "name": "Assets - Confluence Macro - DataCenter - https://marketplace.atlassian.com/apps/1216074/assets-confluence-macro?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216074/insight-macro-for-confluence?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - SCCM Integration - DataCenter - https://marketplace.atlassian.com/apps/1219094/assets-sccm-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219094/insight-sccm-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - Snow Integration - DataCenter - https://marketplace.atlassian.com/apps/1219298/assets-snow-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219298/insight-snow-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - Jira & Bitbucket Integration - DataCenter - https://marketplace.atlassian.com/apps/1217750/assets-jira-bitbucket-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217750/insight-jira-bitbucket-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Mobile Plugin for Confluence Data Center and Server - Data Center - https://marketplace.atlassian.com/apps/1218250/mobile-plugin-for-confluence-data-center-and-server?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218250/mobile-plugin-for-confluence-data-center-and-server?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Jira Cloud Migration Assistant - DataCenter - https://marketplace.atlassian.com/apps/1222010/jira-cloud-migration-assistant?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1222010/jira-cloud-migration-assistant?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Better Code Macro for Confluence - Cloud - https://marketplace.atlassian.com/apps/1214912/better-code-macro-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1214912/better-code-macro-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Disable Referer for Bitbucket Server - DataCenter - https://marketplace.atlassian.com/apps/1214351/disable-referer-for-bitbucket-server?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1214351/disable-referer-for-bitbucket-server?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Look and Feel for Bitbucket Server - Datacenter - https://marketplace.atlassian.com/apps/1212632/look-and-feel-for-bitbucket-server?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212632/look-and-feel-for-bitbucket-server?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets Discovery - Cloud - https://marketplace.atlassian.com/apps/1214668/assets-discovery?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1214668/insight-discovery?hosting=cloud", "group": "Atlassian Apps" }, { "name": "ProForma: Forms & Checklist for Jira - Datacenter - https://marketplace.atlassian.com/apps/1215833/proforma-forms-checklist-for-jira?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215833/proforma-forms-checklist-for-jira?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Form macro builder for Confluence - Cloud - https://marketplace.atlassian.com/apps/1225664/form-macro-builder-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1225664/form-macro-builder-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "GitHub for Jira - Cloud - https://marketplace.atlassian.com/apps/1219592/github-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219592/github-for-jira?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Confluence Cloud for Microsoft Teams - Cloud - https://marketplace.atlassian.com/apps/1226127/confluence-cloud-for-microsoft-teams-official?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1226127/confluence-cloud-for-microsoft-teams?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Bitbucket Server Protect Unmerged Hook - Data Center - https://marketplace.atlassian.com/apps/1211203/bitbucket-server-protect-unmerged-hook?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211203/bitbucket-server-protect-unmerged-hook?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Jira Cloud for Microsoft Teams - Cloud - https://marketplace.atlassian.com/apps/1226478/jira-cloud-for-microsoft-teams-official?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1226478/jira-cloud-for-microsoft-teams?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Decisions Helper for Confluence - Cloud - https://marketplace.atlassian.com/apps/1226380/decisions-helper-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1226380/decisions-helper-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Troubleshooting and Support - Bamboo - Data Center - https://marketplace.atlassian.com/apps/1217745/troubleshooting-and-support-bamboo?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217745/troubleshooting-and-support-bamboo?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Bitbucket Cloud Migration Assistant - Data Center - https://marketplace.atlassian.com/apps/1226610/bitbucket-cloud-migration-assistant?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1226610/bitbucket-cloud-migration-assistant?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Hackathon Workflow Alan - Cloud - https://marketplace.atlassian.com/apps/1227949/hackathon-workflow-alan?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1227949/hackathon-workflow-alan?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Hackathon Workflow Alan - Data Center - https://marketplace.atlassian.com/apps/1227949/hackathon-workflow-alan?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1227949/hackathon-workflow-alan?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Application tunnels - DataCenter - https://marketplace.atlassian.com/apps/1227901/application-tunnels?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1227901/application-tunnels?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Ipython Notebook Viewer - Cloud - https://marketplace.atlassian.com/apps/1218117/ipython-notebook-viewer?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218117/ipython-notebook-viewer?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Atlas for Jira Cloud - Cloud - https://marketplace.atlassian.com/apps/1228937/atlas-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1228937/atlas-for-jira-cloud?hosting=cloud&tab=overview", "group": "Atlassian Apps" }, { "name": "Developer Assistant for Confluence - Cloud - https://marketplace.atlassian.com/apps/1229446/developer-assistant-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1229446/developer-assistant-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Developer Assistant for Jira - Cloud - https://marketplace.atlassian.com/apps/1229343/developer-assistant-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1229343/developer-assistant-for-jira?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Team Calendars for Confluence - Cloud - https://marketplace.atlassian.com/apps/72307/team-calendars-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/72307/team-calendars-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Automation for Jira - DataCenter - https://marketplace.atlassian.com/apps/1215460/automation-for-jira?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215460/automation-for-jira-data-center-and-server?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Team Calendars for Confluence - DataCenter - https://marketplace.atlassian.com/apps/72307/team-calendars-for-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/72307/team-calendars-for-confluence?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Advanced Roadmaps (formerly Portfolio) - DataCenter - https://marketplace.atlassian.com/apps/1212136/advanced-roadmaps-formerly-portfolio?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212136/advanced-roadmaps-formerly-portfolio?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Atlassian Universal Plugin Manager - DataCenter - https://marketplace.atlassian.com/apps/23915/atlassian-universal-plugin-manager?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/23915/atlassian-universal-plugin-manager?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Questions for Confluence - DataCenter - https://marketplace.atlassian.com/apps/1211644/questions-for-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211644/questions-for-confluence?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Questions for Confluence - Cloud - https://marketplace.atlassian.com/apps/1211644/questions-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211644/questions-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Troubleshooting and Support - Jira - DataCenter - https://marketplace.atlassian.com/apps/1217696/troubleshooting-and-support-jira?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217696/troubleshooting-and-support-jira?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Troubleshooting and Support - Confluence - DataCenter - https://marketplace.atlassian.com/apps/1217697/troubleshooting-and-support-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217697/troubleshooting-and-support-confluence?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Confluence Cloud Migration Assistant - DataCenter - https://marketplace.atlassian.com/apps/1219672/confluence-cloud-migration-assistant?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219672/confluence-cloud-migration-assistant?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "SSO for Atlassian Server and Data Center - DataCenter - https://marketplace.atlassian.com/apps/1216096/sso-for-atlassian-server-and-data-center?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216096/sso-for-atlassian-server-and-data-center?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Jira Server for Slack (Official) - DataCenter - https://marketplace.atlassian.com/apps/1220099/jira-server-for-slack-official?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220099/jira-server-for-slack-official?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Auto Unapprove for Bitbucket Server - DataCenter - https://marketplace.atlassian.com/apps/1211449/auto-unapprove-for-bitbucket-server?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211449/auto-unapprove-for-bitbucket-server?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Confluence Server for Slack (Official) - DataCenter - https://marketplace.atlassian.com/apps/1220186/confluence-server-for-slack-official?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220186/confluence-server-for-slack-official?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Statuspage for Jira Service Management - DataCenter - https://marketplace.atlassian.com/apps/1216079/statuspage-for-jira-service-management?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216079/statuspage-for-jira-service-management?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Statuspage for Jira Service Management - Cloud - https://marketplace.atlassian.com/apps/1216079/statuspage-for-jira-service-management?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216079/statuspage-for-jira-service-management?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Bitbucket Server for Slack (Official) - DataCenter - https://marketplace.atlassian.com/apps/1220729/bitbucket-server-for-slack-official?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220729/bitbucket-server-for-slack-official?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Advanced Roadmaps for Jira in Confluence - DataCenter - https://marketplace.atlassian.com/apps/1221237/advanced-roadmaps-for-jira-in-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221237/advanced-roadmaps-for-jira-in-confluence?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Centralized license visibility - DataCenter - https://marketplace.atlassian.com/apps/1220745/centralized-license-visibility?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220745/centralized-license-visibility?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Permission Lockdown for Bitbucket Server - DataCenter - https://marketplace.atlassian.com/apps/1217941/permission-lockdown-for-bitbucket-server?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217941/permission-lockdown-for-bitbucket-server?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Jira Cloud for Slack (Official) - Cloud - https://marketplace.atlassian.com/apps/1216863/jira-cloud-for-slack-official?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216863/jira-cloud-for-slack-official?hosting=cloud&tab=overview", "group": "Atlassian Apps" }, { "name": "Confluence Cloud for Slack (Official) - Cloud - https://marketplace.atlassian.com/apps/1219518/confluence-cloud-for-slack-official?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219518/confluence-cloud-for-slack-official?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Jira Cloud for Google Sheets (Official) - Cloud - https://marketplace.atlassian.com/apps/1220382/jira-cloud-for-google-sheets-official?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220382/jira-cloud-for-google-sheets-official?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Bitbucket Cloud for Slack (Official) - Cloud - https://marketplace.atlassian.com/apps/1218781/bitbucket-cloud-for-slack-official?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218781/bitbucket-cloud-for-slack-official?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Atlassian Plugin SDK - DEB - Cloud - https://marketplace.atlassian.com/apps/1210992/atlassian-plugin-sdk-deb?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1210992/atlassian-plugin-sdk-deb?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Jira Cloud for Excel (official) - Cloud - https://marketplace.atlassian.com/apps/1221301/jira-cloud-for-excel-official?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221301/jira-cloud-for-excel-official?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Jenkins for Jira (official) - Cloud - https://marketplace.atlassian.com/apps/1227791/jenkins-for-jira-official?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1227791/jenkins-for-jira-official?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Bitbucket Pipelines for Jira - Cloud - https://marketplace.atlassian.com/apps/1220820/bitbucket-pipelines-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220820/bitbucket-pipelines-for-jira?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Mobile Plugin for Jira - DataCenter - https://marketplace.atlassian.com/apps/1220151/mobile-plugin-for-jira-data-center-and-server?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220151/mobile-plugin-for-jira-data-center-and-server?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - Tempo Integration - DataCenter - https://marketplace.atlassian.com/apps/1217751/assets-tempo-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217751/insight-tempo-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - Jamf Integration - DataCenter - https://marketplace.atlassian.com/apps/1219908/assets-jamf-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219908/insight-jamf-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - Device42 Integration - DataCenter - https://marketplace.atlassian.com/apps/1219632/assets-device42-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219632/insight-device42-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - DataCenter - https://marketplace.atlassian.com/apps/1212137/assets?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212137/insight-asset-management?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - AWS Integration - DataCenter - https://marketplace.atlassian.com/apps/1218757/assets-aws-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218757/insight-aws-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - Google Cloud Integration - DataCenter - https://marketplace.atlassian.com/apps/1219212/assets-google-cloud-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219212/insight-google-cloud-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - NVD Integration - DataCenter - https://marketplace.atlassian.com/apps/1220353/assets-nvd-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220353/insight-nvd-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Microsoft Teams for Jira - DataCenter - https://marketplace.atlassian.com/apps/1217836/microsoft-teams-for-jira?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217836/microsoft-teams-for-jira?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets Discovery - DataCenter - https://marketplace.atlassian.com/apps/1214668/assets-discovery?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1214668/insight-discovery?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "JavaScript Charts for Jira Cloud - Cloud - https://marketplace.atlassian.com/apps/1214527/javascript-charts-for-jira-cloud?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1214527/javascript-charts-for-jira-cloud?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Entity Property Tool for Jira - Cloud - https://marketplace.atlassian.com/apps/1214509/entity-property-tool-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1214509/entity-property-tool-for-jira?hosting=cloud", "group": "Atlassian Apps" }, { "name": "My Reminders for Jira - Cloud - https://marketplace.atlassian.com/apps/1212778/my-reminders-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212778/my-reminders-for-jira?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Assets - ServiceNow Integration - DataCenter - https://marketplace.atlassian.com/apps/1219561/assets-servicenow-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219561/insight-servicenow-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Rich Text Gadget for Jira - Cloud - https://marketplace.atlassian.com/apps/1214632/rich-text-gadget-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1214632/rich-text-gadget-for-jira?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Previous/next navigation - Cloud - https://marketplace.atlassian.com/apps/1223382/previous-next-navigation?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1223382/previous-next-navigation?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Hackathon for Jira - Cloud - https://marketplace.atlassian.com/apps/1214757/hackathon-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1214757/hackathon-for-jira?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Who's Looking for Jira Cloud - Cloud - https://marketplace.atlassian.com/apps/1211596/whos-looking-for-jira-cloud?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211596/whos-looking-for-jira-cloud?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Assets - Azure Integration - DataCenter - https://marketplace.atlassian.com/apps/1218974/assets-azure-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218974/insight-azure-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "JSM Assets - Microsoft Entra ID (Azure AD) Beta Integration - Cloud - https://marketplace.atlassian.com/apps/1232506/jsm-assets-microsoft-entra-id-azure-ad-beta-integration?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1232506/jsm-assets-microsoft-entra-id-azure-ad-beta-integration?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Mermaid diagrams viewer-Cloud-https://marketplace.atlassian.com/apps/1232887/mermaid-diagrams-viewer?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1232887/mermaid-diagrams-viewer?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Extension Point Finder for Jira - Cloud - https://marketplace.atlassian.com/apps/1230672/extension-point-finder-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1230672/extension-point-finder-for-jira?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Extension Point Finder for Confluence - Cloud - https://marketplace.atlassian.com/apps/1230671/extension-point-finder-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1230671/extension-point-finder-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Issue Status Helper - Cloud - https://marketplace.atlassian.com/apps/1231916/issue-status-helper?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1231916/issue-status-helper?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Databricks Visualization - Cloud - https://marketplace.atlassian.com/apps/1230032/databricks-visualization?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1230032/databricks-visualization?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Audio Recorder for Confluence - Cloud - https://marketplace.atlassian.com/apps/1233346/audio-recorder-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1233346/audio-recorder-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Localised Date Macro for Confluence - Cloud - https://marketplace.atlassian.com/apps/1231985/localised-date-macro-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1231985/localised-date-macro-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Bump Build Number - DataCenter - https://marketplace.atlassian.com/apps/1232254/bump-build-number?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1232254/bump-build-number?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Event Sign-up for Confluence - Cloud - https://marketplace.atlassian.com/apps/1235122/event-sign-up-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1235122/event-sign-up-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Data Manager Clients for JSM Assets - Cloud - https://marketplace.atlassian.com/apps/1234690/data-manager-clients-for-jsm-assets?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1234690/data-manager-clients-for-jsm-assets?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Azure DevOps for Jira (Official) - Cloud - https://marketplace.atlassian.com/apps/1232793/azure-devops-for-jira-official?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1232793/azure-devops-for-jira-official?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "JSM Incident Timeline - Cloud - https://marketplace.atlassian.com/apps/1234673/jsm-incident-timeline?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1234673/jsm-incident-timeline?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Sentry for Compass - Cloud - https://marketplace.atlassian.com/apps/1233977/sentry-for-compass?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1233977/sentry-for-compass?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "GitHub for Compass - Cloud - https://marketplace.atlassian.com/apps/1234027/github-for-compass?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1234027/github-for-compass?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "GitLab for Compass - Cloud - https://marketplace.atlassian.com/apps/1233993/gitlab-for-compass?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1233993/gitlab-for-compass?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "Bitbucket for Compass - Cloud - https://marketplace.atlassian.com/apps/1234004/bitbucket-for-compass?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1234004/bitbucket-for-compass?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "Snyk for Compass - Cloud - https://marketplace.atlassian.com/apps/1233931/snyk-for-compass?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1233931/snyk-for-compass?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "Slack for Compass - Cloud - https://marketplace.atlassian.com/apps/1233986/slack-for-compass?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1233986/slack-for-compass?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "PagerDuty for Compass - Cloud - https://marketplace.atlassian.com/apps/1233942/pagerduty-for-compass?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1233942/pagerduty-for-compass?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "Jira & Confluence Smart Chips for Google Docs Slides Sheets - Cloud - https://marketplace.atlassian.com/apps/1232285/jira-confluence-smart-chips-for-google-docs-slides-sheets?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1232285/jira-confluence-smart-chips-for-google-docs-slides-sheets?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "AutoLink Plugin for Jira - DataCenter - https://marketplace.atlassian.com/apps/1211246/autolink-plugin-for-jira?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211246/autolink-plugin-for-jira?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Confluence Widget for Figma (Beta) - Cloud - https://marketplace.atlassian.com/apps/1235488/confluence-widget-for-figma-beta?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1235488/confluence-widget-for-figma-beta?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Jira Board Buddy - Cloud - https://marketplace.atlassian.com/apps/1235496/jira-board-buddy?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1235496/jira-board-buddy?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Toolkit Plugin for Jira - DataCenter - https://marketplace.atlassian.com/apps/5142/toolkit-plugin-for-jira?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/5142/toolkit-plugin-for-jira?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Box - https://trello.com/power-ups/55a5d915446f517774210001/box", "asset_type": "other", "location": "https://trello.com/power-ups/55a5d915446f517774210001/box", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Card Repeater - https://trello.com/power-ups/57b47fb862d25a30298459b1/card-repeater", "asset_type": "other", "location": "https://trello.com/power-ups/57b47fb862d25a30298459b1/card-repeater", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Card Snooze - https://trello.com/power-ups/58dd18bdccfca7af8311792e/card-snooze", "asset_type": "other", "location": "https://trello.com/power-ups/58dd18bdccfca7af8311792e/card-snooze", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Evernote - https://trello.com/power-ups/55a5d915446f517774210003/evernote", "asset_type": "other", "location": "https://trello.com/power-ups/55a5d915446f517774210003/evernote", "group": "Trello Power Ups (Made by Trello)" }, { "name": "GitHub - https://trello.com/power-ups/55a5d916446f517774210004/github", "asset_type": "other", "location": "https://trello.com/power-ups/55a5d916446f517774210004/github", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Google Drive - https://trello.com/power-ups/55a5d916446f517774210006/google-drive", "asset_type": "other", "location": "https://trello.com/power-ups/55a5d916446f517774210006/google-drive", "group": "Trello Power Ups (Made by Trello)" }, { "name": "MailChimp - https://trello.com/power-ups/55a5d917446f51777421000c/mailchimp", "asset_type": "other", "location": "https://trello.com/power-ups/55a5d917446f51777421000c/mailchimp", "group": "Trello Power Ups (Made by Trello)" }, { "name": "OneDrive - https://trello.com/power-ups/5940440775fbe327abd3329f/onedrive", "asset_type": "other", "location": "https://trello.com/power-ups/5940440775fbe327abd3329f/onedrive", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Package Tracker - https://trello.com/power-ups/55a5d917446f51777421000d/package-tracker", "asset_type": "other", "location": "https://trello.com/power-ups/55a5d917446f51777421000d/package-tracker", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Read Me - https://trello.com/power-ups/5a2de0c41ae4a1537bb0055d/read-me", "asset_type": "other", "location": "https://trello.com/power-ups/5a2de0c41ae4a1537bb0055d/read-me", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Salesforce - https://trello.com/power-ups/55a5d917446f517774210009/salesforce", "asset_type": "other", "location": "https://trello.com/power-ups/55a5d917446f517774210009/salesforce", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Slack - https://trello.com/power-ups/55a5d917446f51777421000a/slack", "asset_type": "other", "location": "https://trello.com/power-ups/55a5d917446f51777421000a/slack", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Zendesk - https://trello.com/power-ups/56940ede94fd60cf95f7ce6a/zendesk", "asset_type": "other", "location": "https://trello.com/power-ups/56940ede94fd60cf95f7ce6a/zendesk", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Dashcards - https://trello.com/power-ups/6048e897c73d032a983e2a7c/dashcards", "asset_type": "other", "location": "https://trello.com/power-ups/6048e897c73d032a983e2a7c/dashcards", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Third Party Marketplace Apps", "asset_type": "website", "location": null, "group": "Third Party Marketplace Apps" } ], "out_of_scope": [ { "name": "Calendar Power-Up", "asset_type": "website", "location": "https://trello.com/power-ups/55a5d917446f517774210011/calendar-power-up", "group": "Out of scope targets" }, { "name": "List Limits Power-Up", "asset_type": "website", "location": "https://trello.com/power-ups/5c2462c384ab8949b1724a20/list-limits", "group": "Out of scope targets" }, { "name": "Card Aging Power-Up", "asset_type": "website", "location": "https://trello.com/power-ups/55a5d917446f517774210012/card-aging", "group": "Out of scope targets" }, { "name": "Voting Power-Up", "asset_type": "website", "location": "https://trello.com/power-ups/55a5d917446f517774210013/voting", "group": "Out of scope targets" }, { "name": "https://marketplace.atlassian.com (Website)", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://trello.com/power-ups/*", "asset_type": "other", "location": null, "group": "Out of scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-6936d77e5d79f257.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-215d48b1ed41996f", "name": "Aurory Managed Bug Bounty Engagement (Public)", "program_url": "https://bugcrowd.com/engagements/aurory-mbb-og2", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,500", "reward_min": "$100", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Games", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:09Z", "scope_published_at": "2026-08-26T12:16:39.908Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/aurory-mbb-og2/changelog/c9e4532a-1ed4-4c92-851d-c840eb872cd5.json" ], "in_scope": [ { "name": "https://app.aurory.io", "asset_type": "website", "location": "https://app.aurory.io", "group": "In Scope Targets" }, { "name": "Amiko Arena", "asset_type": "other", "location": "https://store.epicgames.com/p/amiko-arena-a5986d", "group": "In Scope Targets" }, { "name": "Amiko Legends", "asset_type": "other", "location": "https://store.steampowered.com/app/4245930/Amiko_Legends/", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "https://blog.aurory.io", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Sentry.io", "asset_type": "website", "location": "https://sentry.io/welcome/", "group": "Out of Scope" }, { "name": "Arbitrum Casier (aka Locker) Smart Contract", "asset_type": "other", "location": "https://arbiscan.io/address/0x4e0e24b960286be46ecf92986bef548604601d77", "group": "Out of Scope" }, { "name": "wss://ws.aurorynet.dev.aurory.io", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-215d48b1ed41996f.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-42a03b5a0dcc855e", "name": "Auth0 by Okta", "program_url": "https://bugcrowd.com/engagements/auth0-okta", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $50,000", "reward_min": "$100", "reward_max": "$50,000", "scope_rank": 4, "access_status": "open", "industry": "Cloud", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:10Z", "scope_published_at": "2026-04-08T16:27:36.037Z", "scope_group_count": 4, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/auth0-okta/changelog/3491b799-94fd-4a62-8ce0-1d5eaa0e09c6.json" ], "in_scope": [ { "name": "config.cic-bug-bounty.auth0app.com", "asset_type": "website", "location": null, "group": "Tier 1 Targets" }, { "name": "manage.cic-bug-bounty.auth0app.com (Management Dashboard)", "asset_type": "website", "location": "https://manage.cic-bug-bounty.auth0app.com/", "group": "Tier 1 Targets" }, { "name": "*.cic-bug-bounty.auth0app.com", "asset_type": "website", "location": null, "group": "Tier 1 Targets" }, { "name": "Auth0 Guardian Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.auth0.guardian&hl=en_US&gl=US", "group": "Tier 1 Targets" }, { "name": "Auth0 Guardian IoS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/auth0-guardian/id1093447833", "group": "Tier 1 Targets" }, { "name": "marketplace.auth0.com (Auth0 Marketplace)", "asset_type": "website", "location": "https://marketplace.auth0.com", "group": "Tier 1 Targets" }, { "name": "MFA Integrations", "asset_type": "other", "location": null, "group": "Tier 1 Targets" }, { "name": "https://dashboard.fga.dev/", "asset_type": "website", "location": "https://dashboard.fga.dev/", "group": "Tier 1 Targets" }, { "name": "https://api.us1.fga.dev/", "asset_type": "api", "location": "https://api.us1.fga.dev/", "group": "Tier 1 Targets" }, { "name": "https://customers.us1.fga.dev/", "asset_type": "api", "location": "https://customers.us1.fga.dev/", "group": "Tier 1 Targets" }, { "name": "https://play.fga.dev/", "asset_type": "website", "location": "https://play.fga.dev/", "group": "Tier 1 Targets" }, { "name": "Auth0 SDK for Web (Auth0.js)", "asset_type": "other", "location": "https://github.com/auth0/auth0.js", "group": "SDK Targets" }, { "name": "Lock for Web (lock)", "asset_type": "other", "location": "https://github.com/auth0/lock", "group": "SDK Targets" }, { "name": "Auth0 Single Page App SDK (auth0-spa-js)", "asset_type": "other", "location": "https://github.com/auth0/auth0-spa-js", "group": "SDK Targets" }, { "name": ".NET SDK (Auth0.Net)", "asset_type": "other", "location": "https://github.com/auth0/Auth0.Net", "group": "SDK Targets" }, { "name": "Auth0 Next.js SDK (nextjs-auth0)", "asset_type": "other", "location": "https://github.com/auth0/nextjs-auth0", "group": "SDK Targets" }, { "name": "Auth0 Java SDK (auth0-java)", "asset_type": "other", "location": "https://github.com/auth0/auth0-java", "group": "SDK Targets" }, { "name": "Auth0 React Native SDK (react-native-auth0)", "asset_type": "other", "location": "https://github.com/auth0/react-native-auth0", "group": "SDK Targets" }, { "name": "Auth0 PHP SDK (auth0-php)", "asset_type": "other", "location": "https://github.com/auth0/auth0-php", "group": "SDK Targets" }, { "name": "auth0.com", "asset_type": "website", "location": null, "group": "Tier 2 Targets" }, { "name": "samltool.io", "asset_type": "website", "location": null, "group": "Tier 2 Targets" }, { "name": "webauthn.me", "asset_type": "website", "location": null, "group": "Tier 2 Targets" }, { "name": "openidconnect.net", "asset_type": "website", "location": null, "group": "Tier 2 Targets" }, { "name": "jwt.io", "asset_type": "website", "location": null, "group": "Tier 2 Targets" }, { "name": "auth0.net", "asset_type": "website", "location": null, "group": "Tier 2 Targets" } ], "out_of_scope": [ { "name": "auth0.auth0.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "manage.auth0.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "accounts.auth0.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "webtask.io", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "phenix.rocks", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Auth0 Docs (including quickstarts)", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "sharelock.io", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "goextend.io", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://support.auth0.com/tickets/new", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "support.auth0.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "community.auth0.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Auth0 passport-ws-fed", "asset_type": "other", "location": "https://github.com/auth0/passport-wsfed-saml2", "group": "Out of scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-42a03b5a0dcc855e.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-bd3dbed8680001d1", "name": "AXIS OS", "program_url": "https://bugcrowd.com/engagements/axis-os-public", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$500 - $40,000", "reward_min": "$500", "reward_max": "$40,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:11Z", "scope_published_at": "2026-09-25T11:15:40.368Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/axis-os-public/changelog/8678b92a-d1e6-4dab-8969-adc57ee5b4d6.json" ], "in_scope": [ { "name": "AXIS OS", "asset_type": "iot", "location": null, "group": "AXIS OS " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-bd3dbed8680001d1.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-74f230cd3bc2b012", "name": "Backblaze", "program_url": "https://bugcrowd.com/engagements/backblaze", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$500 - $6,500", "reward_min": "$500", "reward_max": "$6,500", "scope_rank": 3, "access_status": "open", "industry": "Cloud", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:12Z", "scope_published_at": "2024-08-30T13:59:02.041Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/backblaze/changelog/0230409e-f2a3-4d54-9094-599f0551ab1d.json" ], "in_scope": [ { "name": "Backblaze Android mobile application", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.backblaze.android&hl=en_US&gl=US", "group": "In Scope Targets" }, { "name": "Backblaze iOS mobile application", "asset_type": "ios", "location": "https://apps.apple.com/us/app/backblaze/id628638330", "group": "In Scope Targets" }, { "name": "Mac Personal Backup Clients", "asset_type": "other", "location": null, "group": "In Scope Targets" }, { "name": "Windows Personal Backup Clients", "asset_type": "other", "location": null, "group": "In Scope Targets" }, { "name": "Mac Restore Downloaders", "asset_type": "other", "location": null, "group": "In Scope Targets" }, { "name": "Windows Restore Downloaders", "asset_type": "other", "location": null, "group": "In Scope Targets" }, { "name": "Git Repositories (b2-sdk-java & B2 Command Line Tool)", "asset_type": "other", "location": null, "group": "In Scope Targets" }, { "name": "B2 APIs (*.backblazeb2.com)", "asset_type": "api", "location": "https://*.backblazeb2.com", "group": "In Scope Targets" }, { "name": "Backblaze Website (*.backblaze.com)", "asset_type": "website", "location": "https://backblaze.com", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-74f230cd3bc2b012.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-46bf988d9e5d7597", "name": "Balsamiq for Atlassian Products", "program_url": "https://bugcrowd.com/engagements/balsamiq", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:13Z", "scope_published_at": "2025-03-10T08:48:32.895Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/balsamiq/changelog/e2cac3cb-e4fc-408e-ace8-d7ed657dcdbf.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1213404/balsamiq-wireframes-for-confluence-cloud?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1213404/balsamiq-wireframes-for-confluence-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1212796/balsamiq-wireframes-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212796/balsamiq-wireframes-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/5161/balsamiq-wireframes-for-jira?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/5161/balsamiq-wireframes-for-jira?hosting=datacenter&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/256/balsamiq-wireframes-for-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/256/balsamiq-wireframes-for-confluence?hosting=datacenter&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-46bf988d9e5d7597.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-f682c3a3aa7ed8f2", "name": "Binance", "program_url": "https://bugcrowd.com/engagements/binance", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $10,000", "reward_min": "$200", "reward_max": "$10,000", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:14Z", "scope_published_at": "2025-01-07T08:27:07.329Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/binance/changelog/c2bdd90c-9f9b-4c3e-9225-a5dc9570bfb9.json" ], "in_scope": [ { "name": "api.coinmarketcap.com", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "pro-api.coinmarketcap.com", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "*.binance.com", "asset_type": "website", "location": "https://www.binance.com/", "group": "In Scope" }, { "name": "Binance Desktop Application", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Binance Mobile Application for Android", "asset_type": "android", "location": null, "group": "In Scope" }, { "name": "Binance Mobile Application for iOS", "asset_type": "ios", "location": null, "group": "In Scope" }, { "name": "api.binance.com", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "Binance macOS Application", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "pro.coinmarketcap.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "CoinMarketCap Android app", "asset_type": "android", "location": null, "group": "In Scope" }, { "name": "Trustwallet Android App", "asset_type": "android", "location": null, "group": "In Scope" }, { "name": "Trustwallet iOS App", "asset_type": "ios", "location": null, "group": "In Scope" }, { "name": "https://github.com/trustwallet/wallet-core/", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "CoinMarketCap iOS app", "asset_type": "ios", "location": null, "group": "In Scope" }, { "name": "portal-api.coinmarketcap.com", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "coinmarketcap.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "3rdparty-apis.coinmarketcap.com", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "*.binance.us", "asset_type": "website", "location": "https://www.binance.us/", "group": "In Scope" }, { "name": "binance.tr", "asset_type": "website", "location": "https://binance.tr", "group": "In Scope" }, { "name": "Trustwallet Chrome Extension", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [ { "name": "jobs.coinmarketcap.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "support.binance.*", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "binance.sg", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.trustwallet.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.trustwalletapp.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.binance.org", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "blog.coinmarketcap.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "support.coinmarketcap.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "blockchain.coinmarketcap.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.coinmarketcap.com", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-f682c3a3aa7ed8f2.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-75b9247529d02120", "name": "Bitdefender", "program_url": "https://bugcrowd.com/engagements/bitdefender", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $15,000", "reward_min": "$100", "reward_max": "$15,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:15Z", "scope_published_at": "2026-08-12T11:42:12.162Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bitdefender/changelog/3a45252c-eccf-4d60-a163-77362fa66418.json" ], "in_scope": [ { "name": "Bitdefender Total Security", "asset_type": "other", "location": null, "group": "Bitdefender" }, { "name": "*.bitdefender.net", "asset_type": "website", "location": null, "group": "Bitdefender" }, { "name": "Bitdefender Antimalware Engines", "asset_type": "other", "location": null, "group": "Bitdefender" }, { "name": "*.bitdefender.com", "asset_type": "website", "location": null, "group": "Bitdefender" }, { "name": "Bitdefender GravityZone Business Security", "asset_type": "other", "location": "https://www.bitdefender.com/business/smb-products/business-security.html?cid=ppc|b|google|smb&s_kwcid=AL!6076!3!514235572261!p!!g!!bitdefender%20business&utm_term=bitdefender%20business&utm_campaign=USA+SMB+Branded+30&utm_source=adwords&utm_medium=ppc&hsa_acc=8155205354&hsa_cam=7848657822&hsa_grp=124745713150&hsa_ad=514235572261&hsa_src=g&hsa_tgt=kwd-308396066873&hsa_kw=bitdefender%20business&hsa_mt=p&hsa_net=adwords&hsa_ver=3&gclid=CjwKCAjwqIiFBhAHEiwANg9szk-Rr3iSn4mrwsvAUOn-pzrO12ufWDmyCLopWigaLQW0t_xtlBE65RoCr6kQAvD_BwE", "group": "Bitdefender" } ], "out_of_scope": [ { "name": "businessinsights.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "businessemail.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "businessresources.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "oemhub.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "oemresources.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "community.bitdefender.com/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "resellerportal.bitdefender.com/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "brand.bitdefender.com/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "stats.bitdefender.com/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "sstats.bitdefender.com/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "lsems.gravityzone.bitdefender.com/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "ssems.gravityzone.bitdefender.com/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "crp.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "telcosuccess.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "demo.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "translate.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "explore.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "explore-lb.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "partner-marketing.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "seems.gravityzone.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "workflow.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "workflow-test.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "workflow-dev.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "trust.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-75b9247529d02120.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-c6c6a4a7ce57753c", "name": "Bitdefender Box v2", "program_url": "https://bugcrowd.com/engagements/bitdefenderbox2", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $5,000", "reward_min": "$200", "reward_max": "$5,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:16Z", "scope_published_at": "2020-02-13T00:32:33.727Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bitdefenderbox2/changelog/dd3672f0-00b7-48ec-939d-8fa9532c35d6.json" ], "in_scope": [ { "name": "Bitdefender BOX v2", "asset_type": "iot", "location": null, "group": "In scope" } ], "out_of_scope": [ { "name": "Bitdefender Central (iOS App)", "asset_type": "ios", "location": null, "group": "Out of scope" }, { "name": "Bitdefender Central (Android App)", "asset_type": "android", "location": null, "group": "Out of scope" }, { "name": "central.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-c6c6a4a7ce57753c.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-4d515db5ec5e9be6", "name": "BitGo Managed Public Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/bitgo-mbb-og-public", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,500", "reward_min": "$100", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:17Z", "scope_published_at": "2026-06-17T18:53:57.489Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bitgo-mbb-og-public/changelog/b92e72cb-9de5-45fb-aa47-8164f4056a64.json" ], "in_scope": [ { "name": "*.bitgo.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "app.bitgo.com", "asset_type": "website", "location": "https://app.bitgo.com", "group": "In Scope" }, { "name": "app.bitgo-test.com", "asset_type": "website", "location": "https://app.bitgo-test.com", "group": "In Scope" }, { "name": "bitgo.ae", "asset_type": "other", "location": "https://bitgo.ae/", "group": "In Scope" }, { "name": "usdstandard.com", "asset_type": "other", "location": "https://usdstandard.com/", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-4d515db5ec5e9be6.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-579fe2e61922bdcf", "name": "BitGo Mobile Apps Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/bitgo-mobileapps-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:18Z", "scope_published_at": "2026-08-12T18:16:23.068Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bitgo-mobileapps-mbb-og/changelog/9bf33fae-cd6c-4a53-8ef9-676bbc42ba37.json" ], "in_scope": [ { "name": "BitGo Verify Mobile App (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.bitgo.verify&hl=en_US", "group": "In Scope" }, { "name": "BitGo Verify Mobile App (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/bitgo-verify/id1608937235", "group": "In Scope" }, { "name": "BitGo Platform Access Mobile App (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.bitgo.mobileapp", "group": "In Scope" }, { "name": "BitGo Platform Access Mobile App (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/bitgo/id6739010408", "group": "In Scope" } ], "out_of_scope": [ { "name": "*.bitgo.com", "asset_type": "website", "location": null, "group": "Out of Scope " } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-579fe2e61922bdcf.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-dae6649841387d56", "name": "Bitpanda Ongoing Bug Bounty", "program_url": "https://bugcrowd.com/engagements/bitpanda-og-bb", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $15,000", "reward_min": "$100", "reward_max": "$15,000", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:19Z", "scope_published_at": "2025-03-17T14:15:24.149Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bitpanda-og-bb/changelog/07e14180-dd4e-4ad5-9a3f-532f7361bc8e.json" ], "in_scope": [ { "name": "https://web.bitpanda.com", "asset_type": "website", "location": "https://web.bitpanda.com", "group": "Tier 1 Assets " }, { "name": "https://www.bitpanda.com", "asset_type": "website", "location": "https://www.bitpanda.com/", "group": "Tier 1 Assets " }, { "name": "https://api.bitpanda.com", "asset_type": "api", "location": null, "group": "Tier 1 Assets " }, { "name": "wss://socket.bitpanda.com", "asset_type": "website", "location": null, "group": "Tier 1 Assets " }, { "name": "All the Blockchain Infrastructure", "asset_type": "other", "location": null, "group": "Tier 1 Assets " }, { "name": "https://account.bitpanda.com", "asset_type": "website", "location": "https://account.bitpanda.com", "group": "Tier 1 Assets " }, { "name": "Bitpanda Broker Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.bitpanda.bitpanda", "group": "Tier 1 Assets " }, { "name": "Bitpanda Broker iOS App", "asset_type": "ios", "location": "https://apps.apple.com/app/bitpanda-buy-bitcoin-crypto/id1449018960", "group": "Tier 1 Assets " }, { "name": "https://blog.bitpanda.com", "asset_type": "website", "location": "https://blog.bitpanda.com/en", "group": "Tier 2 Assets " }, { "name": "https://www.bitpanda.com/academy/", "asset_type": "website", "location": "https://www.bitpanda.com/academy/en/", "group": "Tier 2 Assets " } ], "out_of_scope": [ { "name": "https://support.bitpanda.com", "asset_type": "website", "location": "https://support.bitpanda.com", "group": "Out of Scope" }, { "name": "https://maintenance.bitpanda.com", "asset_type": "website", "location": "https://maintenance.bitpanda.com", "group": "Out of Scope" }, { "name": "https://beta.bitpanda.com", "asset_type": "website", "location": "https://beta.bitpanda.com", "group": "Out of Scope" }, { "name": "https://developers.bitpanda.com", "asset_type": "website", "location": "https://developers.bitpanda.com", "group": "Out of Scope" }, { "name": "http://partners.whitelabel.bitpanda.com/", "asset_type": "website", "location": "http://partners.whitelabel.bitpanda.com/", "group": "Out of Scope" }, { "name": "http://status.bitpanda.com", "asset_type": "website", "location": "http://status.bitpanda.com", "group": "Out of Scope" }, { "name": "https://requests.bitpanda.com", "asset_type": "website", "location": "https://requests.bitpanda.com", "group": "Out of Scope" }, { "name": "*.exchange.bitpanda.com", "asset_type": "website", "location": "https://*.exchange.bitpanda.com", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-dae6649841387d56.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-346dc81c66411d21", "name": "Bitso Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/bitso-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $7,500", "reward_min": "$50", "reward_max": "$7,500", "scope_rank": 2, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:20Z", "scope_published_at": "2026-09-08T18:06:58.544Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bitso-mbb-og/changelog/aa9c15b3-c6b6-44a0-818d-e3f748e4aab0.json" ], "in_scope": [ { "name": "bitso.com", "asset_type": "website", "location": "https://bitso.com", "group": "In Scope" }, { "name": "https://nvio.mx/", "asset_type": "website", "location": "https://nvio.mx/", "group": "In Scope" }, { "name": "https://nvio.ar/", "asset_type": "website", "location": "https://nvio.ar/", "group": "In Scope" }, { "name": "Mobile App Bitso Wallet iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/bitso-buy-bitcoin-easily/id1292836438", "group": "In Scope" }, { "name": "Mobile App Bitso Alpha iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/bitso-alpha-crypto-trade-pro/id1539469172", "group": "In Scope" }, { "name": "Mobile App Bitso Wallet Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.bitso.wallet&pcampaignid=web_share", "group": "In Scope" }, { "name": "Mobile App Bitso Alpha Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.bitso.alpha", "group": "In Scope" }, { "name": "onchain.cc", "asset_type": "website", "location": "https://onchain.cc/", "group": "In Scope" } ], "out_of_scope": [ { "name": "help.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "status.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "dev.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "blog.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "stage.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "landing.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "devmalta.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "edu.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "sandbox.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "api-dev.bitso.com", "asset_type": "api", "location": null, "group": "Out of Scope" }, { "name": "api-stage.bitso.com", "asset_type": "api", "location": null, "group": "Out of Scope" }, { "name": "api-sandbox.bitso.com", "asset_type": "api", "location": null, "group": "Out of Scope" }, { "name": "stagemalta.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.otc.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.efx.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "quetzal.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "login.bitso.io", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "bitsohelp.zendesk.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "support.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-346dc81c66411d21.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-865b838bf98feae1", "name": "Block Open Source", "program_url": "https://bugcrowd.com/engagements/blockopensource", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $5,000", "reward_min": "Points", "reward_max": "$5,000", "scope_rank": 2, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:21Z", "scope_published_at": "2026-10-01T05:59:39.609Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/blockopensource/changelog/85eb95a6-33cf-45d3-83d1-dbceeb46c423.json" ], "in_scope": [ { "name": "███████████████████████████████████", "asset_type": "other", "location": null, "group": "████████" }, { "name": "███████████████████████████████████████", "asset_type": "other", "location": null, "group": "████████" }, { "name": "███████████████████████████████████████████████", "asset_type": "other", "location": null, "group": "████████" }, { "name": "███████████████████████████████████████████████████", "asset_type": "other", "location": null, "group": "████████" }, { "name": "█████████████████████████████████", "asset_type": "other", "location": null, "group": "████████" }, { "name": "███████████████████████████████", "asset_type": "other", "location": null, "group": "████████" }, { "name": "██████████████████████████████", "asset_type": "other", "location": null, "group": "████████" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-865b838bf98feae1.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-ec9788fb3eb3c84b", "name": "Blockchain.com Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/blockchain-dot-com", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $10,000", "reward_min": "$100", "reward_max": "$10,000", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:22Z", "scope_published_at": "2026-01-22T10:38:26.679Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/blockchain-dot-com/changelog/8533a741-0bd6-4927-9d59-e64c34d3e625.json" ], "in_scope": [ { "name": "blockchain.com", "asset_type": "website", "location": "https://www.blockchain.com/", "group": "In scope" }, { "name": "Blockchain.com: Crypto Wallet (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/blockchain-com-buy-btc-sol/id493253309", "group": "In scope" }, { "name": "Blockchain.com: Crypto Wallet (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=piuk.blockchain.android", "group": "In scope" }, { "name": "api.blockchain.info", "asset_type": "api", "location": null, "group": "In scope" }, { "name": "ws.blockchain.info", "asset_type": "api", "location": null, "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-ec9788fb3eb3c84b.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-ff3f812de3442b4b", "name": "Blofin Crypto Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/blofin-crypto-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $4,000", "reward_min": "$50", "reward_max": "$4,000", "scope_rank": 2, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:23Z", "scope_published_at": "2026-07-01T14:46:54.301Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/blofin-crypto-mbb-og/changelog/bcadfbfe-227d-44f8-be5b-d744d965d423.json" ], "in_scope": [ { "name": "*.blofin.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "blofin.com", "asset_type": "website", "location": "https://blofin.com", "group": "In Scope Targets" }, { "name": "https://apps.apple.com/tt/app/blofin/id1616804346", "asset_type": "ios", "location": "https://apps.apple.com/tt/app/blofin/id1616804346", "group": "In Scope Targets" }, { "name": "https://play.google.com/store/apps/details?id=com.blofin.android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.blofin.android", "group": "In Scope Targets" }, { "name": "https://wallet.blofin.com/en", "asset_type": "website", "location": "https://wallet.blofin.com/en", "group": "In Scope Targets" }, { "name": "https://apps.apple.com/us/app/blofin-wallet/id6753210919", "asset_type": "ios", "location": "https://apps.apple.com/us/app/blofin-wallet/id6753210919", "group": "In Scope Targets" }, { "name": "https://play.google.com/store/apps/details?id=com.blofin.wallet.wallet", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.blofin.wallet.wallet", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-ff3f812de3442b4b.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-906e5d38e869fe34", "name": "Bloompeak's Bug Bounty", "program_url": "https://bugcrowd.com/engagements/bloompeak", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:24Z", "scope_published_at": "2026-10-01T06:08:13.892Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bloompeak/changelog/8fa591d6-b706-4991-a6fd-84f1fd757169.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1226236/reports-charts-graphs-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226236/easy-reports-custom-charts-for-jira-dashboard-confluence?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1226236/reports-charts-and-graphs-for-jira?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226236/easy-reports-custom-charts-for-jira-dashboard-confluence?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1226734/reports-charts-and-graphs-for-jira-dashboard-free?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226734/easy-reports-free-custom-charts-for-jira-dashboard?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1226734/reports-charts-and-graphs-for-jira-dashboard-free?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226734/easy-reports-free-custom-charts-for-jira-dashboard?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1221826/status-time?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221826/status-time?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1221826/status-time-reports?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221826/status-time-reports-time-in-status?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1222051/status-time-free?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222051/status-time-reports-free-time-in-status?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1222051/status-time-free?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222051/status-time-free?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1231321/sum-up-reports-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231321/sum-up-reports-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1231321/sum-up-reports-for-jira?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231321/sum-up-reports-for-jira?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1222833/restore-deleted-issues?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222833/restore-deleted-issues?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1223002/track-deleted-issues?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223002/track-deleted-issues?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1224572/issue-translator?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224572/issue-translator?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1226140/issue-translator-free?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226140/issue-translator-free?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/2529437344/sprint-capacity-planner-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/2529437344/sprint-capacity-planner-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1224410/manage-users-for-jira-cloud?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224410/manage-users-for-jira-cloud?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1223088/project-role-tab-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223088/project-roles-groups-and-users?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-906e5d38e869fe34.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-663c428857ba5298", "name": "BOJA Consulting Bug Bounty", "program_url": "https://bugcrowd.com/engagements/boja", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:25Z", "scope_published_at": "2026-07-16T04:21:51.375Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/boja/changelog/eb9c83e2-62f3-4642-b7e5-b5c23efd0e55.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1223298/agile-risk-management-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223298/agile-risk-management-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1226195/align-okr-with-roadmap?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226195/align-okr-with-roadmap?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1218036/agile-project-forecast-metrics-roadmap-portfolio?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218036/agile-project-forecast-metrics-roadmap-portfolio?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1218555/easy-pdf-html-word-export-to-custom-documents?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218555/easy-pdf-html-word-export-to-custom-documents?hosting=cloud", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-663c428857ba5298.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-8119a00b8d1dae23", "name": "Bolt Technology OÜ", "program_url": "https://bugcrowd.com/engagements/bolt-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $6,500", "reward_min": "$150", "reward_max": "$6,500", "scope_rank": 3, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:26Z", "scope_published_at": "2026-09-14T08:59:47.709Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bolt-og/changelog/3d19c7a0-b06b-48e2-93ca-996402a0c261.json" ], "in_scope": [ { "name": "Bolt Rider (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/ee/app/bolt-fast-affordable-rides/id675033630", "group": "Mobile" }, { "name": "Bolt Rider (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=ee.mtakso.client", "group": "Mobile" }, { "name": "Bolt Food (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/ee/app/bolt-food/id1451492388", "group": "Mobile" }, { "name": "Bolt Food (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.bolt.deliveryclient", "group": "Mobile" }, { "name": "*.taxify.eu", "asset_type": "website", "location": "https://taxify.eu/", "group": "Web" }, { "name": "*.bolt.eu", "asset_type": "website", "location": "https://bolt.eu/", "group": "Web" }, { "name": "*.boltable.eu", "asset_type": "website", "location": "https://*.boltable.eu", "group": "Web" } ], "out_of_scope": [ { "name": "Bolt Driver (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=ee.mtakso.driver", "group": "Out of scope" }, { "name": "Bolt Driver (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/ee/app/bolt-driver/id897442736", "group": "Out of scope" }, { "name": "*.test.bolt.eu", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "*.test.taxify.eu", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "business-old.bolt.eu", "asset_type": "website", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-8119a00b8d1dae23.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-8ca4177407a3b0d2", "name": "BrizoIT", "program_url": "https://bugcrowd.com/engagements/brizoit", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:27Z", "scope_published_at": "2026-08-27T02:26:22.820Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/brizoit/changelog/b1c0e1e9-4482-4a07-9c90-6aa6049ee304.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1217938/company-calendar-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217938/company-calendar-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1213545/work-time-tracking-calendar-for-jira?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1213545/work-time-tracking-calendar-for-jira?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1217938/company-calendar-planner-for-jira?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217938/company-calendar-planner-for-jira?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1213545/work-time-tracking-calendar-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1213545/work-time-tracking-calendar-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1222150/gantt-suite-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222150/gantt-suite-for-jira?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1222150/gantt-suite-for-jira?tab=overview&hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222150/gantt-suite-for-jira?tab=overview&hosting=datacenter", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-8ca4177407a3b0d2.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-91d2bcf80709c6d7", "name": "Broken Build Bug Bounty", "program_url": "https://bugcrowd.com/engagements/brokenbuild", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Corporate Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:28Z", "scope_published_at": "2026-06-11T00:39:26.957Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/brokenbuild/changelog/ca9a9c28-da5d-491a-b100-002191b9ab9b.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1215768/agile-velocity-chart-gadget?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215768/agile-velocity-chart-gadget?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1212120/agile-reports-and-gadgets?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1212120/agile-reports-and-gadgets?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1214373/subcomponents-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214373/subcomponents-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1235338/cycle-time-gadgets-time-in-status-trend-reports-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235338/cycle-time-gadgets-time-in-status-trend-reports-for-jira?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1236240/burnup-burndown-chart-gadget-forecast-on-jira-dashboard?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236240/burnup-burndown-chart-gadget-forecast-on-jira-dashboard?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/2785074762/cumulative-flow-diagrams-cfd-for-jira-agile-charts-gadgets?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/2785074762/cumulative-flow-diagrams-cfd-for-jira-agile-charts-gadgets?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/3709319691/monte-carlo-simulations-for-scrum-kanban-agile-gadgets?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/3709319691/monte-carlo-simulations-for-scrum-kanban-agile-gadgets?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/2501894527/throughput-charts-for-scrum-kanban-agile-gadgets-reports?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/2501894527/throughput-charts-for-scrum-kanban-agile-gadgets-reports?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/924938813/agile-wip-charts-for-scrum-kanban-safe-gadgets-reports?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/924938813/agile-wip-charts-for-scrum-kanban-safe-gadgets-reports?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/2836020067/created-vs-resolved-charts-for-jira-agile-gadgets-reports?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/2836020067/created-vs-resolved-charts-for-jira-agile-gadgets-reports?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-91d2bcf80709c6d7.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-fd7ad6155d8a771e", "name": "BrowserStack Inc. Marketplace Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/browserstack-market", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:29Z", "scope_published_at": "2026-08-19T23:43:34.549Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/browserstack-market/changelog/7ecfb9b0-1b37-4a13-b369-b518c45d4d4f.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1230699/browserstack-integration-for-jira?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230699/browserstack-integration-for-jira?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1230699/browserstack-integration-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230699/browserstack-integration-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1230699/browserstack-test-management-webapp-integration-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230699/browserstack-test-management-webapp-integration-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1741353933/browserstack-test-management-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1741353933/browserstack-test-management-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-fd7ad6155d8a771e.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-568efe7eca493615", "name": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/bugcrowd", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $10,000", "reward_min": "$100", "reward_max": "$10,000", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:30Z", "scope_published_at": "2026-05-27T08:26:41.022Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bugcrowd/changelog/1ae12edd-3c69-4985-82c5-46fafede3ebc.json" ], "in_scope": [ { "name": "docs.bugcrowd.com", "asset_type": "website", "location": "https://docs.bugcrowd.com/", "group": "In Scope Targets " }, { "name": "bugcrowd.com", "asset_type": "website", "location": "https://bugcrowd.com/programs", "group": "In Scope Targets " }, { "name": "Crowdcontrol", "asset_type": "api", "location": "https://tracker.bugcrowd.com", "group": "In Scope Targets " }, { "name": "api.bugcrowd.com", "asset_type": "api", "location": "https://api.bugcrowd.com", "group": "In Scope Targets " }, { "name": "gov.bugcrowd.net", "asset_type": "website", "location": "https://gov.bugcrowd.net", "group": "In Scope Targets " }, { "name": "*.gov.bugcrowd.net", "asset_type": "website", "location": "https://*.gov.bugcrowd.net", "group": "In Scope Targets " }, { "name": "https://identity.bugcrowd.com/", "asset_type": "website", "location": "https://identity.bugcrowd.com/", "group": "Beta Feature Target" }, { "name": "*.bugcrowd.com/auth/*", "asset_type": "website", "location": null, "group": "Beta Feature Target" } ], "out_of_scope": [ { "name": "bugcrowd*.freshdesk.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "www.bugcrowd.com", "asset_type": "website", "location": "https://www.bugcrowd.com", "group": "Out of scope targets" }, { "name": "blog.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "researcherdocs.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "pages.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "forum.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "email.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "email.forum.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "go.bugcrowd.com", "asset_type": "website", "location": "https://go.bugcrowd.com", "group": "Out of scope targets" }, { "name": "events.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "assetinventory.bugcrowd.com", "asset_type": "website", "location": "https://assetinventory.bugcrowd.com", "group": "Out of scope targets" }, { "name": "community.bugcrowd.com", "asset_type": "website", "location": "https://community.bugcrowd.com", "group": "Out of scope targets" }, { "name": "trust.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Social Engineering", "asset_type": "other", "location": null, "group": "Out of scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-568efe7eca493615.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-c72c96db39ffb682", "name": "Bullish Exchange", "program_url": "https://bugcrowd.com/engagements/bullish-exchange", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $25,000", "reward_min": "$200", "reward_max": "$25,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:31Z", "scope_published_at": "2025-04-09T13:04:09.187Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bullish-exchange/changelog/2adf7292-450e-4751-8c74-579215238231.json" ], "in_scope": [ { "name": "https://simnext.bullish-test.com", "asset_type": "website", "location": "https://simnext.bullish-test.com", "group": "In Scope targets" }, { "name": "https://api.simnext.bullish-test.com", "asset_type": "api", "location": "https://api.simnext.bullish-test.com", "group": "In Scope targets" } ], "out_of_scope": [ { "name": "*.bullish.com/", "asset_type": "website", "location": null, "group": "Out of Scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-c72c96db39ffb682.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-2713b4fa1775a3f8", "name": "Bullish.com", "program_url": "https://bugcrowd.com/engagements/bullish", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $12,000", "reward_min": "$200", "reward_max": "$12,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:32Z", "scope_published_at": "2024-09-06T12:42:45.162Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bullish/changelog/d582aaab-3e7b-4778-b607-36bfc8c59af3.json" ], "in_scope": [ { "name": "https://bullish.com/", "asset_type": "website", "location": "https://bullish.com/", "group": "In Scope targets" }, { "name": "https://investor.bullish.com", "asset_type": "website", "location": "https://investor.bullish.com/", "group": "In Scope targets" } ], "out_of_scope": [ { "name": "*.bullish.com", "asset_type": "website", "location": "https://*.bullish.com", "group": "Out of Scope targets" }, { "name": "https://simnext.bullish-test.com", "asset_type": "website", "location": "https://simnext.bullish-test.com", "group": "Out of Scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-2713b4fa1775a3f8.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-109f91f978300f62", "name": "Caelor Group", "program_url": "https://bugcrowd.com/engagements/caelor-group-market", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Corporate Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:33Z", "scope_published_at": "2026-08-27T02:11:36.626Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/caelor-group-market/changelog/7e1821a7-9722-4320-9158-d7bae3ce0eea.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1221754/translator-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221754/translator-for-confluence?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1222649/macrosuite-easy-html-button-hide-content-divider-tabs?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222649/macrosuite-easy-html-button-hide-content-divider-tabs?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1223472/trophies-for-jira-gamification?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223472/trophies-for-jira-gamification?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1224103/cards-panels?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224103/cards-panels?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1224724/todo-checklist-with-forge?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224724/todo-checklist-with-forge?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1223471/trophies-for-confluence-gamification?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223471/trophies-for-confluence-gamification?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1225290/moscow-agile-prioritization-with-forge?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225290/moscow-agile-prioritization-with-forge?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1225145/image-editor-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225145/image-editor-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1230540/cosmos-intranet-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230540/cosmos-intranet-for-confluence?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1227112/eisenhower-task-management-todo-priority-matrix-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227112/eisenhower-task-management-todo-priority-matrix-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1231591/shoppie-assets-integrated-shop-for-jsm?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231591/shoppie-assets-integrated-shop-for-jsm?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1225724/email-confluence-page?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225724/email-confluence-page?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1230161/linksy-advanced-issue-linking-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230161/linksy-advanced-issue-linking?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-109f91f978300f62.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-85392a53b7284329", "name": "Canva", "program_url": "https://bugcrowd.com/engagements/canva", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $15,000", "reward_min": "$200", "reward_max": "$15,000", "scope_rank": 4, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:34Z", "scope_published_at": "2026-08-13T06:17:29.490Z", "scope_group_count": 8, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/canva/changelog/5e729209-79a7-4983-864d-8798977a6072.json" ], "in_scope": [ { "name": "www.canva.com", "asset_type": "website", "location": "https://www.canva.com", "group": "Canva Editor" }, { "name": "Canva Developer Portal", "asset_type": "website", "location": "https://www.canva.com/developers/", "group": "Canva Developer Platform" }, { "name": "Apps SDK Sandboxing", "asset_type": "other", "location": null, "group": "Canva Developer Platform" }, { "name": "api.canva.com", "asset_type": "api", "location": "https://api.canva.com", "group": "Canva Developer Platform" }, { "name": "*.canva.com", "asset_type": "website", "location": null, "group": "Canva Services/Infrastructure" }, { "name": "*.canva-apps.com", "asset_type": "website", "location": null, "group": "Canva Services/Infrastructure" }, { "name": "*.canva.tech", "asset_type": "website", "location": "https://*.canva.tech", "group": "Canva Services/Infrastructure" }, { "name": "Canva for ChatGPT", "asset_type": "website", "location": "https://www.canva.com/en_au/help/chatgpt-templates/", "group": "Canva Marketplace Apps & Integrations" }, { "name": "Canva for Slack", "asset_type": "website", "location": "https://www.canva.com/integrations/slack/", "group": "Canva Marketplace Apps & Integrations" }, { "name": "Canva Desktop (macOS / Windows)", "asset_type": "other", "location": null, "group": "Canva Native Applications" }, { "name": "Canva (iOS)", "asset_type": "ios", "location": null, "group": "Canva Native Applications" }, { "name": "Canva (Android)", "asset_type": "android", "location": null, "group": "Canva Native Applications" }, { "name": "Canva (Chrome Extension)", "asset_type": "other", "location": null, "group": "Canva Native Applications" }, { "name": "*.canva.cn", "asset_type": "website", "location": null, "group": "Canva China" }, { "name": "*.canva-apps.cn", "asset_type": "website", "location": null, "group": "Canva China" }, { "name": "Leaked Credentials and Secrets (Canva Employee/Contractor)", "asset_type": "other", "location": null, "group": "Leaked Credentials and Secrets" }, { "name": "Leaked Credentials and Secrets (Canva User)", "asset_type": "other", "location": null, "group": "Leaked Credentials and Secrets" }, { "name": "3rd-Party Provider Vulnerability", "asset_type": "other", "location": null, "group": "3rd-Party Providers" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-85392a53b7284329.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-6f8726e0d8a28ad0", "name": "Cappsule Sarl - Marketplace Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/cappsule-sarl", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:35Z", "scope_published_at": "2026-09-12T18:47:57.071Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/cappsule-sarl/changelog/26050e3d-e8f3-4e08-b36f-2de4196b8936.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1216988/timesheet-tracking-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216988/timesheet-tracking-for-jira?hosting=cloud&tab=overview", "group": "In-scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1235502/chart-factory-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235502/chart-factory-for-jira?hosting=cloud&tab=overview", "group": "In-scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-6f8726e0d8a28ad0.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-4ae01efe77d11193", "name": "Cash App", "program_url": "https://bugcrowd.com/engagements/cashapp", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $18,000", "reward_min": "$100", "reward_max": "$18,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:36Z", "scope_published_at": "2026-10-01T05:59:03.290Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/cashapp/changelog/73ca7ddf-de6c-437a-8e3f-43a77efa9e3a.json" ], "in_scope": [ { "name": "███████████████████████████████████", "asset_type": "ios", "location": null, "group": "████████████████" }, { "name": "███████████████████████████████████████", "asset_type": "android", "location": null, "group": "████████████████" }, { "name": "██████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "█████████████████", "asset_type": "website", "location": null, "group": "████████████████" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-4ae01efe77d11193.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-b93ed611507ffd78", "name": "Catapult Labs Bug Bounty", "program_url": "https://bugcrowd.com/engagements/catapultlabs", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:37Z", "scope_published_at": "2026-09-10T18:04:25.210Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/catapultlabs/changelog/1be53a7e-8f4e-4d0e-b583-bd3fc07421dd.json" ], "in_scope": [ { "name": "Scrum Poker Estimates for Confluence - Cloud - https://marketplace.atlassian.com/apps/1215875/scrum-poker-estimates-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215875/scrum-poker-estimates-for-confluence?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Scrum Poker Estimates for Jira - Cloud - https://marketplace.atlassian.com/apps/1218960/scrum-poker-estimates-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218960/scrum-poker-estimates-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Agile Retrospectives for Jira - Cloud https://marketplace.atlassian.com/apps/1218860/agile-retrospectives-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218860/agile-retrospectives-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Agile Retrospectives for Jira - DC- https://marketplace.atlassian.com/apps/1218860/agile-retrospectives-for-jira?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218860/agile-retrospectives-for-jira?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "Agile Retrospectives for Confluence - Cloud - https://marketplace.atlassian.com/apps/1216054/agile-retrospectives-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216054/agile-retrospectives-for-confluence?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "Agile Retrospectives for Confluence - DC - https://marketplace.atlassian.com/apps/1216054/agile-retrospectives-for-confluence?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216054/agile-retrospectives-for-confluence?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "StandBot - Slack stand-up bot for Jira - Cloud - https://marketplace.atlassian.com/apps/1217825/standbot-slack-stand-up-bot-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217825/standbot-slack-stand-up-bot-for-jira?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "TeamPulse - Health checks for Jira - Cloud - https://marketplace.atlassian.com/apps/1227873/teampulse-health-checks-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227873/teampulse-health-checks-for-jira?tab=overview&hosting=cloud", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-b93ed611507ffd78.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-8820163c04c73d60", "name": "celix Solutions GmbH Marketplace Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/celix-solutions-market", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:38Z", "scope_published_at": "2026-05-06T18:16:42.649Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/celix-solutions-market/changelog/19dcfd86-4f8c-478a-9d4d-e0c0ea4312e1.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/37658/column-order-gadget-plugin?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/37658/column-order-gadget-plugin?hosting=cloud&tab=overview", "group": "In Scope Target" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-8820163c04c73d60.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-3d5e38383524336c", "name": "Centers for Medicare & Medicaid Services - Public Bug Bounty Program 2026", "program_url": "https://bugcrowd.com/engagements/cms-bbpublic", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,000", "reward_min": "$250", "reward_max": "$7,000", "scope_rank": 2, "access_status": "open", "industry": null, "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:39Z", "scope_published_at": "2026-08-17T20:32:48.602Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 2, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/cms-bbpublic/changelog/ed4ad48a-148c-462f-84af-0356fb47ffd1.json" ], "in_scope": [ { "name": "████████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "███████████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "███████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "█████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "███████████████████████████", "asset_type": "website", "location": null, "group": "████████████████" } ], "out_of_scope": [ { "name": "████████████████████████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████" }, { "name": "██████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-3d5e38383524336c.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "2 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-f2ebabd48ecc0d94", "name": "Certinia (formerly FinancialForce)", "program_url": "https://bugcrowd.com/engagements/financialforce", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:40Z", "scope_published_at": "2025-02-12T16:17:22.340Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/financialforce/changelog/b69ed633-de6a-40f8-9636-86b963afa267.json" ], "in_scope": [ { "name": "*.financialforce.com", "asset_type": "website", "location": "https://financialforce.com", "group": "In Scope Targets" }, { "name": "*.certinia.com", "asset_type": "website", "location": "https://*.certinia.com", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "gslink.financialforce.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-f2ebabd48ecc0d94.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-8964c1e6392548d2", "name": "Chime Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/chime", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $20,000", "reward_min": "$50", "reward_max": "$20,000", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:41Z", "scope_published_at": "2026-08-27T16:44:53.306Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/chime/changelog/2a22afbc-7959-4be1-ad47-054ecc6db7d6.json" ], "in_scope": [ { "name": "All Chime Assets", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "*.chimepayments.com", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "*.chime.com", "asset_type": "website", "location": "https://*.chime.com", "group": "Primary Targets" }, { "name": "*.1debit.com", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "*.chimecard.com", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "*.chmfin.com", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "*.chimebank.com", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "www.chime.com", "asset_type": "website", "location": "https://www.chime.com", "group": "Primary Targets" }, { "name": "app.chime.com", "asset_type": "website", "location": "https://app.chime.com", "group": "Primary Targets" }, { "name": "Chime - Android App (Prod)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.onedebit.chime", "group": "Primary Targets" }, { "name": "Chime - iOS App (Prod)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/chime-mobile-banking/id836215269", "group": "Primary Targets" }, { "name": "Chime - Android App (Beta)", "asset_type": "android", "location": "https://drive.google.com/file/d/17IX06JcI2Nn7hbg9kDps5iK6oVi9U71O/view?usp=sharing", "group": "Primary Targets" }, { "name": "Enrollment - (QA)", "asset_type": "website", "location": "http://member-qa.chime.com/enroll", "group": "Primary Targets" }, { "name": "Sign In - (QA)", "asset_type": "website", "location": "https://app-qa.chime.com/login", "group": "Primary Targets" }, { "name": "*.saltlabs.com", "asset_type": "website", "location": null, "group": "Secondary Targets" }, { "name": "app.saltlabs.com", "asset_type": "website", "location": "https://app.saltlabs.com/", "group": "Secondary Targets" }, { "name": "Salt Labs - Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.saltlabs.app", "group": "Secondary Targets" }, { "name": "Salt Labs - iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/salt-work-and-get-rewarded/id1668462142", "group": "Secondary Targets" }, { "name": "Salt Labs - Staging Environment", "asset_type": "website", "location": "https://app.staging.saltlabs.com/", "group": "Secondary Targets" } ], "out_of_scope": [ { "name": "Non Chime Owned Assets (see list above)", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "chime.financial", "asset_type": "website", "location": "https://chime.financial", "group": "Out of Scope" }, { "name": "chimescholars.org", "asset_type": "website", "location": "https://chimescholars.org", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-8964c1e6392548d2.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-3a8e20018e52789b", "name": "Chipotle Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/chipotle-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 3, "access_status": "open", "industry": "Hospitality", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:42Z", "scope_published_at": "2025-08-20T18:01:35.296Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/chipotle-mbb-og/changelog/1015a359-fa2e-44de-9caf-90a0a0e02b96.json" ], "in_scope": [ { "name": "https://www.chipotle.com", "asset_type": "website", "location": "https://www.chipotle.com", "group": "In Scope" }, { "name": "https://www.chipotle.co.uk", "asset_type": "website", "location": "https://www.chipotle.co.uk", "group": "In Scope" }, { "name": "https://catering.chipotle.com", "asset_type": "website", "location": "https://catering.chipotle.com", "group": "In Scope" }, { "name": "Publicly accessible APIs", "asset_type": "api", "location": "https://services.chipotle.com", "group": "In Scope" }, { "name": "Chipotle Mexican Grill Mobile (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/chipotle-fresh-food/id327228455", "group": "In Scope" }, { "name": "Chipotle Mexican Grill Mobile (Android)", "asset_type": "android", "location": "https://play.google.com/store/search?q=chipotle+mexican+grill&c=apps", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-3a8e20018e52789b.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-6f0759ee73806420", "name": "Cisco Networking", "program_url": "https://bugcrowd.com/engagements/cisconetworking", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $10,000", "reward_min": "$100", "reward_max": "$10,000", "scope_rank": 4, "access_status": "open", "industry": "Electronics", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:43Z", "scope_published_at": "2026-09-15T21:12:19.217Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/cisconetworking/changelog/8b2463ab-810e-4557-ae0c-b91b9c9ec379.json" ], "in_scope": [ { "name": "*.meraki.com", "asset_type": "website", "location": null, "group": "Cisco Meraki Dashboard Platform Targets" }, { "name": "*.ikarem.io", "asset_type": "website", "location": null, "group": "Cisco Meraki Dashboard Platform Targets" }, { "name": "Cisco Meraki Systems Manager", "asset_type": "other", "location": null, "group": "Cisco Meraki Dashboard Platform Targets" }, { "name": "*.network-auth.com", "asset_type": "website", "location": null, "group": "Cisco Meraki Dashboard Platform Targets" }, { "name": "Cisco Meraki Dashboard Mobile Application (iOS and Android)", "asset_type": "ios", "location": null, "group": "Cisco Meraki Dashboard Platform Targets" }, { "name": "Cisco Campus Gateways", "asset_type": "hardware", "location": null, "group": "Cisco Meraki Devices (Hardware & Firmware)" }, { "name": "Cisco Catalyst 9200L Series Switches (Cloud-Managed)", "asset_type": "hardware", "location": null, "group": "Cisco Meraki Devices (Hardware & Firmware)" }, { "name": "Cisco Meraki MX & Z Series Security Appliances (Including vMX)", "asset_type": "hardware", "location": null, "group": "Cisco Meraki Devices (Hardware & Firmware)" }, { "name": "Cisco Meraki MS Switches", "asset_type": "hardware", "location": null, "group": "Cisco Meraki Devices (Hardware & Firmware)" }, { "name": "Cisco Meraki MR Access Points", "asset_type": "hardware", "location": null, "group": "Cisco Meraki Devices (Hardware & Firmware)" }, { "name": "Cisco Meraki MV Smart Cameras", "asset_type": "hardware", "location": null, "group": "Cisco Meraki Devices (Hardware & Firmware)" }, { "name": "Cisco Meraki MG Fixed Wireless Access Devices", "asset_type": "hardware", "location": null, "group": "Cisco Meraki Devices (Hardware & Firmware)" } ], "out_of_scope": [ { "name": "merakipartners.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "developers.meraki.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "smhelp.meraki.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "community.meraki.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "community-staging.meraki.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.cisco.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "meraki.cisco.com/form/contact", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Customer API Keys", "asset_type": "api", "location": null, "group": "Out of Scope" }, { "name": "Meraki MC Phones", "asset_type": "hardware", "location": null, "group": "Out of Scope" }, { "name": "documentation.meraki.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.workflows.meraki.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-6f0759ee73806420.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-50d13b66eceaf49d", "name": "Cisco ThousandEyes Vulnerability Hunting aka Bug Bounty", "program_url": "https://bugcrowd.com/engagements/thousandeyes-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $4,500", "reward_min": "$200", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:44Z", "scope_published_at": "2026-01-16T19:17:29.168Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/thousandeyes-og/changelog/8b9f0f91-371b-4297-931e-47ca45c06879.json" ], "in_scope": [ { "name": "https://api.thousandeyes.com/", "asset_type": "api", "location": null, "group": "ThousandEyes Enterprise Agent" }, { "name": "https://app.thousandeyes.com/", "asset_type": "website", "location": "https://app.thousandeyes.com/", "group": "ThousandEyes Enterprise Agent" }, { "name": "https://www.thousandeyes.com/", "asset_type": "website", "location": "https://www.thousandeyes.com/", "group": "ThousandEyes Enterprise Agent" }, { "name": "ThousandEyes Enterprise Agent", "asset_type": "other", "location": null, "group": "ThousandEyes Enterprise Agent" }, { "name": "ThousandEyes Endpoint Agent", "asset_type": "other", "location": null, "group": "ThousandEyes Enterprise Agent" } ], "out_of_scope": [ { "name": "https://blog.thousandeyes.com/", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "https://app.thousandeyes.com/sfdc/community", "asset_type": "website", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-50d13b66eceaf49d.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-7c9536c01b42fb32", "name": "City of Vienna Managed Bug Bounty", "program_url": "https://bugcrowd.com/engagements/city-of-vienna-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $3,500", "reward_min": "Points", "reward_max": "$3,500", "scope_rank": 4, "access_status": "open", "industry": "Government", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:45Z", "scope_published_at": "2026-09-29T12:27:55.437Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/city-of-vienna-mbb-og/changelog/68e42953-6e69-443a-b56f-7f1f33a636ed.json" ], "in_scope": [ { "name": "www.wien.gv.at", "asset_type": "website", "location": "https://www.wien.gv.at", "group": "In scope" }, { "name": "*.wien.gv.at", "asset_type": "website", "location": "https://*.wien.gv.at", "group": "In scope" }, { "name": "*.magwien.gv.at", "asset_type": "website", "location": "https://*.magwien.gv.at", "group": "In scope" }, { "name": "www.gesundheitsverbund.at", "asset_type": "website", "location": "https://www.gesundheitsverbund.at", "group": "In scope" }, { "name": "*.gesundheitsverbund.at", "asset_type": "website", "location": "https://*.gesundheitsverbund.at", "group": "In scope" }, { "name": "*.wienkav.at", "asset_type": "website", "location": "https://*.wienkav.at", "group": "In scope" }, { "name": "www.akhwien.at", "asset_type": "website", "location": "https://www.akhwien.at", "group": "In scope" }, { "name": "*.akhwien.at", "asset_type": "website", "location": "https://*.akhwien.at", "group": "In scope" }, { "name": "stp.wien.gv.at", "asset_type": "website", "location": "https://stp.wien.gv.at", "group": "In scope" }, { "name": "wien.at", "asset_type": "website", "location": "https://wien.at", "group": "In scope" }, { "name": "*.wien.at", "asset_type": "website", "location": "https://*.wien.at", "group": "In scope" }, { "name": "FTAPI Gesundheitsverbund", "asset_type": "website", "location": "https://secumails.gesundheitsverbund.at", "group": "In scope" }, { "name": "Mein Wien", "asset_type": "website", "location": "https://mein.wien.gv.at/", "group": "In scope" }, { "name": "Mein Wien API", "asset_type": "api", "location": "https://mein.wien.gv.at/broker/api/*", "group": "In scope" }, { "name": "Wibi", "asset_type": "website", "location": "https://wibi.wien.gv.at/", "group": "In scope" }, { "name": "stadtwien.onmicrosoft.com", "asset_type": "other", "location": "https://*.stadtwien.onmicrosoft.com", "group": "In scope" }, { "name": "schulenwien.onmicrosoft.com", "asset_type": "other", "location": "https://schulenwien.onmicrosoft.com", "group": "In scope" }, { "name": "Sharepoint Online", "asset_type": "website", "location": "https://stadtwien-my.sharepoint.com/", "group": "In scope" }, { "name": "AS6720 1/2", "asset_type": "other", "location": null, "group": "In scope" }, { "name": "AS6720 2/2", "asset_type": "other", "location": null, "group": "In scope" }, { "name": "AS6720 IPv6 1/2", "asset_type": "other", "location": null, "group": "In scope" }, { "name": "AS6720 IPv6 2/2", "asset_type": "other", "location": null, "group": "In scope" }, { "name": "AS16314", "asset_type": "other", "location": null, "group": "In scope" }, { "name": "City of Vienna Google Play Apps", "asset_type": "android", "location": "https://play.google.com/store/apps/developer?id=Stadt+Wien&hl=de_AT", "group": "In scope" }, { "name": "City of Vienna iOS Apps", "asset_type": "ios", "location": "https://apps.apple.com/at/developer/stadt-wien/id858505368", "group": "In scope" } ], "out_of_scope": [ { "name": "https://www.wien.gv.at/advuew/*", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "https://*/geoserverneuogd/* (Multiple Domains)", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "https://*/agssoe/* (Multiple Domains)", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "geschichtewiki.wien.gv.at", "asset_type": "website", "location": "https://www.geschichtewiki.wien.gv.at", "group": "Out of scope" }, { "name": "https://bi.bildung-wien.gv.at/*", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "https://www.wien.gv.at/umfrage/*", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "Public Network / Veranstaltungsnetz", "asset_type": "other", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-7c9536c01b42fb32.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-67b51e12d5dcd153", "name": "ClassDojo", "program_url": "https://bugcrowd.com/engagements/classdojo", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $2,500", "reward_min": "Points", "reward_max": "$2,500", "scope_rank": 4, "access_status": "open", "industry": "Education", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:46Z", "scope_published_at": "2026-02-05T23:53:36.468Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/classdojo/changelog/da7d47d3-7377-46c0-bd3a-bb231baa55a9.json" ], "in_scope": [ { "name": "IoS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/classdojo/id552602056", "group": "In Scope (Priority Targets)" }, { "name": "https://api.classdojo.com", "asset_type": "api", "location": "https://api.classdojo.com", "group": "In Scope (Priority Targets)" }, { "name": "Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.classdojo.android", "group": "In Scope (Priority Targets)" }, { "name": "https://teach.classdojo.com", "asset_type": "website", "location": "https://teach.classdojo.com", "group": "In Scope (Priority Targets)" }, { "name": "https://student.classdojo.com", "asset_type": "website", "location": "https://student.classdojo.com", "group": "In Scope (Priority Targets)" }, { "name": "https://www.classdojo.com", "asset_type": "website", "location": "https://www.classdojo.com", "group": "In Scope (Priority Targets)" }, { "name": "https://home.classdojo.com", "asset_type": "website", "location": "https://home.classdojo.com", "group": "In Scope (Priority Targets)" }, { "name": "https://dev.tutoring.classdojo.com", "asset_type": "website", "location": "https://dev.tutoring.classdojo.com", "group": "In Scope (Priority Targets)" }, { "name": "wss://ws.multiplayer.classdojo.com", "asset_type": "website", "location": "https://ws.multiplayer.classdojo.com/", "group": "In Scope (Priority Targets)" }, { "name": "https://ticket.multiplayer.classdojo.com", "asset_type": "website", "location": "https://ticket.multiplayer.classdojo.com", "group": "In Scope (Priority Targets)" }, { "name": "https://clients.multiplayer.classdojo.com/launcher/prod/latest", "asset_type": "website", "location": "https://clients.multiplayer.classdojo.com/launcher/prod/latest", "group": "In Scope (Priority Targets)" }, { "name": "https://monster-customizer.classdojo.com/cf6dfa68-1a81-4c6d-bc0b-38f3666b37d6/index.html", "asset_type": "website", "location": "https://monster-customizer.classdojo.com/cf6dfa68-1a81-4c6d-bc0b-38f3666b37d6/index.html", "group": "In Scope (Priority Targets)" }, { "name": "*.classdojo.com", "asset_type": "api", "location": null, "group": "In Scope (Discovery Targets)" }, { "name": "*.classdojo.co.uk", "asset_type": "api", "location": null, "group": "In Scope (Discovery Targets)" }, { "name": "*.doj.io", "asset_type": "api", "location": null, "group": "In Scope (Discovery Targets)" }, { "name": "*.dojo.me", "asset_type": "api", "location": null, "group": "In Scope (Discovery Targets)" } ], "out_of_scope": [ { "name": "https://shop.classdojo.com", "asset_type": "website", "location": "https://shop.classdojo.com", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-67b51e12d5dcd153.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-e1059a33db2c9e9b", "name": "ClickHouse", "program_url": "https://bugcrowd.com/engagements/clickhouse", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $2,500", "reward_min": "$50", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:47Z", "scope_published_at": "2026-08-24T06:02:00.354Z", "scope_group_count": 4, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/clickhouse/changelog/7906d9fe-23b7-4795-b287-2beeeeea7b2a.json" ], "in_scope": [ { "name": "https://clickhou.se/bugcrowd", "asset_type": "website", "location": "https://clickhou.se/bugcrowd", "group": "ClickHouse Cloud Platform target" }, { "name": "ClickHouse Cloud environment hosted by ClickHouse", "asset_type": "other", "location": null, "group": "ClickHouse Cloud Platform target" }, { "name": "https://github.com/ClickHouse/ClickHouse", "asset_type": "other", "location": "https://github.com/ClickHouse/ClickHouse", "group": "ClickHouse OSS target" }, { "name": "https://cloud.langfuse.com/", "asset_type": "website", "location": null, "group": "Langfuse Cloud Platform " } ], "out_of_scope": [ { "name": "New support cases, Chat, Request new integration form", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Share feedback form", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Vulnerability scanners", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "learn.clickhouse.com", "asset_type": "website", "location": "https://learn.clickhouse.com/", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-e1059a33db2c9e9b.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-951f15c7dc3c6616", "name": "Cloudinary", "program_url": "https://bugcrowd.com/engagements/cloudinary", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $4,000", "reward_min": "Points", "reward_max": "$4,000", "scope_rank": 1, "access_status": "open", "industry": "Cloud", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:48Z", "scope_published_at": "2025-01-27T10:06:11.007Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/cloudinary/changelog/746d0e2a-2a72-4fdc-a230-80e4c81abe8a.json" ], "in_scope": [ { "name": "https://cloudinary.com/console", "asset_type": "website", "location": "https://cloudinary.com/console", "group": "In Scope Targets" }, { "name": "https://api.cloudinary.com", "asset_type": "api", "location": "https://api.cloudinary.com", "group": "In Scope Targets" }, { "name": "https://res.cloudinary.com", "asset_type": "api", "location": "https://res.cloudinary.com", "group": "In Scope Targets" }, { "name": "mediaflows.cloudinary.com", "asset_type": "website", "location": "https://mediaflows.cloudinary.com/", "group": "In Scope Tier II" }, { "name": "dimensions.cloudinary.com", "asset_type": "website", "location": "https://dimensions.cloudinary.com", "group": "In Scope Tier II" } ], "out_of_scope": [ { "name": "https://support.cloudinary.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "wiki.cloudinary.com", "asset_type": "website", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-951f15c7dc3c6616.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-8187ccde65b7761d", "name": "CodeAI", "program_url": "https://bugcrowd.com/engagements/codeorg", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $2,500", "reward_min": "Points", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Education", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:49Z", "scope_published_at": "2026-08-27T21:52:58.145Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/codeorg/changelog/cf6ad10a-bf27-460c-b1b1-70fb9db15319.json" ], "in_scope": [ { "name": "adhoc-bugcrowd.cdn-code.org", "asset_type": "website", "location": "https://adhoc-bugcrowd.cdn-code.org", "group": "In Scope Targets" }, { "name": "adhoc-bugcrowd-studio.cdn-code.org", "asset_type": "website", "location": "https://adhoc-bugcrowd-studio.cdn-code.org", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "hourofcode.com", "asset_type": "website", "location": "https://hourofcode.com", "group": "Out of scope" }, { "name": "advocacy.code.org", "asset_type": "website", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-8187ccde65b7761d.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-4ab9a028fa04a7f0", "name": "codecentric AG - Marketplace Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/codecentric", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:50Z", "scope_published_at": "2026-09-10T17:21:09.930Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/codecentric/changelog/43fc6ac8-ccc3-4658-bc22-1b8a8c1c5772.json" ], "in_scope": [ { "name": "Issue Picker for Jira - https://marketplace.atlassian.com/apps/1227136/issue-picker-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227136/issue-picker-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-4ab9a028fa04a7f0.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-f1eb6c244ded627b", "name": "codeclou GmbH", "program_url": "https://bugcrowd.com/engagements/codeclou", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:51Z", "scope_published_at": "2026-09-09T19:21:01.813Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/codeclou/changelog/27f47b90-c4e1-4743-a175-e55baa4dd3a9.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1212096/customfield-editor-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1212096/customfield-editor-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1212096/customfield-editor-for-jira?hosting=datacenter&tab=overview", "asset_type": "api", "location": "https://marketplace.atlassian.com/apps/1212096/customfield-editor-for-jira?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1211159/advanced-codeblocks-for-confluence?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211159/advanced-codeblocks-for-confluence?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1211159/advanced-codeblocks-for-confluence/version-history", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211159/advanced-codeblocks-for-confluence/version-history", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1211159/advanced-codeblocks-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211159/advanced-codeblocks-for-confluence?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1212096/customfield-editor-for-jira?hosting=server&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1212096/customfield-editor-for-jira?hosting=datacenter&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-f1eb6c244ded627b.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-c39a7fd84f225018", "name": "codefortynine", "program_url": "https://bugcrowd.com/engagements/codefortynine", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:52Z", "scope_published_at": "2024-10-31T09:01:34.489Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/codefortynine/changelog/033b0d6c-eb3f-437f-a1ea-3037eb49445e.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1218652/deep-clone-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218652/deep-clone-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219514/merge-agent-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219514/merge-agent-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1220136/quick-filters-for-jira-dashboards?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220136/quick-filters-for-jira-dashboards?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219476/comment-custom-fields-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219476/comment-custom-fields-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1221733/external-data-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221733/external-data-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219288/comment-history-log-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219288/comment-history-log-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1215055/slack-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215055/slack-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219807/version-sync-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219807/version-sync-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1220964/snipe-it-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220964/snipe-it-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1218211/secure-google-calendar-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218211/secure-google-calendar-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219994/external-data-for-jira-fields?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219994/external-data-for-jira-fields?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1232630/external-data-for-jira-fields-extension?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1232630/external-data-for-jira-fields-extension?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1222978/dynamic-fields-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222978/dynamic-fields-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1223455/advanced-bulk-edit-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223455/advanced-bulk-edit-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1226627/prime-custom-fields-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226627/prime-custom-fields-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1230689/easy-confluence-gadget-for-jira-dashboards?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230689/easy-confluence-gadget-for-jira-dashboards?hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-c39a7fd84f225018.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-9e4969776b2e92ec", "name": "CoinDesk Data - Data API", "program_url": "https://bugcrowd.com/engagements/CCData-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,500", "reward_min": "$250", "reward_max": "$7,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:53Z", "scope_published_at": "2025-06-13T19:14:15.367Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/CCData-mbb-og/changelog/4750c0c7-8f36-4a1c-ac18-49768252439b.json" ], "in_scope": [ { "name": "CoinDesk Data - Data API", "asset_type": "api", "location": "http://data-api.coindesk.com/", "group": "In Scope" }, { "name": "CoinDesk Data - Tools API", "asset_type": "api", "location": "https://tools-api.cryptocompare.com/", "group": "In Scope" } ], "out_of_scope": [ { "name": "coindesk.com", "asset_type": "website", "location": "https://www.coindesk.com/", "group": "Out of Scope targets" }, { "name": "uat.coindesk.com", "asset_type": "website", "location": "https://uat.coindesk.com/", "group": "Out of Scope targets" }, { "name": "Production CoinDesk Events", "asset_type": "website", "location": "https://events.coindesk.com", "group": "Out of Scope targets" }, { "name": "Consensus2025 Site", "asset_type": "website", "location": "https://consensus2025.coindesk.com/", "group": "Out of Scope targets" }, { "name": "Consensus HK Site", "asset_type": "website", "location": "https://consensus-hongkong2025.coindesk.com/", "group": "Out of Scope targets" }, { "name": "data.coindesk.com", "asset_type": "website", "location": "https://data.coindesk.com/", "group": "Out of Scope targets" }, { "name": "developers.coindesk.com", "asset_type": "website", "location": "https://developers.coindesk.com", "group": "Out of Scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-9e4969776b2e92ec.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-97c6b628befd2294", "name": "CoinDesk Mobile", "program_url": "https://bugcrowd.com/engagements/coindesk-mobile-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,500", "reward_min": "$250", "reward_max": "$7,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:54Z", "scope_published_at": "2025-03-26T13:35:59.703Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/coindesk-mobile-mbb-og/changelog/df351887-8b57-4dbd-9468-7f9b30554b69.json" ], "in_scope": [ { "name": "iOS app - https://apps.apple.com/us/app/coindesk-crypto-bitcoin-news/id6502816903", "asset_type": "ios", "location": "https://apps.apple.com/us/app/coindesk-crypto-bitcoin-news/id6502816903", "group": "In Scope" }, { "name": "Android app - https://play.google.com/store/apps/details?id=com.coindesk.mobile", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.coindesk.mobile", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-97c6b628befd2294.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-1073ae037a9090fb", "name": "CoinDesk.com", "program_url": "https://bugcrowd.com/engagements/coindesk-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,500", "reward_min": "$250", "reward_max": "$7,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:55Z", "scope_published_at": "2025-06-16T16:56:07.512Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/coindesk-mbb-og/changelog/f0f1c1b5-8359-48c8-be2c-d1538b97c4e5.json" ], "in_scope": [ { "name": "coindesk.com", "asset_type": "website", "location": "https://www.coindesk.com/", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "CoinDesk Indices", "asset_type": "website", "location": "https://uat.coindesk.com/indices", "group": "Out of Scope targets" }, { "name": "CoinDesk Events", "asset_type": "website", "location": "https://uat.coindesk.com/events", "group": "Out of Scope targets" }, { "name": "Production CoinDesk Events", "asset_type": "website", "location": "https://events.coindesk.com", "group": "Out of Scope targets" }, { "name": "Consensus2023 Site", "asset_type": "website", "location": "https://consensus2023.coindesk.com/", "group": "Out of Scope targets" }, { "name": "Consensus2024 Site", "asset_type": "website", "location": "https://consensus2024.coindesk.com/", "group": "Out of Scope targets" }, { "name": "Consensus2025 Site", "asset_type": "website", "location": "https://consensus2025.coindesk.com/", "group": "Out of Scope targets" }, { "name": "Consensus HK Site", "asset_type": "website", "location": "https://consensus-hongkong2025.coindesk.com/", "group": "Out of Scope targets" }, { "name": "uat.coindesk.com", "asset_type": "website", "location": "https://uat.coindesk.com/", "group": "Out of Scope targets" }, { "name": "uat.accounts.coindesk.com", "asset_type": "website", "location": "https://uat.accounts.coindesk.com", "group": "Out of Scope targets" }, { "name": "CoinDesk Staging Site", "asset_type": "website", "location": "https://staging.coindesk.com", "group": "Out of Scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-1073ae037a9090fb.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-bceb812177a6d343", "name": "Colined", "program_url": "https://bugcrowd.com/engagements/colined", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:56Z", "scope_published_at": "2026-04-16T05:28:33.130Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/colined/changelog/b8c0bf75-b6ba-4a7a-b7bd-579c296116b3.json" ], "in_scope": [ { "name": "Pivot Report - Cloud - https://marketplace.atlassian.com/apps/1215414/pivot-report?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215414/pivot-report?hosting=cloud&tab=overview", "group": "Atlassian Bug Bounty" }, { "name": "Worklogs Report - Cloud - https://marketplace.atlassian.com/apps/1216516/worklogs-report?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216516/worklogs-report?hosting=cloud&tab=overview", "group": "Atlassian Bug Bounty" }, { "name": "Worklogs Report - Data Center - https://marketplace.atlassian.com/apps/1216516/worklogs-report?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216516/worklogs-report?hosting=datacenter&tab=overview", "group": "Atlassian Bug Bounty" }, { "name": "Pivot Report - Server - https://marketplace.atlassian.com/apps/1215414/pivot-report?hosting=server&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215414/pivot-report?hosting=server&tab=overview", "group": "Atlassian Bug Bounty" }, { "name": "Worklogs Report - Server - https://marketplace.atlassian.com/apps/1216516/worklogs-report?hosting=server&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216516/worklogs-report?hosting=server&tab=overview", "group": "Atlassian Bug Bounty" }, { "name": "Pivot Report - Data Center - https://marketplace.atlassian.com/apps/1215414/pivot-report?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215414/pivot-report?hosting=datacenter&tab=overview", "group": "Atlassian Bug Bounty" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-bceb812177a6d343.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-63fc8c4f8df523ba", "name": "Comcast Xfinity Bug Bounty", "program_url": "https://bugcrowd.com/engagements/comcast-mbb", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $5,500", "reward_min": "$50", "reward_max": "$5,500", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:57Z", "scope_published_at": "2026-07-13T17:53:39.238Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 5, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/comcast-mbb/changelog/f1b3e165-6a70-418d-9df3-180f38f07907.json" ], "in_scope": [ { "name": "██████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "█████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "█████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "███████████████████████████████████████", "asset_type": "website", "location": null, "group": "█████████████████" } ], "out_of_scope": [ { "name": "█████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "██████████", "asset_type": "network", "location": null, "group": "████████████" }, { "name": "█████████████", "asset_type": "network", "location": null, "group": "████████████" }, { "name": "███████████████", "asset_type": "network", "location": null, "group": "████████████" }, { "name": "██████████████", "asset_type": "network", "location": null, "group": "████████████" }, { "name": "█████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-63fc8c4f8df523ba.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "5 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-1ac62d06fac741a7", "name": "Comcast Xfinity Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/comcastvdp", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $3,500", "reward_min": "Points", "reward_max": "$3,500", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:58Z", "scope_published_at": "2026-08-10T19:35:03.297Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/comcastvdp/changelog/7d76e69b-319e-4db6-a9a8-21d03297eeab.json" ], "in_scope": [ { "name": "*.sys.comcast.net", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "https://business.comcast.com/account", "asset_type": "website", "location": "https://business.comcast.com/account", "group": "Primary Targets" }, { "name": "TV - Xfinity hardware and services", "asset_type": "hardware", "location": null, "group": "Primary Targets" }, { "name": "Flex - Xfinity hardware and services", "asset_type": "hardware", "location": null, "group": "Primary Targets" }, { "name": "Voice - Hardware and service", "asset_type": "hardware", "location": null, "group": "Primary Targets" }, { "name": "Mobile Apps iOS and Android", "asset_type": "other", "location": "https://www.xfinity.com/apps", "group": "Primary Targets" } ], "out_of_scope": [ { "name": "Comcastbiz.net", "asset_type": "website", "location": "https://www.comcastbiz.net/", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-1ac62d06fac741a7.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-1e4d6d7de511a779", "name": "Consensus by CoinDesk", "program_url": "https://bugcrowd.com/engagements/consensus-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,500", "reward_min": "$250", "reward_max": "$7,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:59Z", "scope_published_at": "2026-05-21T18:59:04.876Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/consensus-mbb-og/changelog/6579dd80-3a93-403f-b9b1-ac5f9f9da59b.json" ], "in_scope": [ { "name": "Consensus 2026 Sandbox Site", "asset_type": "website", "location": "https://consensus2026.sandbox.events.coindesk.com/", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "uat.coindesk.com", "asset_type": "website", "location": "https://uat.coindesk.com/", "group": "Out of Scope targets" }, { "name": "CoinDesk Indices", "asset_type": "website", "location": "https://uat.coindesk.com/indices", "group": "Out of Scope targets" }, { "name": "CoinDesk Events", "asset_type": "website", "location": "https://uat.coindesk.com/events", "group": "Out of Scope targets" }, { "name": "Production CoinDesk Events", "asset_type": "website", "location": "https://events.coindesk.com", "group": "Out of Scope targets" }, { "name": "uat.accounts.coindesk.com", "asset_type": "website", "location": "https://uat.accounts.coindesk.com", "group": "Out of Scope targets" }, { "name": "Consensus HK Site", "asset_type": "website", "location": "https://consensus-hongkong2025.coindesk.com/", "group": "Out of Scope targets" }, { "name": "Consensus2023 Site", "asset_type": "website", "location": "https://consensus2023.coindesk.com/", "group": "Out of Scope targets" }, { "name": "Consensus2024 Site", "asset_type": "website", "location": "https://consensus2024.coindesk.com/", "group": "Out of Scope targets" }, { "name": "Consensus2025 Site", "asset_type": "website", "location": "https://consensus2025.coindesk.com/", "group": "Out of Scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-1e4d6d7de511a779.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-f63d7f44f611c7d9", "name": "Council on Foreign Relations", "program_url": "https://bugcrowd.com/engagements/cfr", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $2,100", "reward_min": "$100", "reward_max": "$2,100", "scope_rank": 1, "access_status": "open", "industry": "Civic, Non-Profit and Membership Groups", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:00Z", "scope_published_at": "2026-09-10T14:42:06.295Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/cfr/changelog/7235586d-d815-4169-a576-652a8ade16a1.json" ], "in_scope": [ { "name": "████████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "█████████████████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "██████████████████████████", "asset_type": "website", "location": null, "group": "████████" } ], "out_of_scope": [ { "name": "███████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "██████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-f63d7f44f611c7d9.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-0ecaa506b3c39bf6", "name": "Craft Coders Marketplace Bug Bounty", "program_url": "https://bugcrowd.com/engagements/craftcoders", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:01Z", "scope_published_at": "2022-03-21T01:23:46.706Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/craftcoders/changelog/5150dc25-9306-4c67-8721-7a8e9b213ce7.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1223249/mailto-wiki-send-emails-to-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1223249/mailto-wiki-send-emails-to-confluence?tab=overview&hosting=server", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1223249/mailto-wiki-email-for-confluence?hosting=datacenter&tab=overview", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-0ecaa506b3c39bf6.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-e21330760c64af53", "name": "Creativas", "program_url": "https://bugcrowd.com/engagements/creativas", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:02Z", "scope_published_at": "2026-09-10T16:27:31.564Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/creativas/changelog/88f1e20c-86ff-4f0f-a765-f969f4434f65.json" ], "in_scope": [ { "name": "Smart Terms for Confluence - Glossary - Cloud - https://marketplace.atlassian.com/apps/1219677/smart-terms-for-confluence-glossary?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219677/smart-terms-for-confluence-glossary?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Smart Courses for Confluence - LMS - Cloud - https://marketplace.atlassian.com/apps/1216979/smart-courses-for-confluence-lms?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216979/smart-courses-for-confluence-lms?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Smart Images for Confluence- Cloud - https://marketplace.atlassian.com/apps/1225000/smart-images-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225000/smart-images-for-confluence?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Smart Tables for Confluence - Cloud - https://marketplace.atlassian.com/apps/1218080/smart-tables-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218080/smart-tables-for-confluence?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1234678/smart-terms-for-jira-glossary?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1234678/smart-terms-for-jira-glossary?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-e21330760c64af53.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-dd7321c53dd299bf", "name": "Dell Technologies Application Bug Bounty", "program_url": "https://bugcrowd.com/engagements/dell-com", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $2,500", "reward_min": "$50", "reward_max": "$2,500", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:04Z", "scope_published_at": "2024-03-11T14:09:05.800Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/dell-com/changelog/93ea9025-907e-485e-b7a5-91709d64e741.json" ], "in_scope": [ { "name": "*.dell.com/*", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.delltechnologies.com/*", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://console.delltechnologies.com/nav/administration", "asset_type": "website", "location": "https://console.delltechnologies.com/nav/administration", "group": "In Scope" }, { "name": "https://console.delltechnologies.com/nav/invoice", "asset_type": "website", "location": "https://console.delltechnologies.com/nav/invoice", "group": "In Scope" }, { "name": "https://console.delltechnologies.com/nav/billing", "asset_type": "website", "location": "https://console.delltechnologies.com/nav/billing", "group": "In Scope" }, { "name": "Any Verified Dell-Controlled Endpoint (domains/IP space/etc.)", "asset_type": "other", "location": null, "group": "In Scope - No Monetary Rewards" } ], "out_of_scope": [ { "name": "https://console.delltechnologies.com/", "asset_type": "website", "location": "https://console.delltechnologies.com/ ", "group": "Out of Scope" }, { "name": "https://console.delltechnologies.com/nav/catalog", "asset_type": "website", "location": "https://console.delltechnologies.com/nav/catalog", "group": "Out of Scope" }, { "name": "https://console.delltechnologies.com/nav/support", "asset_type": "website", "location": "https://console.delltechnologies.com/nav/support", "group": "Out of Scope" }, { "name": "https://console.delltechnologies.com/nav/subscriptions", "asset_type": "website", "location": "https://console.delltechnologies.com/nav/subscriptions", "group": "Out of Scope" }, { "name": "educate.dell.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "console.dell.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "console-test.dell.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "salesproductivity.dell.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-dd7321c53dd299bf.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-ff6e05dc38ce5e2d", "name": "Dell Technologies' Products Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/dell-product", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $5,000", "reward_min": "$200", "reward_max": "$5,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Hardware", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:05Z", "scope_published_at": "2026-06-29T15:49:26.898Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/dell-product/changelog/bafce899-ed68-4708-b2dc-1c8485d69024.json" ], "in_scope": [ { "name": "█████████████████████████████████████████████████", "asset_type": "other", "location": null, "group": "█████████████████████████████████" }, { "name": "█████████████████████████████████████████████████████", "asset_type": "hardware", "location": null, "group": "███████████████████████████" } ], "out_of_scope": [ { "name": "████████████", "asset_type": "website", "location": null, "group": "█████████████████████████████████████████████" }, { "name": "████████████████████████", "asset_type": "website", "location": null, "group": "█████████████████████████████████████████████" }, { "name": "████████████████████████████████", "asset_type": "other", "location": null, "group": "█████████████████████████████████████████████" }, { "name": "████████████████", "asset_type": "other", "location": null, "group": "█████████████████████████████████████████████" }, { "name": "█████████████████████", "asset_type": "other", "location": null, "group": "█████████████████████████████████████████████" }, { "name": "███████████████████", "asset_type": "other", "location": null, "group": "█████████████████████████████████████████████" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-ff6e05dc38ce5e2d.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-eef3c6de790e5363", "name": "Demo-EU-admin-PenTest-Max-4", "program_url": "https://eu.bugcrowd.net/engagements/demo-eu-admin-pentest-max-4", "program_type": "unknown", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Public Bug Bounty", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": 1, "access_status": "open", "industry": "Automotive", "service_level": "Platform", "badge": "ends_soon", "ends_at": "2026-10-07T15:57:00.000Z", "is_external_listing": true, "is_demo": false, "is_private": false }, "scope_status": "fetch_failed", "scope_captured_at": "2026-10-03T16:03:15Z", "scope_published_at": null, "scope_group_count": null, "capture_error": "HTTPError: HTTP Error 403: Forbidden", "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://eu.bugcrowd.net/engagements/demo-eu-admin-pentest-max-4", "http_status": 403, "result": "http_403", "note": "The official public engagement page returned HTTP 403 during this review. Its policy and asset list were unavailable." }, "scope_source_urls": [], "in_scope": [], "out_of_scope": [], "policy_review_state": "directory_listing_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-eef3c6de790e5363.md", "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official public engagement page returned HTTP 403 during this review. Its policy and asset list were unavailable." ] }, { "id": "bugcrowd-32555d4b0cb5ad08", "name": "Demo-EU-admin-PublicMBB-1", "program_url": "https://eu.bugcrowd.net/engagements/eu-public-1", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Automotive", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": true, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:07Z", "scope_published_at": "2026-08-06T08:56:36.656Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://eu.bugcrowd.net/engagements/eu-public-1/changelog/b2c34733-581a-4e16-aff0-fef8caf7f872.json" ], "in_scope": [ { "name": "Test-Target-Reward-updated", "asset_type": "ip_address", "location": "https://tracker.eu.bugcrowd.net/", "group": "Add Target Group with Rewards Pay" }, { "name": "test-target-updated-1", "asset_type": "api", "location": "https://temp-target.ai", "group": "Add Target Group with Rewards Pay" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-32555d4b0cb5ad08.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-128c3420fe4d74c6", "name": "Demo-EU-admin-Test", "program_url": "https://eu.bugcrowd.net/engagements/Demo-EU-admin-Test", "program_type": "unknown", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": 1, "access_status": "open", "industry": "Agriculture", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": true, "is_demo": false, "is_private": false }, "scope_status": "fetch_failed", "scope_captured_at": "2026-10-03T16:03:16Z", "scope_published_at": null, "scope_group_count": null, "capture_error": "HTTPError: HTTP Error 403: Forbidden", "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://eu.bugcrowd.net/engagements/Demo-EU-admin-Test", "http_status": 403, "result": "http_403", "note": "The official public engagement page returned HTTP 403 during this review. Its policy and asset list were unavailable." }, "scope_source_urls": [], "in_scope": [], "out_of_scope": [], "policy_review_state": "directory_listing_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-128c3420fe4d74c6.md", "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official public engagement page returned HTTP 403 during this review. Its policy and asset list were unavailable." ] }, { "id": "bugcrowd-da2091edd60344e7", "name": "DevAcrobats", "program_url": "https://bugcrowd.com/engagements/devacrobats-market", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:08Z", "scope_published_at": "2026-06-09T12:26:49.716Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/devacrobats-market/changelog/4e5f79cc-a55a-43c3-a5d4-5eeecadc9c4c.json" ], "in_scope": [ { "name": "Performance Objectives: Charts & Reports for Jira Dashboards - Cloud -- https://marketplace.atlassian.com/apps/1218655/performance-objectives-charts-reports?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218655/performance-objectives-charts-reports?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Performance Objectives: Charts & Reports for Jira Dashboards - Data Center -- https://marketplace.atlassian.com/apps/1218655/performance-objectives-charts-reports?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218655/performance-objectives-charts-reports?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "User Activity Timeline & History for Jira -- https://marketplace.atlassian.com/apps/1234873/user-activity-timeline-history-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1234873/user-activity-timeline-history-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-da2091edd60344e7.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-b8fe497412258ef7", "name": "Deview Studios Marketplace Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/deviewstudios-market", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:09Z", "scope_published_at": "2026-09-23T17:38:04.230Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/deviewstudios-market/changelog/4aea4a49-5f5e-4d89-a942-d82365d70899.json" ], "in_scope": [ { "name": "Issue AI Analytics for Jira - https://marketplace.atlassian.com/apps/1230009/issue-ai-analytics-for-jira-cloud-private-ai?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230009/issue-ai-analytics-for-jira-cloud-private-ai?hosting=datacenter", "group": "IN SCOPE TARGETS" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-b8fe497412258ef7.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-6dc6d2585b340380", "name": "Deviniti", "program_url": "https://bugcrowd.com/engagements/deviniti", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:10Z", "scope_published_at": "2026-06-22T15:31:28.615Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/deviniti/changelog/13e7b66f-ddfc-4aa7-8d34-77d8f7d6b4f2.json" ], "in_scope": [ { "name": "Issue Sync Pro - https://marketplace.atlassian.com/apps/1229958/issue-sync-lite?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229958/issue-sync-lite?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Actions for Jira Service Management - Cloud - https://marketplace.atlassian.com/apps/1213697/actions-for-jira-service-management?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1213697/actions-for-jira-service-management?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Dynamic Forms for Jira (Cloud) - https://marketplace.atlassian.com/apps/1210820/dynamic-forms-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1210820/dynamic-forms-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "My Requests Extension for Jira Service Managament - Cloud - https://marketplace.atlassian.com/apps/1219647/my-requests-extension-for-jira-service-management?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219647/my-requests-extension-for-jira-service-management?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Queues for Jira Service Management - Cloud - https://marketplace.atlassian.com/apps/1216386/queues-for-jira-service-management?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216386/queues-for-jira-service-management?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Issue Sync - Synchronization for Jira - Cloud - https://marketplace.atlassian.com/apps/1213346/issue-sync-integration-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1213346/issue-sync-integration-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Integrator for Confluence & Jira - https://marketplace.atlassian.com/apps/1224763/coji-confluence-pages-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224763/coji-confluence-pages-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Theme Extension for Jira Service Management (Cloud) - https://marketplace.atlassian.com/apps/1220300/theme-extension-for-jira-service-management?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220300/theme-extension-for-jira-service-management?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Extension for Jira Service Management (Cloud) - https://marketplace.atlassian.com/apps/1212161/extension-for-jira-service-desk?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1212161/extension-for-jira-service-desk?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Issue Templates for Jira - https://marketplace.atlassian.com/apps/1211044/issue-templates-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211044/issue-templates-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Requirements & Test Management for Jira (Cloud) - https://marketplace.atlassian.com/apps/1220294/requirements-test-management-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220294/requirements-test-management-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "AI Ticket Assistant - https://marketplace.atlassian.com/apps/1238286/ai-ticket-assistant?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1238286/ai-ticket-assistant?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "SLA Time Management - https://marketplace.atlassian.com/apps/1237787?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237787?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "Entra ID (Azure AD) Attributes Sync for Jira - https://marketplace.atlassian.com/apps/1220477/azure-ad-attributes-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220477/entra-id-azure-ad-attributes-sync-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Workflow Building Blocks for Jira | https://marketplace.atlassian.com/apps/1233642/workflow-building-blocks-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233642/workflow-building-blocks-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Procuro - Complete Procurement Management in JSM | https://marketplace.atlassian.com/apps/22817756/procuro-complete-procurement-management-in-jsm?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/22817756/procuro-complete-procurement-management-in-jsm?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-6dc6d2585b340380.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-3e67db17322cc110", "name": "DevSamurai", "program_url": "https://bugcrowd.com/engagements/devsamurai", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:11Z", "scope_published_at": "2026-08-19T23:47:50.206Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/devsamurai/changelog/838e4155-bb72-4603-bb0a-37dc8c549c13.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1222309/agile-user-story-mapping-board-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222309/agile-user-story-mapping-board-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1223423/teamboard-resource-management-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223423/teamboard-resource-management-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1224759/agile-scrum-planning-poker-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224759/agile-scrum-planning-poker-for-jira?hosting=cloud", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1224927/time-tracking-timesheet-cost-tracker-resource-management?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224927/time-tracking-timesheet-cost-tracker-resource-management?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1224383/agile-user-story-mapping-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224383/agile-user-story-mapping-for-confluence?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1223793/confluence-whiteboard-process-workflow-visualization?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223793/confluence-whiteboard-process-workflow-visualization?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1224087/whiteboard-process-workflow-visualization-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224087/whiteboard-process-workflow-visualization-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1221853/enterprise-social-networking-polls-votes-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221853/enterprise-social-networking-polls-votes-for-confluence?tab=overview&hosting=cloud", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1228080/agile-roadmaps-timeline-product-discovery-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228080/agile-roadmaps-timeline-product-discovery-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1228867/assetit-it-asset-management-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228867/assetit-it-asset-management-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1225654/ui-wireframes-mockup-prototype-diagrams-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225654/ui-wireframes-mockup-prototype-diagrams-for-confluence?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1226280/ui-wireframes-mockup-prototype-diagrams-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226280/ui-wireframes-mockup-prototype-diagrams-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1230085/agile-test-management-ad-hoc-test-qa-checklist-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230085/agile-test-management-ad-hoc-test-qa-checklist-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1232398/roadmaps-timeline-gantt-chart-structure-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1232398/roadmaps-timeline-gantt-chart-structure-for-confluence?tab=overview&hosting=cloud", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1236175/spreadsheet-structure-table-gantt-chart-on-forge-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236175/spreadsheet-structure-table-gantt-chart-on-forge-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/856555290/salesforge-crm-leads-deals-customers-management-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/856555290/salesforge-crm-leads-deals-customers-management-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-3e67db17322cc110.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-716826b305d07b6e", "name": "Digital Rose's Marketplace Bug Bounty", "program_url": "https://bugcrowd.com/engagements/digitalrose", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:12Z", "scope_published_at": "2026-09-21T04:17:45.595Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/digitalrose/changelog/cdf7cce8-f1bb-4242-9855-48672acec16f.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1221581/esign-electronic-signatures-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221581/esign-electronic-signatures-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1224071/esign-electronic-signatures-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224071/esign-electronic-signatures-for-confluence?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1228868/esign-document-management?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228868/esign-document-management?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-716826b305d07b6e.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-f0758bf93ee937f9", "name": "Directly", "program_url": "https://bugcrowd.com/engagements/directly", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $3,000", "reward_min": "$250", "reward_max": "$3,000", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:13Z", "scope_published_at": "2026-04-24T20:25:32.674Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/directly/changelog/9133cdd7-eb7e-448d-b2c7-32b3dfa64720.json" ], "in_scope": [ { "name": "████████████████████████", "asset_type": "website", "location": null, "group": "█████████████████" }, { "name": "███████████████████████", "asset_type": "website", "location": null, "group": "█████████████████" }, { "name": "████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "█████████████████" } ], "out_of_scope": [ { "name": "████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████████████████████████████████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-f0758bf93ee937f9.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-aa77d9bfb7402d2d", "name": "Dutch Beginners ZZP Marketplace Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/dutch-beginners-market", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:14Z", "scope_published_at": "2026-06-11T00:39:44.948Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/dutch-beginners-market/changelog/9424177d-5040-4235-9982-95652628457f.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1220001/visualize-openapi-swagger-documentation?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220001/visualize-openapi-swagger-documentation?hosting=cloud", "group": "In Scope Target" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-aa77d9bfb7402d2d.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-16cd13d185a841c0", "name": "Easy Agile", "program_url": "https://bugcrowd.com/engagements/easyagile", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,000", "reward_min": "$150", "reward_max": "$2,000", "scope_rank": 1, "access_status": "open", "industry": "Corporate Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:15Z", "scope_published_at": "2026-06-19T11:02:45.742Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/easyagile/changelog/0176ec56-21a1-4dfb-bfe3-2e5158798401.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1212078/easy-agile-user-story-maps-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212078/easy-agile-user-story-maps-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1215695/easy-agile-roadmaps-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215695/easy-agile-roadmaps-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219491/easy-agile-programs-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219491/easy-agile-programs-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Easy Agile Personas for Jira -- https://marketplace.atlassian.com/apps/1221392/easy-agile-personas-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221392/easy-agile-personas-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Review by Easy Agile -- https://marketplace.atlassian.com/apps/3443905353?hosting=cloud&tab=overviewPartner", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/3443905353?hosting=cloud&tab=overviewPartner", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-16cd13d185a841c0.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-6b656e8fb33272af", "name": "eazyBI", "program_url": "https://bugcrowd.com/engagements/eazybi", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $3,000", "reward_min": "$150", "reward_max": "$3,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:16Z", "scope_published_at": "2026-03-25T11:18:52.328Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/eazybi/changelog/d910ea72-d174-432c-ad2f-11df1a3b729a.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1211051/eazybi-reports-and-charts-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211051/eazybi-reports-and-charts-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1211051/eazybi-reports-and-charts-for-jira?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211051/eazybi-reports-and-charts-for-jira?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219504/eazybi-reports-and-charts-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219504/eazybi-reports-and-charts-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219504/eazybi-reports-and-charts-for-confluence?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219504/eazybi-reports-and-charts-for-confluence?hosting=datacenter", "group": "In Scope Targets" }, { "name": "docs.eazybi.com", "asset_type": "website", "location": "https://docs.eazybi.com/", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-6b656e8fb33272af.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-9a22346f0a1e442c", "name": "Electroneum Legacy Blockchain: EOL", "program_url": "https://bugcrowd.com/engagements/legacy-blockchain-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $12,000", "reward_min": "$200", "reward_max": "$12,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:17Z", "scope_published_at": "2026-02-23T15:42:51.448Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/legacy-blockchain-mbb-og/changelog/f40fb416-593a-4902-82eb-03b902a32c84.json" ], "in_scope": [ { "name": "Legacy Blockchain", "asset_type": "other", "location": "https://github.com/electroneum/electroneum/", "group": "In scope" }, { "name": "Legacy Block Explorer", "asset_type": "website", "location": "https://legacy-blockexplorer.electroneum.com", "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-9a22346f0a1e442c.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-ff5dfe058d078681", "name": "Electroneum Smart Chain (ETN-SC) — EVM-Compatible Blockchain", "program_url": "https://bugcrowd.com/engagements/smartchain-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $12,000", "reward_min": "$200", "reward_max": "$12,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:18Z", "scope_published_at": "2026-01-05T13:56:31.373Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/smartchain-mbb-og/changelog/4db6dd3f-e0bf-43cf-8835-3892423b790b.json" ], "in_scope": [ { "name": "Smartchain Blockchain", "asset_type": "other", "location": "https://github.com/electroneum/electroneum-sc/", "group": "In scope" }, { "name": "Smartchain Block Explorer", "asset_type": "website", "location": "https://blockexplorer.electroneum.com", "group": "In scope" }, { "name": "Smartchain Staging Block Explorer", "asset_type": "website", "location": "https://testnet-blockexplorer.electroneum.com", "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-ff5dfe058d078681.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-8f62ecb3002fcc00", "name": "Elementor: Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/elementor", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $4,000", "reward_min": "Points", "reward_max": "$4,000", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:19Z", "scope_published_at": "2026-03-25T14:59:06.412Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/elementor/changelog/e2474c76-bdfc-4277-9b48-e61b50cbffc5.json" ], "in_scope": [ { "name": "https://my.elementor.com/", "asset_type": "website", "location": "https://my.elementor.com/", "group": "Elementor Targets" }, { "name": "https://go.elementor.com/", "asset_type": "website", "location": "https://go.elementor.com/", "group": "Elementor Targets" }, { "name": "https://translate.elementor.com/", "asset_type": "website", "location": "https://translate.elementor.com/", "group": "Elementor Targets" }, { "name": "https://developers.elementor.com/", "asset_type": "website", "location": "https://developers.elementor.com/", "group": "Elementor Targets" }, { "name": "https://library.elementor.com/", "asset_type": "website", "location": "https://library.elementor.com/", "group": "Elementor Targets" }, { "name": "https://elementor.careers", "asset_type": "website", "location": "https://elementor.careers", "group": "Elementor Targets" }, { "name": "https://activitylog.io/", "asset_type": "website", "location": "http://activitylog.io/", "group": "Elementor Targets" }, { "name": "https://send2.co/", "asset_type": "website", "location": "https://send2.co/", "group": "Elementor Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-8f62ecb3002fcc00.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-ffe1dc9834277a2d", "name": "Elements", "program_url": "https://bugcrowd.com/engagements/elements", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:20Z", "scope_published_at": "2026-05-14T05:36:54.518Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/elements/changelog/0c6c1f67-df6f-4a37-9658-4169b837b443.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1212486/elements-spreadsheet-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212486/elements-spreadsheet-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/23337/elements-connect-external-data-fields?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/23337/elements-connect-external-data-fields?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1211111/elements-copy-sync-jira-issue-sync?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211111/elements-copy-sync-jira-issue-sync?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1225519/elements-publish-to-confluence-create-pages-from-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1225519/elements-publish-to-confluence-create-pages-from-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1226102/elements-publish-to-confluence-jira-helper-app?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1226102/elements-publish-to-confluence-jira-helper-app?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1229459/elements-overview-custom-display-for-related-issues?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1229459/elements-overview-custom-display-for-related-issues?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1232142/elements-connect-helper-app?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1232142/elements-connect-helper-app?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1234289/elements-pulse-customer-experience-insights-for-jsm?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1234289/elements-pulse-customer-experience-insights-for-jsm?hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-ffe1dc9834277a2d.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-f043619331dae594", "name": "Empower Personal Wealth", "program_url": "https://bugcrowd.com/engagements/personalcapital", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $4,000", "reward_min": "$150", "reward_max": "$4,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:21Z", "scope_published_at": "2026-04-08T18:21:33.120Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/personalcapital/changelog/13fe5221-e7f6-4843-8d53-9b59e2ec584b.json" ], "in_scope": [ { "name": "██████████████████████████████████", "asset_type": "website", "location": null, "group": "███████████████" } ], "out_of_scope": [ { "name": "████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███████████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-f043619331dae594.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-73e7cda60744ba8d", "name": "Entain Game Logic Flaws Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/entain-glf-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $6,500", "reward_min": "Points", "reward_max": "$6,500", "scope_rank": 2, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:22Z", "scope_published_at": "2026-08-20T22:49:55.583Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/entain-glf-mbb-og/changelog/3405453a-4ce4-4e30-ba62-ffa3af17807c.json" ], "in_scope": [ { "name": "https://casino.partycasino.com", "asset_type": "website", "location": "https://casino.partycasino.com", "group": "In Scope" }, { "name": "https://casino.bwin.com", "asset_type": "website", "location": "https://casino.bwin.com", "group": "In Scope" }, { "name": "https://casino.sportingbet.com", "asset_type": "website", "location": "https://casino.sportingbet.com", "group": "In Scope" }, { "name": "https://www.ladbrokes.com/en/games", "asset_type": "website", "location": "https://www.ladbrokes.com/en/games", "group": "In Scope" }, { "name": "https://www.coral.co.uk/en/games", "asset_type": "website", "location": "https://www.coral.co.uk/en/games", "group": "In Scope" }, { "name": "https://casino.*.betmgm.com/en/games (read \"Find a Game to test on our targets\")", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-73e7cda60744ba8d.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-6a2c0440a1492bfa", "name": "Entain Public Managed Bug Bounty Engagement 2024", "program_url": "https://bugcrowd.com/engagements/entain-public-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $5,000", "reward_min": "$100", "reward_max": "$5,000", "scope_rank": 3, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:23Z", "scope_published_at": "2025-04-22T12:00:31.213Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/entain-public-mbb-og/changelog/5dc33ba8-650a-409f-81b7-06081b37fd7d.json" ], "in_scope": [ { "name": "Partypoker Website (and all its subdomains)", "asset_type": "website", "location": "https://www.partypoker.com", "group": "In scope targets" }, { "name": "Ladbrokes Digital (and all its subdomains)", "asset_type": "website", "location": "https://www.ladbrokes.com", "group": "In scope targets" }, { "name": "Coral Sports (and all its subdomains)", "asset_type": "website", "location": "https://www.coral.co.uk", "group": "In scope targets" }, { "name": "Gala Bingo (and all its subdomains)", "asset_type": "website", "location": "https://www.galabingo.com", "group": "In scope targets" }, { "name": "Partycasino Website (and all its subdomains)", "asset_type": "website", "location": "https://www.partycasino.com", "group": "In scope targets" }, { "name": "Bwin Website (and all its subdomains)", "asset_type": "website", "location": "https://www.bwin.com", "group": "In scope targets" }, { "name": "Partycasino APK", "asset_type": "android", "location": "http://media.itsfogo.com/media/upload/mobile/android/apk/partycasino_com.apk", "group": "In scope targets" }, { "name": "Bwin Poker-Casino iOS", "asset_type": "ios", "location": "https://apps.apple.com/gb/app/bwin-poker-and-casino-games/id410242773", "group": "In scope targets" }, { "name": "Bwin Sports iOS", "asset_type": "ios", "location": "https://apps.apple.com/gb/app/bwin-sports-betting/id393760245", "group": "In scope targets" }, { "name": "Partycasino iOS", "asset_type": "ios", "location": "https://apps.apple.com/gb/app/partycasino-play-casino-games/id818432894", "group": "In scope targets" }, { "name": "Partypoker iOS", "asset_type": "ios", "location": "https://apps.apple.com/gb/app/partypoker-texas-holdem-poker/id687740281", "group": "In scope targets" }, { "name": "Gala Casino Website (and all its subdomains)", "asset_type": "website", "location": "https://www.galacasino.com", "group": "In scope targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-6a2c0440a1492bfa.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-2ae173bd208b838f", "name": "EPAM Systems Managed Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/epam-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $1,000", "reward_min": "$50", "reward_max": "$1,000", "scope_rank": 4, "access_status": "open", "industry": "Business Management", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:24Z", "scope_published_at": "2026-08-26T12:28:52.496Z", "scope_group_count": 9, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/epam-mbb-og/changelog/e88a4cbf-ca2a-4076-93c0-9f76b0e26119.json" ], "in_scope": [ { "name": "*.epam.com", "asset_type": "website", "location": "https://www.epam.com/", "group": "In Scope Targets - Tier 1" }, { "name": "Subdomain takeover", "asset_type": "other", "location": "https://*.epam.com", "group": "Subdomain takeover - Tier 0" }, { "name": "*.projects.epam.com", "asset_type": "website", "location": "https://projects.epam.com", "group": "In Scope Targets - Tier 2" }, { "name": "*.lab.epam.com", "asset_type": "website", "location": "https://lab.epam.com", "group": "In Scope Targets - Tier 3" }, { "name": "*.opensource.epam.com", "asset_type": "website", "location": "https://opensource.epam.com", "group": "In Scope Targets - Tier 3" }, { "name": "*.emakina.nl", "asset_type": "website", "location": null, "group": "In Scope Targets - Tier 4" }, { "name": "*.emakina.group", "asset_type": "website", "location": null, "group": "In Scope Targets - Tier 4" }, { "name": "*.emakina.com", "asset_type": "website", "location": null, "group": "In Scope Targets - Tier 4" }, { "name": "*.emakina.ch", "asset_type": "website", "location": null, "group": "In Scope Targets - Tier 4" }, { "name": "*.emakina.fr", "asset_type": "website", "location": null, "group": "In Scope Targets - Tier 4" }, { "name": "*.emakina.us", "asset_type": "website", "location": null, "group": "In Scope Targets - Tier 4" }, { "name": "*.emakina.at", "asset_type": "website", "location": null, "group": "In Scope Targets - Tier 4" }, { "name": "open redirect at *.epam.com", "asset_type": "website", "location": null, "group": "Open redirect" }, { "name": "Open redirect at *.projects.epam.com, *.lab.epam.com, *.opensource.epam.com", "asset_type": "website", "location": null, "group": "Open redirect - Tier #1" }, { "name": "In Scope - Points only", "asset_type": "other", "location": null, "group": "In Scope - Points Only" } ], "out_of_scope": [ { "name": "ethics.epam.com", "asset_type": "website", "location": "https://ethics.epam.com/", "group": "Out of Scope Targets" }, { "name": "profile.epam.com", "asset_type": "website", "location": "https://profile.epam.com", "group": "Out of Scope Targets" }, { "name": "carbon.epam.com", "asset_type": "website", "location": "https://carbon.epam.com/", "group": "Out of Scope Targets" }, { "name": "infongen.com", "asset_type": "website", "location": "https://www.infongen.com/", "group": "Out of Scope Targets" }, { "name": "ebn.epam.com", "asset_type": "website", "location": "http://ebn.epam.com/", "group": "Out of Scope Targets" }, { "name": "solutionshub.epam.com", "asset_type": "website", "location": "https://solutionshub.epam.com/", "group": "Out of Scope Targets" }, { "name": "telescopeai.com", "asset_type": "website", "location": "https://www.telescopeai.com/", "group": "Out of Scope Targets" }, { "name": "wearecommunity.io", "asset_type": "website", "location": "https://wearecommunity.io/", "group": "Out of Scope Targets" }, { "name": "cami.lab.epam.com", "asset_type": "website", "location": "https://cami.lab.epam.com/", "group": "Out of Scope Targets" }, { "name": "ellie.lab.epam.com", "asset_type": "website", "location": "https://ellie.lab.epam.com/", "group": "Out of Scope Targets" }, { "name": "apex.lab.epam.com", "asset_type": "website", "location": "https://apex.lab.epam.com/", "group": "Out of Scope Targets" }, { "name": "investors.epam.com", "asset_type": "website", "location": "https://investors.epam.com/", "group": "Out of Scope Targets" }, { "name": "ecsd00300769.epam.com", "asset_type": "website", "location": "https://ecsd00300769.epam.com/", "group": "Out of Scope Targets" }, { "name": "display.epam.com", "asset_type": "website", "location": "https://display.epam.com/", "group": "Out of Scope Targets" }, { "name": "info.epam.com", "asset_type": "website", "location": "https://info.epam.com", "group": "Out of Scope Targets" }, { "name": "admin-ui.preship.gcp.gnrg-osdu.projects.epam.com", "asset_type": "website", "location": "https://admin-ui.preship.gcp.gnrg-osdu.projects.epam.com", "group": "Out of Scope Targets" }, { "name": "support.epam.com/", "asset_type": "website", "location": "https://support.epam.com/", "group": "Out of Scope Targets" }, { "name": "customersupport.epam.com", "asset_type": "website", "location": "https://customersupport.epam.com/", "group": "Out of Scope Targets" }, { "name": "supportnow.epam.com", "asset_type": "website", "location": "https://supportnow.epam.com/", "group": "Out of Scope Targets" }, { "name": "anywhere.epam.com", "asset_type": "website", "location": "https://anywhere.epam.com/", "group": "Out of Scope Targets" }, { "name": "*.buddybot.lab.epam.com", "asset_type": "website", "location": "https://*buddybot.lab.epam.com", "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-2ae173bd208b838f.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-f8d74f40a467df84", "name": "eToro Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/etoro-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $15,000", "reward_min": "$100", "reward_max": "$15,000", "scope_rank": 3, "access_status": "open", "industry": "Finance", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:25Z", "scope_published_at": "2026-06-05T15:48:33.393Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/etoro-mbb-og/changelog/9d02978a-c82f-4cbd-9af6-34d75b580305.json" ], "in_scope": [ { "name": "*.etoro.com", "asset_type": "website", "location": "https://*.etoro.com", "group": "In Scope" }, { "name": "io.getdelta.ios", "asset_type": "ios", "location": "https://io.getdelta.ios", "group": "In Scope" }, { "name": "io.getdelta.android", "asset_type": "android", "location": "https://io.getdelta.android", "group": "In Scope" }, { "name": "etoropartners.com", "asset_type": "website", "location": "https://etoropartners.com", "group": "In Scope" }, { "name": "delta.app", "asset_type": "website", "location": "https://delta.app", "group": "In Scope" }, { "name": "com.etoro.wallet", "asset_type": "other", "location": "https://com.etoro.wallet", "group": "In Scope" }, { "name": "com.etoro.openbook", "asset_type": "other", "location": "https://com.etoro.openbook", "group": "In Scope" }, { "name": "etorox.com", "asset_type": "website", "location": "https://etorox.com", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-f8d74f40a467df84.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-54bca0206aadb710", "name": "Etsy", "program_url": "https://bugcrowd.com/engagements/etsy", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $10,000", "reward_min": "$50", "reward_max": "$10,000", "scope_rank": 4, "access_status": "open", "industry": "eCommerce", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:26Z", "scope_published_at": "2026-04-20T21:12:50.730Z", "scope_group_count": 4, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/etsy/changelog/4ab5bb40-ae5d-41de-a87e-56dfc61a7a11.json" ], "in_scope": [ { "name": "www.etsy.com", "asset_type": "website", "location": "https://www.etsy.com", "group": "In-Scope Targets - Tier 1" }, { "name": "Etsy Mobile Application (Android)", "asset_type": "android", "location": "https://www.etsy.com/mobile", "group": "In-Scope Targets - Tier 1" }, { "name": "Etsy Mobile Application (iPhone)", "asset_type": "ios", "location": "https://www.etsy.com/mobile", "group": "In-Scope Targets - Tier 1" }, { "name": "Etsy API (see documentation below)", "asset_type": "api", "location": "https://www.etsy.com/developers/documentation/getting_started/api_basics", "group": "In-Scope Targets - Tier 1" }, { "name": "etsypayments.com", "asset_type": "other", "location": "https://etsypayments.com", "group": "In-Scope Targets - Tier 1" }, { "name": "blog.etsy.com", "asset_type": "website", "location": "https://blog.etsy.com", "group": "In Scope " }, { "name": "careers.etsy.com", "asset_type": "website", "location": "https://careers.etsy.com", "group": "In Scope " }, { "name": "help.etsy.com", "asset_type": "website", "location": "https://help.etsy.com", "group": "In Scope " }, { "name": "community.etsy.com", "asset_type": "website", "location": "https://community.etsy.com", "group": "In Scope " }, { "name": "*.etsy.com", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [ { "name": "icht.etsysecure.com", "asset_type": "api", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-54bca0206aadb710.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-0deaf756ac57137f", "name": "EU-Automation-Test-Regression-Engagement1-B", "program_url": "https://eu.bugcrowd.net/engagements/eu-automation-test-regression-engagement1-b", "program_type": "unknown", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Public Bug Bounty", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": 1, "access_status": "open", "industry": "Banking", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": true, "is_demo": false, "is_private": false }, "scope_status": "no_published_assets", "scope_captured_at": "2026-10-03T16:03:18Z", "scope_published_at": "2026-08-18T07:00:09.334Z", "scope_group_count": 0, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://eu.bugcrowd.net/engagements/eu-automation-test-regression-engagement1-b", "http_status": 200, "result": "empty_published_table", "note": "The official engagement page was available, but its public brief published zero scope groups and zero target rows. Policy prose may still define or limit scope; no asset row was inferred." }, "scope_source_urls": [ "https://eu.bugcrowd.net/engagements/eu-automation-test-regression-engagement1-b/changelog/ad9e1e6c-dbcb-477d-ada7-e108739ebf4e.json" ], "in_scope": [], "out_of_scope": [], "policy_review_state": "directory_listing_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-0deaf756ac57137f.md", "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official engagement page was available, but its public brief published zero scope groups and zero target rows. Policy prose may still define or limit scope; no asset row was inferred." ] }, { "id": "bugcrowd-eb00ad17166ce3df", "name": "Felix Health Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/felix-health-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Healthcare", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:27Z", "scope_published_at": "2026-09-23T17:01:25.709Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/felix-health-mbb-og/changelog/fe9726ec-9264-49e8-9fbf-2bb7e7439542.json" ], "in_scope": [ { "name": "bugcrowd.charm.felixforus.ca", "asset_type": "website", "location": "https://bugcrowd.charm.felixforus.ca/home", "group": "In Scope" }, { "name": "bugcrowd.lucky.felixforus.ca", "asset_type": "website", "location": "https://bugcrowd.lucky.felixforus.ca", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-eb00ad17166ce3df.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-06a86c85056853bb", "name": "FindOut InfoVis AB - Marketplace Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/FindOut-infovis", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:28Z", "scope_published_at": "2026-10-01T17:24:06.479Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/FindOut-infovis/changelog/4dce2986-be9e-4bca-afee-c193c7b4a794.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1218391/dependency-map-for-jira-link-viewer?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218391/dependency-map-for-jira-link-viewer?hosting=cloud", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-06a86c85056853bb.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-bce5cf8477e65834", "name": "Fireblocks MPC Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/fireblocks-mbb-og2", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $150,000", "reward_min": "$200", "reward_max": "$150,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:29Z", "scope_published_at": "2026-09-23T14:00:10.673Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/fireblocks-mbb-og2/changelog/11ef7ff2-db1e-4c0d-90b6-b530d08857b7.json" ], "in_scope": [ { "name": "github.com/fireblocks/mpc-lib", "asset_type": "other", "location": "https://github.com/fireblocks/mpc-lib", "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-bce5cf8477e65834.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-312ee9d47934737a", "name": "Fireblocks Web Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/fireblocks-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$20 - $12,000", "reward_min": "$20", "reward_max": "$12,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:30Z", "scope_published_at": "2026-02-12T13:49:31.665Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/fireblocks-mbb-og/changelog/a035263c-3b03-4e81-b159-75026dd0a2fd.json" ], "in_scope": [ { "name": "sb-console-api.fireblocks.io", "asset_type": "website", "location": "https://sb-console-api.fireblocks.io", "group": "In scope" }, { "name": "sb-mobile-api.fireblocks.io", "asset_type": "website", "location": "https://sb-mobile-api.fireblocks.io", "group": "In scope" }, { "name": "sandbox-api.fireblocks.io", "asset_type": "website", "location": "https://sandbox-api.fireblocks.io", "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-312ee9d47934737a.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-69a99191f14ee3a5", "name": "FIS", "program_url": "https://bugcrowd.com/engagements/fis", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $20,000", "reward_min": "Points", "reward_max": "$20,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:31Z", "scope_published_at": "2026-09-15T16:18:17.080Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/fis/changelog/94ae44bf-701a-47f9-b1cc-052c0b8db3d5.json" ], "in_scope": [ { "name": "Any FIS asset is in scope", "asset_type": "website", "location": null, "group": "In scope" }, { "name": "https://www.tdfitloan.com/#!/", "asset_type": "website", "location": null, "group": "Additional in scope" } ], "out_of_scope": [ { "name": "Reference above out of scope targets", "asset_type": "website", "location": "https://apuat-aaa.fisglobal.com", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-69a99191f14ee3a5.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-04c136f0fed35c86", "name": "Fivetran", "program_url": "https://bugcrowd.com/engagements/fivetran-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $7,500", "reward_min": "Points", "reward_max": "$7,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:33Z", "scope_published_at": "2026-09-25T14:00:44.206Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/fivetran-mbb-og/changelog/c2b5060d-5f00-4a6d-9af7-77c90fc6fe07.json" ], "in_scope": [ { "name": "*.fivetran.com", "asset_type": "website", "location": "https://fivetran.com/login", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "Any internal, staging, or development services.", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Social engineering against Fivetran Support or Fivetran Employees", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "*.db.fivetran.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "testing-datalake.fivetran.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "shop.fivetran.com", "asset_type": "website", "location": "https://shop.fivetran.com", "group": "Out of Scope" }, { "name": "status.fivetran.com", "asset_type": "website", "location": "https://status.fivetran.com/", "group": "Out of Scope" }, { "name": "support.fivetran.com", "asset_type": "website", "location": "https://support.fivetran.com", "group": "Out of Scope" }, { "name": "community-stage.fivetran.com", "asset_type": "website", "location": "https://community-stage.fivetran.com", "group": "Out of Scope" }, { "name": "trust.fivetran.com", "asset_type": "website", "location": "https://trust.fivetran.com", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-04c136f0fed35c86.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-638d126afb3bedf7", "name": "Flourish", "program_url": "https://bugcrowd.com/engagements/flourish", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $6,000", "reward_min": "$100", "reward_max": "$6,000", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:34Z", "scope_published_at": "2026-09-09T03:58:28.681Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/flourish/changelog/2496a291-97b5-409d-b340-61c25f08f287.json" ], "in_scope": [ { "name": "flo.uri.sh", "asset_type": "website", "location": "https://flo.uri.sh", "group": "In Scope Targets" }, { "name": "*.flourish.studio", "asset_type": "website", "location": "https://flourish.studio/", "group": "In Scope Targets" }, { "name": "*.xyzbmojn.net", "asset_type": "website", "location": "https://xyzbmojn.net/", "group": "In Scope Targets" }, { "name": "flourish-user-templates.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "flourish-user-preview.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.kiln.it", "asset_type": "website", "location": "https://*.kiln.it", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "training.flourish.studio", "asset_type": "website", "location": "https://training.flourish.studio", "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-638d126afb3bedf7.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-b9892d7a0b4c36ca", "name": "Gearset: Managed Bug Bounty", "program_url": "https://bugcrowd.com/engagements/gearset-mbb", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $6,000", "reward_min": "$200", "reward_max": "$6,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:35Z", "scope_published_at": "2026-08-26T14:31:25.204Z", "scope_group_count": 6, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/gearset-mbb/changelog/43036e48-9fc0-4731-9cc9-80e31f4ebd5b.json" ], "in_scope": [ { "name": "*.staging.gearset.com", "asset_type": "website", "location": "https://staging.gearset.com/", "group": "Gearset Staging" }, { "name": "staging-api.gearset.com", "asset_type": "api", "location": "https://staging.gearset.com/", "group": "Gearset Public API" }, { "name": "hipaa.staging.gearset.com", "asset_type": "website", "location": "https://hipaa.staging.gearset.com/", "group": "HIPAA Gearset Staging" }, { "name": "staging.claytonapp.com", "asset_type": "website", "location": "https://staging.claytonapp.com", "group": "Clayton Staging" }, { "name": "staging.claytonapp.com/api", "asset_type": "api", "location": "https://staging.claytonapp.com/api", "group": "Clayton Public API" } ], "out_of_scope": [ { "name": "api.gearset.com", "asset_type": "api", "location": null, "group": "Out of scope targets" }, { "name": "app.gearset.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "us.app.gearset.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "eu.app.gearset.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "ap.app.gearest.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "gearset.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "app.clayton.io", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "getclayton.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "api.clayton.io", "asset_type": "api", "location": null, "group": "Out of scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-b9892d7a0b4c36ca.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-9fdf091e932f025e", "name": "Glassdoor Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/glassdoor-ogbb", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $7,000", "reward_min": "$50", "reward_max": "$7,000", "scope_rank": 4, "access_status": "open", "industry": "Consumer Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:36Z", "scope_published_at": "2026-07-22T17:50:30.769Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/glassdoor-ogbb/changelog/f2e7ea74-4b97-483d-9a51-d0da7e7f4b11.json" ], "in_scope": [ { "name": "https://api.glassdoor.com/*", "asset_type": "api", "location": null, "group": "In Scope " }, { "name": "https://www.glassdoor.com/*", "asset_type": "api", "location": null, "group": "In Scope " }, { "name": "https://www.glassdoor.com/member/*", "asset_type": "api", "location": null, "group": "In Scope " }, { "name": "https://www.glassdoor.com/employers/ec/*", "asset_type": "api", "location": null, "group": "In Scope " }, { "name": "https://www.glassdoor.com/Job/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://www.glassdoor.com/Reviews/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://www.glassdoor.com/Compare/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://www.glassdoor.com/mz-survey/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://www.glassdoor.com/Salaries/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "Fishbowl", "asset_type": "other", "location": "https://www.fishbowlapp.com/", "group": "In Scope " }, { "name": "https://api.fishbowlapp.com/*", "asset_type": "api", "location": null, "group": "In Scope " }, { "name": "Fishbowl - Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.fishbowlmedia.fishbowl&hl=en_US", "group": "In Scope " }, { "name": "Fishbowl - iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/fishbowl-professional-network/id1005070636", "group": "In Scope " }, { "name": "Glassdoor iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/glassdoor-jobs-careers/id589698942", "group": "In Scope " }, { "name": "Glassdoor Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.glassdoor.app&hl=en_US", "group": "In Scope " } ], "out_of_scope": [ { "name": "Glassdoor Help Page", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "Glassdoor Design Page", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "Glassdoor Blog", "asset_type": "other", "location": null, "group": "Out of Scope " } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-9fdf091e932f025e.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-5de9dedca7278187", "name": "Glean Technologies Public Engagement", "program_url": "https://bugcrowd.com/engagements/glean-technologies-public", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $5,000", "reward_min": "$200", "reward_max": "$5,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:37Z", "scope_published_at": "2026-02-05T15:30:17.011Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/glean-technologies-public/changelog/b781e690-8e42-445a-ba6f-afc5496f65de.json" ], "in_scope": [ { "name": "Frontend portal: https://app.glean.com/login?qe=https://bug-bounty-be.glean.com&skip_to_sso=1", "asset_type": "website", "location": "https://app.glean.com/login?qe=https://bug-bounty-be.glean.com&skip_to_sso=1", "group": "In Scope Targets" }, { "name": "Backend endpoint: bug-bounty-be.glean.com", "asset_type": "api", "location": null, "group": "In Scope Targets" }, { "name": "Scio Search Crawler for Confluence- https://marketplace.atlassian.com/apps/1222714/scio-search-crawler-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222714/scio-search-crawler-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Scio Search Crawler for Jira- https://marketplace.atlassian.com/apps/1222715/scio-search-crawler-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222715/scio-search-crawler-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Glean Activity Plugin for Jira Cloud- https://marketplace.atlassian.com/apps/1229003/glean-activity-plugin-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229003/glean-activity-plugin-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-5de9dedca7278187.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-9225c8048a5a7d35", "name": "Gliffy", "program_url": "https://bugcrowd.com/engagements/gliffy", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:38Z", "scope_published_at": "2026-07-20T19:38:13.790Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/gliffy/changelog/44ddee77-bef3-45d0-83b0-50f1016caa08.json" ], "in_scope": [ { "name": "Gliffy Diagrams for Confluence - Cloud - https://marketplace.atlassian.com/apps/254/gliffy-diagrams-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/254/gliffy-diagrams-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Gliffy Diagrams | Zero Egress & Isolated Cloud-Ready - https://marketplace.atlassian.com/apps/3076252818/gliffy-zero-egress-compliance-ready-diagramming?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/3076252818/gliffy-zero-egress-compliance-ready-diagramming?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-9225c8048a5a7d35.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-d5558fc65cbedab8", "name": "HeroCoders Apps", "program_url": "https://bugcrowd.com/engagements/herocoders", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:39Z", "scope_published_at": "2026-09-23T17:34:47.418Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/herocoders/changelog/c8984203-6b59-487a-8b83-4ac04b49fec5.json" ], "in_scope": [ { "name": "Checklists for Jira (Free) by HeroCoders - https://marketplace.atlassian.com/apps/1220209/checklists-for-jira-free-by-herocoders?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220209/checklists-for-jira-free-by-herocoders?hosting=cloud", "group": "In Scope Targets" }, { "name": "Checklists for Jira (Pro) by HeroCoders - https://marketplace.atlassian.com/apps/1213231/checklists-for-jira-pro-by-herocoders?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1213231/checklists-for-jira-pro-by-herocoders?hosting=cloud", "group": "In Scope Targets" }, { "name": "Clockwork Pro for Jira Time Tracking and Timesheets - https://marketplace.atlassian.com/apps/1219213/clockwork-pro-for-jira-time-tracking-and-timesheets?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219213/clockwork-pro-for-jira-time-tracking-and-timesheets?hosting=cloud", "group": "In Scope Targets" }, { "name": "Clockwork Lite Time Tracker - https://marketplace.atlassian.com/apps/1220750/clockwork-lite-time-tracker-time-tracking-and-timesheets?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220750/clockwork-lite-time-tracker-time-tracking-and-timesheets?hosting=cloud", "group": "In Scope Targets" }, { "name": "Acceptance Criteria for Jira (Free) - https://marketplace.atlassian.com/apps/1223139/acceptance-criteria-for-jira-free?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223139/acceptance-criteria-for-jira-free?hosting=cloud", "group": "In Scope Targets" }, { "name": "Portfolio by HeroCoders - https://marketplace.atlassian.com/apps/1220137/portfolio-by-herocoders-structure-ppm-for-jira-capacity?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220137/portfolio-by-herocoders-structure-ppm-for-jira-capacity?tab=overview&hosting=cloud", "group": "In Scope Targets" }, { "name": "Checklists for Jira (Enterprise) by HeroCoders - https://marketplace.atlassian.com/apps/1211562/checklists-for-jira-enterprise-by-herocoders?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211562/checklists-for-jira-enterprise-by-herocoders?tab=overview&hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-d5558fc65cbedab8.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-836a00e24d71dc8c", "name": "HostGator LATAM Bug Bounty", "program_url": "https://bugcrowd.com/engagements/hostgator-latam-bb", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $2,500", "reward_min": "Points", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:05Z", "scope_published_at": null, "scope_group_count": null, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/hostgator-latam-bb/changelog/e57fb9c2-18c7-4440-891f-d7fd8857088c.json" ], "in_scope": [ { "name": "www.hostgator.com.br/", "asset_type": "website", "location": "https://www.hostgator.com.br/", "group": "In Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://financeiro.hostgator.com.br", "asset_type": "website", "location": "https://financeiro.hostgator.com.br", "group": "In Scope", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "https://carrinho.hostgator.com.br/", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "academy.hostgator.com", "asset_type": "website", "location": "https://www.academy.hostgator.com", "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.hostgator.com.br", "asset_type": "website", "location": "https://www.hostgator.com.br", "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.hostgator.mx", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] } ], "policy_review_state": "verified_policy_record", "verified_policy_id": "hostgator-latam-bug-bounty", "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-836a00e24d71dc8c.md", "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ] }, { "id": "bugcrowd-91c555e8b0eaab53", "name": "HotDoc", "program_url": "https://bugcrowd.com/engagements/hotdoc", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $8,000", "reward_min": "$50", "reward_max": "$8,000", "scope_rank": 1, "access_status": "open", "industry": "Healthcare", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:40Z", "scope_published_at": "2025-12-05T07:15:56.964Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/hotdoc/changelog/ca45da66-501a-492a-986f-9e34c130e1c5.json" ], "in_scope": [ { "name": "█████████████████████████████████████████", "asset_type": "website", "location": null, "group": "███████" }, { "name": "██████████████████████████████████", "asset_type": "api", "location": null, "group": "███████" }, { "name": "███████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "███████" } ], "out_of_scope": [ { "name": "███████████", "asset_type": "android", "location": null, "group": "████████████" }, { "name": "███████", "asset_type": "ios", "location": null, "group": "████████████" }, { "name": "██████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-91c555e8b0eaab53.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-b64daeba96f57b22", "name": "HPE Networking Product Public Program", "program_url": "https://bugcrowd.com/engagements/hpe-networking-product-public", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$300 - $5,000", "reward_min": "$300", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:41Z", "scope_published_at": "2026-06-26T19:53:11.113Z", "scope_group_count": 5, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/hpe-networking-product-public/changelog/044c5c65-a22e-46b1-9b5b-468bd951526b.json" ], "in_scope": [ { "name": "HPE Aruba Networking Wireless - AOS-10.7 and above Gateways (GW)", "asset_type": "network", "location": null, "group": "HPE Aruba Networking Target Group 1" }, { "name": "HPE Aruba Networking Wireless - AOS-10.7 and above Access Points (AP)", "asset_type": "network", "location": null, "group": "HPE Aruba Networking Target Group 1" }, { "name": "HPE Aruba Networking Central - New UI (see Scope Details)", "asset_type": "website", "location": null, "group": "HPE Aruba Networking Target Group 1" }, { "name": "ArubaOS-CX Switches", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 1" }, { "name": "HPE Aruba Networking Wireless - AOS-8 Controllers", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking Wireless - AOS-8 Instant AP (IAP)", "asset_type": "network", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking Wireless - AOS-10.4 Gateways (GW)", "asset_type": "network", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking Wireless - AOS-10.4 Access Points (AP)", "asset_type": "network", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking ClearPass Policy Manager", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking EdgeConnect SD-WAN Orchestrator", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Networking Instant On APs and supporting backend infrastructure", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking Fabric Composer", "asset_type": "network", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking NetEdit", "asset_type": "network", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking Private 5G", "asset_type": "website", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking SSE", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking VIA", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "*.central.arubanetworks.com", "asset_type": "website", "location": null, "group": "Aruba Central - Old/Original UI" }, { "name": "Aruba AirWave AMP", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 3" }, { "name": "Aruba InstantOn Switches", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 3" }, { "name": "Aruba User Experience Insight Sensors", "asset_type": "hardware", "location": null, "group": "HPE Aruba Networking Target Group 3" } ], "out_of_scope": [ { "name": "*.arubanetworks.com not in scope above - see in scope", "asset_type": "website", "location": null, "group": "HPE Aruba Networking Out of scope" }, { "name": "*.hpe.com", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-b64daeba96f57b22.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-897ec1ffd7410581", "name": "Hypixel Studios Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/hypixel-studios-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$300 - $25,000", "reward_min": "$300", "reward_max": "$25,000", "scope_rank": 3, "access_status": "open", "industry": "Games", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:42Z", "scope_published_at": "2026-07-08T19:01:56.071Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/hypixel-studios-mbb-og/changelog/59063ac2-273f-4c96-a0bf-2619aa6494d3.json" ], "in_scope": [ { "name": "Hypixel Public APIs", "asset_type": "api", "location": null, "group": "In Scope " }, { "name": "Hytale Game Client", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "Hytale Game Server", "asset_type": "other", "location": null, "group": "In Scope " }, { "name": "Hytale Launcher", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://accounts.hytale.com/", "asset_type": "website", "location": "https://accounts.hytale.com/login", "group": "In Scope " }, { "name": "https://store.hytale.com/", "asset_type": "website", "location": "https://store.hytale.com/", "group": "In Scope " }, { "name": "https://hytale.com/", "asset_type": "website", "location": "https://hytale.com/", "group": "In Scope " }, { "name": "3rd Party Integrations (Hytale-side issues only)", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://hytale.dev/", "asset_type": "website", "location": "https://hytale.dev/", "group": "In Scope " }, { "name": "http://arcanitegames.ca/", "asset_type": "website", "location": "http://arcanitegames.ca/", "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-897ec1ffd7410581.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-9a96ad03a6b5abff", "name": "Ibotta", "program_url": "https://bugcrowd.com/engagements/ibotta", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $1,000", "reward_min": "$250", "reward_max": "$1,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:43Z", "scope_published_at": "2026-04-10T21:01:59.887Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ibotta/changelog/112af3b9-e1ec-486e-855d-e5977ab90908.json" ], "in_scope": [ { "name": "Chrome Extension", "asset_type": "other", "location": "https://chrome.google.com/webstore/detail/ibotta-browser-extension/mfaedmjlefifhnhpgipjjiiekchaimpk?hl=en-US", "group": "In Scope Targets " }, { "name": "http://market.android.com/details?id=com.ibotta.android", "asset_type": "android", "location": "http://market.android.com/details?id=com.ibotta.android", "group": "In Scope Targets " }, { "name": "http://itunes.apple.com/us/app/ibotta/id559887125", "asset_type": "ios", "location": "http://itunes.apple.com/us/app/ibotta/id559887125", "group": "In Scope Targets " }, { "name": "https://content-server.ibotta.com/graphql", "asset_type": "api", "location": "https://content-server.ibotta.com/graphql", "group": "In Scope Targets " }, { "name": "https://api.ibotta.com", "asset_type": "api", "location": "https://api.ibotta.com", "group": "In Scope Targets " }, { "name": "https://api.ibops.net", "asset_type": "api", "location": "https://api.ibops.net", "group": "In Scope Targets " }, { "name": "https://api.int.ibops.net", "asset_type": "api", "location": "https://api.int.ibops.net", "group": "In Scope Targets " }, { "name": "https://api.int.ibops.net/customer-loyalty-service", "asset_type": "api", "location": "https://api.int.ibops.net/customer-loyalty-service", "group": "In Scope Targets " }, { "name": "https://api.ibops.net/ad-management", "asset_type": "api", "location": "https://api.ibops.net/ad-management", "group": "In Scope Targets " }, { "name": "Ibotta App Data & Memory", "asset_type": "other", "location": null, "group": "In Scope Targets " }, { "name": "Web v2", "asset_type": "website", "location": "https://app.ibotta.com/sign-in
", "group": "In Scope Targets " }, { "name": "http://ibotta.com", "asset_type": "website", "location": "http://ibotta.com", "group": "In Scope Targets " }, { "name": "https://backend.ibotta.com/", "asset_type": "website", "location": "https://backend.ibotta.com/", "group": "In Scope Targets " } ], "out_of_scope": [ { "name": "https://backend.ibotta.com/duplicate_receipt_moderation", "asset_type": "api", "location": null, "group": "Out of Scope Targets" }, { "name": "https://ir.ibotta.com", "asset_type": "website", "location": "https://ir.ibotta.com", "group": "Out of Scope Targets" }, { "name": "https://trust.ibotta.com", "asset_type": "website", "location": "https://trust.ibotta.com", "group": "Out of Scope Targets" }, { "name": "legal.ibotta.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*dev.ibotta.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://investors.ibotta.com/", "asset_type": "website", "location": "https://investors.ibotta.com/", "group": "Out of Scope Targets" }, { "name": "http://sampling.ibotta.com/", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-9a96ad03a6b5abff.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-579471ac983706c3", "name": "iFood: Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/ifood-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $3,750", "reward_min": "$150", "reward_max": "$3,750", "scope_rank": 4, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:44Z", "scope_published_at": "2026-03-06T11:41:56.668Z", "scope_group_count": 5, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ifood-og/changelog/dfcab525-3b8b-44d9-a36d-461e837ae49a.json" ], "in_scope": [ { "name": "iFood Customer Android Application", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=br.com.brainweb.ifood&hl=pt_BR", "group": "iFood - Core Assets" }, { "name": "iFood Customer iOS Application", "asset_type": "ios", "location": "https://apps.apple.com/br/app/ifood-pedir-comida-e-mercado/id483017239", "group": "iFood - Core Assets" }, { "name": "https://www.ifood.com.br", "asset_type": "website", "location": "https://www.ifood.com.br", "group": "iFood - Core Assets" }, { "name": "https://marketplace.ifood.com.br", "asset_type": "website", "location": "https://marketplace.ifood.com.br", "group": "iFood - Core Assets" }, { "name": "Gestor de pedidos - Web ONLY", "asset_type": "website", "location": "https://gestordepedidos.ifood.com.br", "group": "iFood - Core Assets" }, { "name": "https://wsloja.ifood.com.br", "asset_type": "website", "location": "https://wsloja.ifood.com.br", "group": "iFood - Core Assets" }, { "name": "*.movilepay.com", "asset_type": "website", "location": "https://*.movilepay.com", "group": "iFood - Secondary Assets" }, { "name": "*.movilepay.com.br", "asset_type": "website", "location": "https://*.movilepay.com.br", "group": "iFood - Secondary Assets" }, { "name": "https://shop.ifood.com.br", "asset_type": "website", "location": "https://shop.ifood.com.br", "group": "iFood - Secondary Assets" }, { "name": "https://static-images.ifood.com.br", "asset_type": "website", "location": "https://static-images.ifood.com.br", "group": "iFood - Secondary Assets" }, { "name": "https://developer.ifood.com.br", "asset_type": "website", "location": "https://developer.ifood.com.br", "group": "iFood - Secondary Assets" }, { "name": "https://api.fstr.rocks", "asset_type": "api", "location": "https://api.fstr.rocks", "group": "iFood - Secondary Assets" }, { "name": "https://rc.fstr.rocks", "asset_type": "api", "location": "https://rc.fstr.rocks", "group": "iFood - Secondary Assets" }, { "name": "*.zoop.com.br", "asset_type": "website", "location": "https://www.zoop.com.br", "group": "iFood Pago - Core Assets" }, { "name": "*.zoop.ws", "asset_type": "website", "location": "https://www.zoop.ws", "group": "iFood Pago - Core Assets" }, { "name": "Minha Conta Zoop (*.minhaconta.zoop.com.br)", "asset_type": "website", "location": "https://www.minhaconta.zoop.com.br", "group": "iFood Pago - Core Assets" }, { "name": "*.dash.zoop.com.br", "asset_type": "website", "location": "https://dash.zoop.com.br/", "group": "iFood Pago - Core Assets" }, { "name": "Internet Banking (contadigital.ifoodpago.com.br/)", "asset_type": "website", "location": "https://contadigital.ifoodpago.com.br/", "group": "iFood Pago - Core Assets" }, { "name": "Conta Digital (https://play.google.com/store/apps/details?id=br.com.movilepay.banking.application&hl=pt_BR)", "asset_type": "website", "location": "https://play.google.com/store/apps/details?id=br.com.movilepay.banking.application&hl=pt_BR", "group": "iFood Pago - Core Assets" }, { "name": "Portal iFood Pago (portal.iFoodpago.com.br)", "asset_type": "website", "location": "https://portal.iFoodpago.com.br", "group": "iFood Pago - Secondary Assets" } ], "out_of_scope": [ { "name": "blog-empresas.ifood.com.br", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "blog-parceiros.ifood.com.br", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.ecomanda.com.br", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.ecomanda.app", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.allin.movilepay.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.starsoft.movilepay.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Gestor de Pedidos - Desktop Client", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "*.openfinance.ifood.com.br", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "*.openfinance.ifoodpago.com.br", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-579471ac983706c3.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-5d4636103fc2ec73", "name": "Immutable Bug Bounty", "program_url": "https://bugcrowd.com/engagements/immutable", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$25 - $10,000", "reward_min": "$25", "reward_max": "$10,000", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:45Z", "scope_published_at": "2026-06-29T02:46:31.095Z", "scope_group_count": 5, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/immutable/changelog/7b06d64c-562e-4826-accb-05c34d6c4d76.json" ], "in_scope": [ { "name": "passport.immutable.com - Passport web3 wallet", "asset_type": "website", "location": "https://passport.immutable.com/", "group": "Passport" }, { "name": "auth.immutable.com - Passport authentication backend", "asset_type": "api", "location": "https://auth.immutable.com", "group": "Passport" }, { "name": "Passport SDK", "asset_type": "other", "location": "https://github.com/immutable/ts-immutable-sdk/tree/main/packages/passport/", "group": "Passport" }, { "name": "hub.immutable.com - Developer Hub", "asset_type": "website", "location": "https://hub.immutable.com/", "group": "Developer Hub" }, { "name": "play.immutable.com Immutable Play", "asset_type": "website", "location": "https://play.immutable.com", "group": "Immutable Play" }, { "name": "https://api.immutable.com", "asset_type": "api", "location": "https://api.immutable.com", "group": "Immutable" }, { "name": "https://api.x.immutable.com/", "asset_type": "api", "location": "https://api.x.immutable.com/", "group": "Immutable" } ], "out_of_scope": [ { "name": "*.godsunchained.com", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "*.gogbackend.com", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "gogbackend.com", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "godsunchained.com", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "Anything that does not belong to Immutable", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "Any data exposure bug that are classified as Public Data such as Ethereum Wallet Address, NFT Purchase activity, or other public blockchain activity.", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "*.dev.x.immutable.com, *.sandbox.x.immutable.com, *.dev.x.immutable.com, *.sandbox.imtbl.com, *.dev.imtbl.com, *.ropsten.x.immutable.com, ropsten.imx.community (see brief for exceptions)", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "*.guildofguardians.com", "asset_type": "other", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-5d4636103fc2ec73.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-6a006f4f968cdcdc", "name": "Imperva - Thales Bug Bounty", "program_url": "https://bugcrowd.com/engagements/imperva-mbb", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,500", "reward_min": "$150", "reward_max": "$2,500", "scope_rank": 2, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:46Z", "scope_published_at": "2025-03-04T18:29:53.735Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/imperva-mbb/changelog/82c0b7ed-46ed-4de8-8b89-98c6db7d6fce.json" ], "in_scope": [ { "name": "https://*.imperva.com", "asset_type": "website", "location": "https://*.imperva.com", "group": "In Scope Targets" }, { "name": "https://*.cloudvector.com/", "asset_type": "website", "location": "https://www.cloudvector.com/", "group": "In Scope Targets" }, { "name": "https://*.incapsula.com", "asset_type": "api", "location": "https://*.incapsula.com", "group": "In Scope Targets" }, { "name": "https://supportportal.thalesgroup.com", "asset_type": "website", "location": "https://supportportal.thalesgroup.com", "group": "In Scope Targets" }, { "name": "PTaaS Reference", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "http://docs.imperva.com/", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "http://docs-be.imperva.com/", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-6a006f4f968cdcdc.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-c4b7b45ec25b6751", "name": "Indeed", "program_url": "https://bugcrowd.com/engagements/indeed", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $10,000", "reward_min": "$50", "reward_max": "$10,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:47Z", "scope_published_at": "2025-07-25T16:37:11.003Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/indeed/changelog/11945c4b-3351-46c4-8268-782f8c2bf97b.json" ], "in_scope": [ { "name": "*.indeed.com", "asset_type": "website", "location": "https://indeed.com", "group": "Primary Targets" }, { "name": "https://*.indeedflex.com", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "https://apis.indeed.com/graphql", "asset_type": "api", "location": null, "group": "Primary Targets" }, { "name": "Indeed Job Search Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.indeed.android.jobsearch", "group": "Primary Targets" }, { "name": "Indeed Job Search iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/indeed-job-search/id309735670", "group": "Primary Targets" }, { "name": "Android Indeed Flex App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.syftapp.android", "group": "Primary Targets" }, { "name": "iOS Indeed Flex App", "asset_type": "ios", "location": "https://apps.apple.com/gb/app/indeed-flex-job-search/id1013812731", "group": "Primary Targets" }, { "name": "Career Scout", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "https://*.indeed.tech", "asset_type": "website", "location": null, "group": "Secondary Targets" }, { "name": "https://*.indeed.net", "asset_type": "website", "location": null, "group": "Secondary Targets" }, { "name": "https://resume.com", "asset_type": "website", "location": "https://resume.com", "group": "Secondary Targets" }, { "name": "https://wowjobs.ca", "asset_type": "website", "location": "https://wowjobs.ca", "group": "Secondary Targets" }, { "name": "履歴書作成 (Universal Resume) iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/%E5%B1%A5%E6%AD%B4%E6%9B%B8%E4%BD%9C%E6%88%90-%E3%82%A4%E3%83%B3%E3%83%87%E3%82%A3%E3%83%BC%E3%83%89/id1484451230", "group": "Secondary Targets" }, { "name": "履歴書作成 (Universal Resume) Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.indeed.resume", "group": "Secondary Targets" }, { "name": "Indeed Connect for Employers", "asset_type": "ios", "location": "https://apps.apple.com/us/app/indeed-connect-for-employers/id6443822731", "group": "Secondary Targets" }, { "name": "Indeed Recruiter Extension (Chrome)", "asset_type": "website", "location": "https://chromewebstore.google.com/detail/indeed-recruiter-extensio/kiodpphbmnmcmnfgpnmkkhmkllnlflef", "group": "Secondary Targets" }, { "name": "Any host/web property/mobile app verified to be owned by Indeed", "asset_type": "other", "location": null, "group": "Other Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-c4b7b45ec25b6751.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-86f5dd9cd88e551f", "name": "Infinite Athlete", "program_url": "https://bugcrowd.com/engagements/tempusex-public-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:48Z", "scope_published_at": "2025-12-23T20:06:15.104Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/tempusex-public-mbb-og/changelog/0448ae65-c2f6-4519-abac-aa2dfa60d621.json" ], "in_scope": [ { "name": "https://tempus-ex.com", "asset_type": "website", "location": "https://tempus-ex.com", "group": "In Scope Targets" }, { "name": "https://docs.tempus-ex.com", "asset_type": "website", "location": "https://docs.tempus-ex.com", "group": "In Scope Targets" }, { "name": "https://github.com/tempus-ex", "asset_type": "other", "location": "https://github.com/tempus-ex", "group": "In Scope Targets" }, { "name": "https://infiniteathlete.ai", "asset_type": "website", "location": "https://infiniteathlete.ai", "group": "In Scope Targets" }, { "name": "https://platform.infiniteathlete.ai", "asset_type": "website", "location": "https://platform.infiniteathlete.ai", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-86f5dd9cd88e551f.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-1e13e206cd2b16f2", "name": "Inprowiser Bug Bounty", "program_url": "https://bugcrowd.com/engagements/inprowiser", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:49Z", "scope_published_at": "2026-06-03T22:09:27.578Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/inprowiser/changelog/6ef6cbc8-42dc-4bf5-9436-94e6234814e4.json" ], "in_scope": [ { "name": "Capacity Tracker - Cloud - https://marketplace.atlassian.com/apps/1218151/capacity-tracker?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218151/capacity-tracker?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-1e13e206cd2b16f2.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-254f67c60abdbd4b", "name": "Intercom", "program_url": "https://bugcrowd.com/engagements/intercom", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$300 - $6,000", "reward_min": "$300", "reward_max": "$6,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "P1 24/7", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:50Z", "scope_published_at": "2026-03-12T09:57:02.002Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/intercom/changelog/07ed7406-2567-4c09-b700-f5783aea7d36.json" ], "in_scope": [ { "name": "iOS SDK", "asset_type": "ios", "location": "https://developers.intercom.com/installing-intercom/docs/about-the-sdk-ios", "group": "Default" }, { "name": "https://api.intercom.io", "asset_type": "api", "location": "https://api.intercom.com", "group": "Default" }, { "name": "https://app.intercom.com", "asset_type": "website", "location": "https://app.intercom.com", "group": "Default" }, { "name": "*.intercomassets.com / *.intercomcdn.com", "asset_type": "website", "location": null, "group": "Default" }, { "name": "https://app.intercom.io", "asset_type": "website", "location": "https://app.intercom.io/", "group": "Default" }, { "name": "Android SDK", "asset_type": "android", "location": "https://developers.intercom.com/installing-intercom/docs/about-the-sdk-android", "group": "Default" }, { "name": "https://www.intercom.com", "asset_type": "website", "location": "https://www.intercom.com/", "group": "Default" }, { "name": "mcp.intercom.com", "asset_type": "website", "location": "http://mcp.intercom.com", "group": "Default" }, { "name": "https://api-iam.intercom.io", "asset_type": "api", "location": "https://api-iam.intercom.io", "group": "Default" }, { "name": "https://*.mobile-messenger.intercom.com", "asset_type": "api", "location": "https://*.mobile-messenger.intercom.com", "group": "Default" }, { "name": "fin.ai", "asset_type": "website", "location": "https://fin.ai/", "group": "Default" }, { "name": "https://app.fin.ai/", "asset_type": "website", "location": "https://app.fin.ai/", "group": "Default" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-254f67c60abdbd4b.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-65fd0d2e30008d52", "name": "Internet Brands Public", "program_url": "https://bugcrowd.com/engagements/internetbrands-public", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $2,000", "reward_min": "Points", "reward_max": "$2,000", "scope_rank": 3, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:51Z", "scope_published_at": "2026-09-02T19:22:14.315Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/internetbrands-public/changelog/5d8af978-978d-4a0a-87d5-2ae0ab0dc2af.json" ], "in_scope": [ { "name": "https://www.carsdirect.com", "asset_type": "website", "location": "https://www.carsdirect.com", "group": "In Scope" }, { "name": "https://pets.webmd.com", "asset_type": "website", "location": "https://pets.webmd.com", "group": "In Scope" }, { "name": "https://member.webmd.com", "asset_type": "website", "location": "https://member.webmd.com", "group": "In Scope" }, { "name": "https://www.mdedge.com", "asset_type": "website", "location": "https://www.mdedge.com", "group": "In Scope" }, { "name": "https://accounts.webmd.com", "asset_type": "website", "location": "https://accounts.webmd.com", "group": "In Scope" }, { "name": "https://powerpak.com", "asset_type": "website", "location": "https://powerpak.com", "group": "In Scope" }, { "name": "https://profreg.medscape.com", "asset_type": "website", "location": "https://profreg.medscape.com", "group": "In Scope" }, { "name": "https://www.globalacademycme.com", "asset_type": "website", "location": "https://www.globalacademycme.com", "group": "In Scope" }, { "name": "https://www.webmd.com", "asset_type": "website", "location": "https://www.webmd.com", "group": "In Scope" }, { "name": "https://login.medscape.com", "asset_type": "website", "location": "https://login.medscape.com", "group": "In Scope" }, { "name": "https://portalv2.lh360.com", "asset_type": "website", "location": "https://portalv2.lh360.com", "group": "In Scope" }, { "name": "https://www.demandforced3.com/", "asset_type": "website", "location": "https://www.demandforced3.com/", "group": "In Scope" }, { "name": "https://www.internetbrands.com", "asset_type": "other", "location": "https://www.internetbrands.com", "group": "In Scope" }, { "name": "https://ibconnect.internetbrands.com", "asset_type": "other", "location": "https://ibconnect.internetbrands.com", "group": "In Scope" }, { "name": "https://exchange.pulsepoint.com/AdminPortal/AdminDashBoard.aspx", "asset_type": "website", "location": "https://exchange.pulsepoint.com/AdminPortal/AdminDashBoard.aspx", "group": "In Scope" }, { "name": "https://life.pulsepoint.com/Buyer/#/campaign", "asset_type": "website", "location": "https://life.pulsepoint.com/Buyer/#/campaign", "group": "In Scope" }, { "name": "https://signal.pulsepoint.com/hcp365/#/dashboard/advertiser/6603/overview", "asset_type": "website", "location": "https://signal.pulsepoint.com/hcp365/#/dashboard/advertiser/6603/overview", "group": "In Scope" }, { "name": "https://life.pulsepoint.com/MediaPlanner/#/dashboard/targetview", "asset_type": "website", "location": "https://life.pulsepoint.com/MediaPlanner/#/dashboard/targetview", "group": "In Scope" }, { "name": "https://signal.pulsepoint.com/hcpexplorer/#/dashboard/eventsExplorer", "asset_type": "website", "location": "https://signal.pulsepoint.com/hcpexplorer/#/dashboard/eventsExplorer", "group": "In Scope" }, { "name": "https://life.pulsepoint.com/EngagementAudience/#/dashboard", "asset_type": "website", "location": "https://life.pulsepoint.com/EngagementAudience/#/dashboard", "group": "In Scope" }, { "name": "https://exchange.pulsepoint.com", "asset_type": "website", "location": "https://exchange.pulsepoint.com", "group": "In Scope" }, { "name": "https://lifeapi.pulsepoint.com", "asset_type": "api", "location": "https://lifeapi.pulsepoint.com", "group": "In Scope" }, { "name": "https://openapi.pulsepoint.com", "asset_type": "api", "location": "https://openapi.pulsepoint.com", "group": "In Scope" }, { "name": "https://openapitest.pulsepoint.com", "asset_type": "api", "location": "https://openapitest.pulsepoint.com", "group": "In Scope" } ], "out_of_scope": [ { "name": "See PDF", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://www.powerpak.com/selectsurvey/", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://www.medjobnetwork.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://checkout.webmd.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-65fd0d2e30008d52.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-d89cc334bcfd73d7", "name": "iRobot", "program_url": "https://bugcrowd.com/engagements/irobot", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,500", "reward_min": "$100", "reward_max": "$4,500", "scope_rank": 4, "access_status": "open", "industry": "Electronics", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:52Z", "scope_published_at": "2025-11-12T14:34:49.105Z", "scope_group_count": 5, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/irobot/changelog/95b563b0-74ef-4336-b844-625172a41fed.json" ], "in_scope": [ { "name": "iRobot Roomba™ 105", "asset_type": "hardware", "location": null, "group": "iRobot Devices" }, { "name": "iRobot Roomba™ 205", "asset_type": "hardware", "location": null, "group": "iRobot Devices" }, { "name": "iRobot Roomba™ 405", "asset_type": "hardware", "location": null, "group": "iRobot Devices" }, { "name": "iRobot Roomba™ 505", "asset_type": "hardware", "location": null, "group": "iRobot Devices" }, { "name": "iRobot Roomba™ 705", "asset_type": "hardware", "location": null, "group": "iRobot Devices" }, { "name": "https://apps.apple.com/us/app/roomba-home/id6504274697", "asset_type": "ios", "location": "https://apps.apple.com/us/app/roomba-home/id6504274697", "group": "iRobot Mobile Apps" }, { "name": "https://play.google.com/store/apps/details?id=com.irobot.home.prime", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.irobot.home.prime", "group": "iRobot Mobile Apps" }, { "name": "https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/entitlements/{entitlement_id}", "asset_type": "api", "location": "https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/entitlements/{entitlement_id}", "group": "iRobot Cloud" }, { "name": "iRobot API Endpoint", "asset_type": "api", "location": null, "group": "iRobot Cloud" }, { "name": "https://zuora-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/notifications/raas", "asset_type": "api", "location": "https://zuora-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/notifications/raas", "group": "iRobot Cloud" }, { "name": "https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/robots/{robot_id}/entitlements", "asset_type": "api", "location": "https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/robots/{robot_id}/entitlements", "group": "iRobot Cloud" }, { "name": "https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/users/{user_id}/entitlements", "asset_type": "api", "location": "https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/users/{user_id}/entitlements", "group": "iRobot Cloud" }, { "name": "https://www.irobot.com", "asset_type": "website", "location": "https://www.irobot.com", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.ca/en_CA", "asset_type": "website", "location": "https://www.irobot.ca/en_CA", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.ca/fr_CA/home", "asset_type": "website", "location": "https://www.irobot.ca/fr_CA/home", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.at/", "asset_type": "website", "location": "https://www.irobot.at/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.be/", "asset_type": "website", "location": "https://www.irobot.be/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.de/", "asset_type": "website", "location": "https://www.irobot.de/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.es/", "asset_type": "website", "location": "https://www.irobot.es/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.fr/", "asset_type": "website", "location": "https://www.irobot.fr/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.co.uk/", "asset_type": "website", "location": "https://www.irobot.co.uk/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.ie/", "asset_type": "website", "location": "https://www.irobot.ie/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.nl/", "asset_type": "website", "location": "https://www.irobot.nl/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.pt/", "asset_type": "website", "location": "https://www.irobot.pt/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.homesupport.irobot.com", "asset_type": "website", "location": "https://www.homesupport.irobot.com", "group": "All other official iRobot Web Applications" }, { "name": "https://media.irobot.com", "asset_type": "website", "location": "https://media.irobot.com", "group": "All other official iRobot Web Applications" }, { "name": "https://investor.irobot.com", "asset_type": "website", "location": "https://investor.irobot.com", "group": "All other official iRobot Web Applications" }, { "name": "https://answers.irobot.com", "asset_type": "website", "location": "https://answers.irobot.com", "group": "All other official iRobot Web Applications" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-d89cc334bcfd73d7.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-6c4a356c5949846b", "name": "Izymes", "program_url": "https://bugcrowd.com/engagements/izymes", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $2,500", "reward_min": "$100", "reward_max": "$2,500", "scope_rank": 2, "access_status": "open", "industry": "Corporate Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:53Z", "scope_published_at": "2026-03-27T10:35:08.089Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/izymes/changelog/80bbdd60-34f2-4420-9a84-37b64441fdd1.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1211303/workzone-pullrequest-workflow?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211303/workzone-pullrequest-workflow?hosting=datacenter", "group": "Izymes apps" }, { "name": "https://marketplace.atlassian.com/apps/1211303/workzone-pullrequest-workflow?hosting=server", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211303/workzone-pullrequest-workflow?hosting=server", "group": "Izymes apps" }, { "name": "https://marketplace.atlassian.com/apps/1215843/global-pull-request-organizr?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215843/global-pull-request-organizr?hosting=datacenter", "group": "Izymes apps" }, { "name": "https://marketplace.atlassian.com/apps/1215843/global-pull-request-organizr?hosting=server", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215843/global-pull-request-organizr?hosting=server", "group": "Izymes apps" }, { "name": "https://marketplace.atlassian.com/apps/1224025/ai-insights-for-jira-service-management?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1224025/ai-insights-for-jira-service-management?hosting=cloud", "group": "Izymes apps" }, { "name": "https://marketplace.atlassian.com/apps/1211303/workzone-pullrequest-workflow?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211303/workzone-pullrequest-workflow?hosting=cloud", "group": "Izymes apps" }, { "name": "https://marketplace.atlassian.com/apps/1212840/reminders-for-bitbucket?hosting=server", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212840/reminders-for-bitbucket?hosting=server&tab=overview", "group": "Izymes apps" }, { "name": "https://marketplace.atlassian.com/apps/1212840/reminders-for-bitbucket?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212840/reminders-for-bitbucket?hosting=datacenter", "group": "Izymes apps" }, { "name": "https://marketplace.atlassian.com/apps/1236742/advanced-content-status-labels-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1236742/advanced-content-status-labels-for-confluence?hosting=cloud", "group": "Izymes apps" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-6c4a356c5949846b.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-43532e8876c4d446", "name": "J-Tricks - Marketplace Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/j-tricks", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:54Z", "scope_published_at": "2026-06-11T00:40:02.442Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/j-tricks/changelog/e01010d1-fbb7-47d5-a7f5-acea55978320.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/31399/jql-tricks-plugin?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/31399/jql-tricks-plugin?hosting=cloud&tab=overview", "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-43532e8876c4d446.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-75f0dda829fb2df7", "name": "Jaanga Marketplace Bug Bounty", "program_url": "https://bugcrowd.com/engagements/JaangaInc-mbb-market", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Cloud", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:55Z", "scope_published_at": "2026-06-18T05:17:46.896Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/JaangaInc-mbb-market/changelog/53e11e27-ca4a-4ffc-9b7b-2cce27dd14e5.json" ], "in_scope": [ { "name": "Custom Fields Ambassador - https://marketplace.atlassian.com/apps/1236750?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236750?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "Groupe Ambassadors - https://marketplace.atlassian.com/apps/1218225?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218225?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "Bulk Linker (Jira App) - https://marketplace.atlassian.com/apps/1219169/bulk-linker?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219169/bulk-linker?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Asset Analytics for Jira - https://marketplace.atlassian.com/apps/2974674253/assets-analytics-custom-dashboards-reporting-for-jira", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/2974674253/assets-analytics-custom-dashboards-reporting-for-jira", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-75f0dda829fb2df7.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-b6e2e8ae47a1943e", "name": "Jora", "program_url": "https://bugcrowd.com/engagements/jora", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $2,500", "reward_min": "$50", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Media", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:56Z", "scope_published_at": "2026-09-29T05:50:01.933Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/jora/changelog/b592ed3f-dd99-4a12-97c8-247fe274c671.json" ], "in_scope": [ { "name": "*.jora.com", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.jora.xyz", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "Jora Jobs iOS App", "asset_type": "ios", "location": "https://apps.apple.com/au/app/jora-jobs-job-search-work/id917565665", "group": "In scope targets" }, { "name": "Jora Jobs Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.jora.android&hl=en_US\t", "group": "In scope targets" } ], "out_of_scope": [ { "name": "*.joralocal.com.au", "asset_type": "website", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-b6e2e8ae47a1943e.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-79371edbf7c4bd6d", "name": "Just Eat Takeaway.com", "program_url": "https://bugcrowd.com/engagements/justeattakeaway", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,500", "reward_min": "$100", "reward_max": "$4,500", "scope_rank": 4, "access_status": "open", "industry": "Hospitality", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:57Z", "scope_published_at": "2026-08-24T12:49:47.136Z", "scope_group_count": 5, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/justeattakeaway/changelog/c404df2a-d924-4789-99c8-3db04a5f4d86.json" ], "in_scope": [ { "name": "*.thuisbezorgd.nl", "asset_type": "website", "location": "https://www.thuisbezorgd.nl/", "group": "Business assets" }, { "name": "*.takeaway.com", "asset_type": "website", "location": "https://takeaway.com", "group": "Business assets" }, { "name": "*.skipthedishes.com", "asset_type": "website", "location": "https://skipthedishes.com", "group": "Business assets" }, { "name": "*.lieferando.de", "asset_type": "website", "location": "https://lieferando.de", "group": "Business assets" }, { "name": "*.pyszne.pl", "asset_type": "website", "location": "https://pyszne.pl", "group": "Business assets" }, { "name": "*.bistro.sk", "asset_type": "website", "location": "https://bistro.sk", "group": "Business assets" }, { "name": "*.just-eat.es", "asset_type": "website", "location": "https://just-eat.es", "group": "Business assets" }, { "name": "*.just-eat.co.uk", "asset_type": "website", "location": "https://www.just-eat.co.uk", "group": "Business assets" }, { "name": "*.just-eat.ch", "asset_type": "website", "location": "https://just-eat.ch", "group": "Business assets" }, { "name": "*.10bis.co.il", "asset_type": "website", "location": "https://10bis.co.il", "group": "Business assets" }, { "name": "*.scoober.com", "asset_type": "website", "location": "https://scoober.com", "group": "Business assets" }, { "name": "*.jet-external.com", "asset_type": "website", "location": "https://jet-external.com", "group": "Business assets" }, { "name": "*.just-eat.com", "asset_type": "website", "location": "https://just-eat.com", "group": "Business assets" }, { "name": "*.skippayments.com", "asset_type": "website", "location": "https://skippayments.com", "group": "Business assets" }, { "name": "*.just-eat.io", "asset_type": "api", "location": "https://just-eat.io/", "group": "Business assets" }, { "name": "*.just-eat.co.il", "asset_type": "website", "location": "https://just-eat.co.il", "group": "Business assets" }, { "name": "Takeaway.com", "asset_type": "android", "location": "https://play.google.com/store/apps/developer?id=Takeaway.com", "group": "Mobile applications" }, { "name": "Just-Eat Holding Limited", "asset_type": "android", "location": "https://play.google.com/store/apps/developer?id=Just-Eat+Holding+Limited", "group": "Mobile applications" }, { "name": "10bis.co.il ltd.", "asset_type": "android", "location": "https://play.google.com/store/apps/developer?id=10bis.co.il+ltd.", "group": "Mobile applications" }, { "name": "Skip Canada", "asset_type": "android", "location": "https://play.google.com/store/apps/developer?id=Skip+Canada", "group": "Mobile applications" }, { "name": "Just-Eat.com", "asset_type": "ios", "location": "https://apps.apple.com/nz/developer/just-eat-com/id383091095", "group": "Mobile applications" }, { "name": "Takeaway.com Central Core B.V.", "asset_type": "ios", "location": "https://apps.apple.com/it/developer/takeaway-com-central-core-b-v/id329472762", "group": "Mobile applications" }, { "name": "SkipTheDishes", "asset_type": "ios", "location": "https://apps.apple.com/us/developer/skipthedishes/id969229980", "group": "Mobile applications" }, { "name": "10bis.co.il, Ltd", "asset_type": "ios", "location": "https://apps.apple.com/us/developer/10bis-co-il-ltd/id434368194", "group": "Mobile applications" }, { "name": "*.justeattakeaway.com", "asset_type": "website", "location": "https://www.justeattakeaway.com", "group": "Other assets" }, { "name": "*.justeat-int.com", "asset_type": "api", "location": "https://api.justeat-int.com", "group": "Other assets" }, { "name": "*.yourdelivery.de", "asset_type": "website", "location": "https://yourdelivery.de", "group": "Other assets" }, { "name": "*.just-data.io", "asset_type": "api", "location": "https://just-data.io", "group": "Other assets" }, { "name": "github.com/justeattakeaway", "asset_type": "other", "location": "https://github.com/justeattakeaway", "group": "Source code and supply chain" } ], "out_of_scope": [ { "name": "*.business.just-eat.co.uk", "asset_type": "website", "location": null, "group": "Ouf of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-79371edbf7c4bd6d.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-7effc3b4fbd675a8", "name": "K15t", "program_url": "https://bugcrowd.com/engagements/k15t", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:58Z", "scope_published_at": "2024-01-12T13:23:43.957Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/k15t/changelog/29204ba3-1a5d-40a8-ad4d-dc52c83d9d04.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1215199/backbone-issue-sync-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215199/backbone-issue-sync-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1217608/scroll-documents-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217608/scroll-documents-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/7019/scroll-pdf-exporter-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/7019/scroll-pdf-exporter-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/24982/scroll-word-exporter-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/24982/scroll-word-exporter-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1217037/scroll-exporter-extensions?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217037/scroll-exporter-extensions?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/253/scroll-imagemap-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/253/scroll-imagemap-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1211636/scroll-viewport-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211636/scroll-viewport-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1226295/variants-for-scroll-documents?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1226295/variants-for-scroll-documents?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/7019/scroll-pdf-exporter-for-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/7019/scroll-pdf-exporter-for-confluence?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/24982/scroll-word-exporter-for-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/24982/scroll-word-exporter-for-confluence?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/420604/scroll-html-exporter-for-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/420604/scroll-html-exporter-for-confluence?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1210818/scroll-versions-for-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1210818/scroll-versions-for-confluence?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1211616/scroll-translations-for-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211616/scroll-translations-for-confluence?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/253/scroll-imagemap-for-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/253/scroll-imagemap-for-confluence?hosting=datacenter&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1215199/backbone-issue-sync-for-jira?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215199/backbone-issue-sync-for-jira?hosting=datacenter&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1217608/scroll-documents-for-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217608/scroll-documents-for-confluence?hosting=datacenter&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1226295/variants-for-scroll-documents?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1226295/variants-for-scroll-documents?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1211636/scroll-viewport-for-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211636/scroll-viewport-for-confluence?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227238/translations-for-scroll-documents?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1227238/translations-for-scroll-documents?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227238/translations-for-scroll-documents?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1227238/translations-for-scroll-documents?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/420604/scroll-html-exporter-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/420604/scroll-html-exporter-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1224799/scroll-content-quality-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1224799/scroll-content-quality-for-confluence", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "Any other subdomains of k15t.com, including but not limited to www.k15t.com, www.k15t.de and help.k15t.com", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "https://marketplace.atlassian.com/*", "asset_type": "website", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-7effc3b4fbd675a8.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-b078255601c47c9f", "name": "Kaleido", "program_url": "https://bugcrowd.com/engagements/kaleido", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $6,000", "reward_min": "$100", "reward_max": "$6,000", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:59Z", "scope_published_at": "2026-09-09T01:30:05.802Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/kaleido/changelog/3fc31473-2971-429d-8546-5c2770d21b09.json" ], "in_scope": [ { "name": "*.remove.bg", "asset_type": "website", "location": "https://www.remove.bg", "group": "In Scope Targets" }, { "name": "*.designify.com", "asset_type": "website", "location": "https://www.designify.com", "group": "In Scope Targets" }, { "name": "*.kaleido.ai", "asset_type": "website", "location": "https://www.kaleido.ai", "group": "In Scope Targets" }, { "name": "*.unscreen.com", "asset_type": "website", "location": "https://www.unscreen.com", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-b078255601c47c9f.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-0a2cee613b3d1476", "name": "Kantega SSO", "program_url": "https://bugcrowd.com/engagements/kantega", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Corporate Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:00Z", "scope_published_at": "2026-06-23T07:46:18.658Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/kantega/changelog/f64034e3-a9dd-4c0a-a613-02b3b6c2039d.json" ], "in_scope": [ { "name": "K-SSO SAML SSO OAuth Kerberos User Management for Bamboo - Data Center - https://marketplace.atlassian.com/apps/1215262/k-sso-saml-sso-oauth-kerberos-user-management-for-bamboo?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215262/k-sso-saml-sso-oauth-kerberos-user-management-for-bamboo?hosting=datacenter&tab=overview", "group": "In Scope Targets" }, { "name": "K-SSO SAML SSO OAuth Kerberos User Management for Bitbucket - Data Center - https://marketplace.atlassian.com/apps/1213019/k-sso-saml-sso-oauth-kerberos-user-management-for-bitbucket?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1213019/k-sso-saml-sso-oauth-kerberos-user-management-for-bitbucket?hosting=datacenter", "group": "In Scope Targets" }, { "name": "K-SSO SAML SSO OAuth Kerberos User Management for Confluence - Data Center - https://marketplace.atlassian.com/apps/1212126/k-sso-saml-sso-oauth-kerberos-user-management-for-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212126/k-sso-saml-sso-oauth-kerberos-user-management-for-confluence?hosting=datacenter&tab=overview", "group": "In Scope Targets" }, { "name": "K-SSO SAML SSO OAuth Kerberos User Management for FeCru - Server - https://marketplace.atlassian.com/apps/1215263/k-sso-saml-sso-oauth-kerberos-user-management-for-fecru?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215263/k-sso-saml-sso-oauth-kerberos-user-management-for-fecru?hosting=server&tab=overview", "group": "In Scope Targets" }, { "name": "K-SSO SAML SSO OAuth Kerberos User Management for Jira - Data Center - https://marketplace.atlassian.com/apps/1211923/k-sso-saml-sso-oauth-kerberos-user-management-for-jira?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211923/k-sso-saml-sso-oauth-kerberos-user-management-for-jira?hosting=datacenter&tab=overview", "group": "In Scope Targets" }, { "name": "Kantega User Management & License Optimizer for Bitbucket - Data Center - https://marketplace.atlassian.com/apps/2121739236/kantega-user-management-license-optimizer-for-bitbucket?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/2121739236/kantega-user-management-license-optimizer-for-bitbucket?hosting=datacenter", "group": "In Scope Targets" }, { "name": "Kantega User Management & License Optimizer for Confluence - Data Center - https://marketplace.atlassian.com/apps/1233591/kantega-user-management-license-optimizer-for-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1233591/kantega-user-management-license-optimizer-for-confluence?hosting=datacenter&tab=overview", "group": "In Scope Targets" }, { "name": "Kantega User Management & License Optimizer for Jira - Data Center - https://marketplace.atlassian.com/apps/1230481/kantega-user-management-license-optimizer-for-jira?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1230481/kantega-user-management-license-optimizer-for-jira?hosting=datacenter", "group": "In Scope Targets" }, { "name": "Kantega User Management & License Optimizer for Confluence - Cloud - https://marketplace.atlassian.com/apps/1233591/kantega-user-management-license-optimizer-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233591/kantega-user-management-license-optimizer-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Kantega User Management & License Optimizer for Jira - Cloud - https://marketplace.atlassian.com/apps/1230481/kantega-user-management-license-optimizer-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230481/kantega-user-management-license-optimizer-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Issue/Work Item Summary & Description Templates for Jira - Cloud - https://marketplace.atlassian.com/apps/1228920/issue-work-item-summary-description-templates-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228920/issue-work-item-summary-description-templates-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-0a2cee613b3d1476.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-771bcebd44ede4d6", "name": "Keeper Security Public Bounty Program", "program_url": "https://bugcrowd.com/engagements/keepersecurity", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$300 - $10,000", "reward_min": "$300", "reward_max": "$10,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:01Z", "scope_published_at": "2026-05-19T01:37:38.093Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/keepersecurity/changelog/0c2e8a25-07ad-4b8d-8846-a8a763faad93.json" ], "in_scope": [ { "name": "Keeper Browser Extension (Chrome, Safari, Firefox, Edge)", "asset_type": "other", "location": "https://www.keepersecurity.com/download.html", "group": "In Scope" }, { "name": "Keeper Desktop App for Mac, PC, Linux", "asset_type": "other", "location": "https://www.keepersecurity.com/download.html", "group": "In Scope" }, { "name": "Keeper Web Vault (US, EU, AU, CA, JP, GovCloud)", "asset_type": "website", "location": "https://keepersecurity.com/vault", "group": "In Scope" }, { "name": "Keeper for iOS", "asset_type": "ios", "location": "https://www.keepersecurity.com/download.html", "group": "In Scope" }, { "name": "Keeper for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.callpod.android_apps.keeper&hl=en_US&gl=US", "group": "In Scope" }, { "name": "Keeper Enterprise", "asset_type": "website", "location": "https://keepersecurity.com/password-manager-free-trial.html", "group": "In Scope" }, { "name": "KeeperPAM Privileged Access Manager", "asset_type": "website", "location": "https://docs.keeper.io/en/keeperpam", "group": "In Scope" }, { "name": "Keeper Connection Manager (KCM)", "asset_type": "other", "location": "https://docs.keeper.io/kcm", "group": "In Scope" }, { "name": "Keeper Secrets Manager SDK", "asset_type": "api", "location": "https://docs.keeper.io/en/keeperpam/secrets-manager/overview", "group": "In Scope" }, { "name": "Keeper Endpoint Privilege Manager", "asset_type": "api", "location": "https://keepersecurity.com/console", "group": "In Scope" }, { "name": "Keeper Admin Console (US, EU, AU, CA, JP, GovCloud)", "asset_type": "website", "location": "https://keepersecurity.com/console", "group": "In Scope" }, { "name": "Keeper Security Website", "asset_type": "website", "location": "https://keepersecurity.com", "group": "In Scope" }, { "name": "KeeperDB", "asset_type": "other", "location": "https://www.keepersecurity.com/download.html?t=db", "group": "In Scope" }, { "name": "Keeper AD / LDAP Bridge", "asset_type": "api", "location": "https://docs.keeper.io/keeper-bridge/", "group": "In Scope" }, { "name": "Keeper Gateway", "asset_type": "api", "location": "https://docs.keeper.io/en/keeperpam/privileged-access-manager/getting-started/gateways", "group": "In Scope" }, { "name": "SSO Connect Cloud and Automator Service", "asset_type": "api", "location": "https://docs.keeper.io/sso-connect-cloud/", "group": "In Scope" }, { "name": "SSO Connect On-Prem", "asset_type": "api", "location": "https://docs.keeper.io/sso-connect-guide/", "group": "In Scope" }, { "name": "Keeper Commander CLI/SDK", "asset_type": "api", "location": "https://docs.keeper.io/en/keeperpam/commander-cli/overview", "group": "In Scope" }, { "name": "KeeperChat for Windows", "asset_type": "other", "location": "https://www.microsoft.com/en-us/p/keeperchat/9pdqtcpn4kxn#activetab=pivot:overviewtab", "group": "In Scope" }, { "name": "KeeperChat for iOS", "asset_type": "ios", "location": "https://apps.apple.com/app/id1216446440", "group": "In Scope" }, { "name": "KeeperChat for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.keepersecurity.chat&hl=en_US&gl=US", "group": "In Scope" }, { "name": "KeeperChat for Mac", "asset_type": "other", "location": "https://apps.apple.com/us/app/keeperchat/id1273303729?mt=12", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-771bcebd44ede4d6.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-5666a64d02635d13", "name": "Kiteworks", "program_url": "https://bugcrowd.com/engagements/kiteworks-public", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $25,000", "reward_min": "$250", "reward_max": "$25,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "P1 24/7", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:02Z", "scope_published_at": "2026-09-11T07:57:59.144Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/kiteworks-public/changelog/13ba2a60-317b-4c20-b9bb-e214266d874f.json" ], "in_scope": [ { "name": "█████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████" } ], "out_of_scope": [ { "name": "█████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-5666a64d02635d13.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-592aa85d2dad3c2d", "name": "Klaviyo Managed Bug Bounty", "program_url": "https://bugcrowd.com/engagements/klaviyo-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $3,500", "reward_min": "$150", "reward_max": "$3,500", "scope_rank": 4, "access_status": "open", "industry": "eCommerce", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:04Z", "scope_published_at": "2026-09-09T19:16:13.875Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/klaviyo-og/changelog/b9a9ae9f-653c-45bd-8624-34935291c360.json" ], "in_scope": [ { "name": "Klaviyo Hosted Pages - myklpages.com", "asset_type": "website", "location": "https://*.myklpages.com/*", "group": "In Scope" }, { "name": "Klaviyo APIs - a.klaviyo.com/api", "asset_type": "api", "location": "https://a.klaviyo.com/api/*", "group": "In Scope" }, { "name": "Klaviyo WebApp - klaviyo.com", "asset_type": "website", "location": "https://klaviyo.com/*", "group": "In Scope" }, { "name": "Klaviyo Services - *.services.klaviyo.com", "asset_type": "website", "location": "https://*.services.klaviyo.com", "group": "In Scope" }, { "name": "Klaviyo MSV - klaviyomsv.com", "asset_type": "website", "location": "https://*.klaviyomsv.com/*", "group": "In Scope" }, { "name": "Klaviyo Dev - klaviyo-dev.com", "asset_type": "website", "location": "https://*.klaviyo-dev.com/*", "group": "In Scope" }, { "name": "Klaviyo MCP - mcp.klaviyo.com", "asset_type": "other", "location": "http://mcp.klaviyo.com/", "group": "In Scope" }, { "name": "Klaviyo App - *.clovesoftware.com", "asset_type": "website", "location": "https://*.clovesoftware.com", "group": "In Scope" }, { "name": "Klaviyo Dev - *.clovesoftware-dev.com", "asset_type": "website", "location": "https://*.clovesoftware-dev.com", "group": "In Scope" }, { "name": "Klaviyo AWS/S3 Assets", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 12.109.179.242/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 12.109.179.243/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 12.109.179.244/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 12.162.226.194/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 12.162.226.195/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 12.162.226.196/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 12.162.226.197/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 12.162.226.198/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 13.236.111.63/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 14.200.250.155/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 14.200.250.156/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 144.121.5.144/29", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 144.121.57.208/29", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 18.133.56.249/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 18.144.159.16/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 18.168.137.251/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 18.168.212.94/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 18.168.232.92/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 23.20.21.255/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 3.105.93.78/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 3.208.141.108/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 3.222.226.200/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 38.140.97.154/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 38.140.97.155/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 38.140.97.156/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 44.197.10.144/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 46.31.171.122/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 46.31.171.123/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrascucture - 50.150.76.0/30", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 50.18.34.165/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 50.228.235.80/29", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 52.8.118.227/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 54.160.106.200/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 64.125.104.194/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 64.125.104.195/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 64.125.104.196/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 64.125.104.197/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 64.125.104.198/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 64.71.19.71/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 82.144.244.58/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 82.144.244.59/32", "asset_type": "other", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-592aa85d2dad3c2d.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-fc2f74cd83c9200e", "name": "Kohl's", "program_url": "https://bugcrowd.com/engagements/kohls", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,500", "reward_min": "$100", "reward_max": "$4,500", "scope_rank": 2, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:05Z", "scope_published_at": "2025-09-26T22:38:27.277Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/kohls/changelog/127d8b50-3067-4aaf-ae19-de737a1017d5.json" ], "in_scope": [ { "name": "Kohl’s entire public digital footprint that is not Out-Of-Scope(See list below)", "asset_type": "other", "location": null, "group": "In Scope Targets" }, { "name": "www.kohls.com", "asset_type": "website", "location": "https://www.kohls.com", "group": "In Scope Targets" }, { "name": "Kohl's Mobile Application for iOS", "asset_type": "ios", "location": "https://www.kohls.com/feature/app.jsp", "group": "In Scope Targets" }, { "name": "Kohl's Mobile Application for Android", "asset_type": "android", "location": "https://www.kohls.com/feature/app.jsp", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "apply.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*kohls.com/kohlscredit/prequal", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*kohlsecommerce.com/kohlscredit/prequal", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "corporate.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "productchampions.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "link-preprod.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "developer.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "lclive.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "author-mykohls.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "mykohls-origin.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "origin-stage65-corporate.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "origin-stage65-mykohls.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "author-stage65-mykohls.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "stage65-corporate.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "stage65-mykohls.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "author-qa65-mykohls.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "mykohls.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "any domain with archaius.json endoint is out of scope", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooter", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*kohls.com/checkout/prequal_inquiry.jsp#/preQualEligible", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooter", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/preQualEligible", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "vp-*.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*qa*.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "wfh*.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "kconnect.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "connection.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "kohlsmerch.kohls.com/", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "b2b.kohls.com/", "asset_type": "website", "location": "http://www.b2b.kohls.com", "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-fc2f74cd83c9200e.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-ee4b8b7deca259e1", "name": "KuCoin Managed Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/kucoin", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$20 - $15,000", "reward_min": "$20", "reward_max": "$15,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:06Z", "scope_published_at": "2025-11-20T13:51:18.385Z", "scope_group_count": 4, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/kucoin/changelog/0c0f0b95-ec12-485c-ba8f-dee184f3f9bd.json" ], "in_scope": [ { "name": "https://kucoin.com", "asset_type": "website", "location": "https://kucoin.com", "group": "In-Scope Business-related assets" }, { "name": "*.kucoin.com", "asset_type": "website", "location": "https://kucoin.com", "group": "In-Scope None-Business-related assets" }, { "name": "Kucoin IOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/kucoin-buy-bitcoin-crypto/id1378956601?mt=8", "group": "In-Scope Mobile App Targets" }, { "name": "Kucoin Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.kubi.kucoin", "group": "In-Scope Mobile App Targets" } ], "out_of_scope": [ { "name": "support.kucoin.plus", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "store.kucoin.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "docs.kucoin.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "intro.kucoin.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "cert.kucoin.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "sandbox.kucoin.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "passport.kucoin.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*-sdb.kucoin.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*-sandbox.kucoin.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-ee4b8b7deca259e1.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-154fcdb83c0de882", "name": "LastPass", "program_url": "https://bugcrowd.com/engagements/lastpass", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $5,000", "reward_min": "Points", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:07Z", "scope_published_at": "2026-03-11T12:13:59.447Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/lastpass/changelog/3bacc2c8-b454-443d-a32f-4d9c474ebca6.json" ], "in_scope": [ { "name": "https://lastpass.com", "asset_type": "website", "location": "https://lastpass.com", "group": "In Scope Targets" }, { "name": "LastPass browser extensions (Chrome / Safari / Edge / Firefox)", "asset_type": "other", "location": "https://lastpass.com/misc_download2.php", "group": "In Scope Targets" }, { "name": "Local computer apps (UWP application / Windows installer (MSI) / MacOS)", "asset_type": "other", "location": "https://lastpass.com/misc_download2.php", "group": "In Scope Targets" }, { "name": "https://support.lastpass.com", "asset_type": "website", "location": "https://support.lastpass.com", "group": "In Scope Targets" }, { "name": "Workstation MFA (WMFA)", "asset_type": "other", "location": null, "group": "In Scope Targets" }, { "name": "https://blog.lastpass.com", "asset_type": "website", "location": "https://blog.lastpass.com", "group": "In Scope Targets" }, { "name": "https://admin.lastpass.com", "asset_type": "website", "location": "https://admin.lastpass.com", "group": "In Scope Targets" }, { "name": "https://auth.lastpass.com", "asset_type": "website", "location": "https://auth.lastpass.com", "group": "In Scope Targets" }, { "name": "https://accounts.lastpass.com", "asset_type": "website", "location": "https://accounts.lastpass.com", "group": "In Scope Targets" }, { "name": "https://www.lastpass.com", "asset_type": "website", "location": "https://www.lastpass.com", "group": "In Scope Targets" }, { "name": "LastPass Password Manager (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.lastpass.lpandroid", "group": "Mobile Targets" }, { "name": "LastPass Authenticator (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.lastpass.authenticator&hl=en_US&gl=US", "group": "Mobile Targets" }, { "name": "LastPass Password Manager (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/lastpass-password-manager/id324613447", "group": "Mobile Targets" }, { "name": "LastPass Authenticator (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/lastpass-authenticator/id1079110004", "group": "Mobile Targets" } ], "out_of_scope": [ { "name": "https://identity.lastpass.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "Lastpass CLI tool", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "https://info.lastpass.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://forums.lastpass.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-154fcdb83c0de882.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-f264c5f391e0a256", "name": "Latitude Financial Services Bug Bounty", "program_url": "https://bugcrowd.com/engagements/latitude-financial-service-bugbounty", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $7,500", "reward_min": "$150", "reward_max": "$7,500", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:08Z", "scope_published_at": "2025-03-05T00:20:01.981Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/latitude-financial-service-bugbounty/changelog/9a0cc405-bbed-449a-9f4e-b767c0624e48.json" ], "in_scope": [ { "name": "https://api.test.latitudefinancial.com", "asset_type": "api", "location": null, "group": "In Scope Targets - Latitude Financial " }, { "name": "https://master.servicecentre.digitalservicing-np.lfscnp.com/", "asset_type": "website", "location": "https://master.servicecentre.digitalservicing-np.lfscnp.com/", "group": "In Scope Targets - Latitude Financial " }, { "name": "https://master.servicecentre-nz.digitalservicing-np.lfscnp.com/", "asset_type": "website", "location": "https://master.servicecentre-nz.digitalservicing-np.lfscnp.com/\t", "group": "In Scope Targets - Latitude Financial " }, { "name": "*.28degreescard.com.au", "asset_type": "website", "location": "https://28degreescard.com.au", "group": "In scope - Latitude Financial Brands " }, { "name": "*.buyersedge.com.au", "asset_type": "website", "location": "https://buyersedge.co.nz", "group": "In scope - Latitude Financial Brands " }, { "name": "*.carecredit.com.au", "asset_type": "website", "location": "https://carecredit.com.au", "group": "In scope - Latitude Financial Brands " }, { "name": "*.gemcreditline.co.nz", "asset_type": "website", "location": "https://gemcreditline.co.nz", "group": "In scope - Latitude Financial Brands " }, { "name": "*.gemfinance.co.nz", "asset_type": "website", "location": "https://gemfinance.co.nz", "group": "In scope - Latitude Financial Brands " }, { "name": "*.gemvisa.com.au", "asset_type": "website", "location": "https://gemvisa.com.au", "group": "In scope - Latitude Financial Brands " }, { "name": "*.genoapay.co.nz", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.genoapay.com", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.gomastercard.com.au", "asset_type": "website", "location": "https://gomastercard.com.au", "group": "In scope - Latitude Financial Brands " }, { "name": "*.interestfree.com.au", "asset_type": "website", "location": "https://interestfree.com.au", "group": "In scope - Latitude Financial Brands " }, { "name": "*.latitudefinancial.co.nz", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.latitudefinancial.com", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.latitudefinancial.com.au", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.latitudeinfinity.com.au", "asset_type": "website", "location": "https://latitudeinfinity.com.au", "group": "In scope - Latitude Financial Brands " }, { "name": "*.latitudepay.com.au", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.latitudepay.com", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.umiloans.com.au", "asset_type": "website", "location": "https://umiloans.com.au", "group": "In scope - Latitude Financial Brands " }, { "name": "images.latitudepayapps.com", "asset_type": "api", "location": "https://images.latitudepayapps.com/", "group": "In scope - Latitude Financial Brands " }, { "name": "app.latitudepayapps.com", "asset_type": "api", "location": "https://app.latitudepayapps.com/", "group": "In scope - Latitude Financial Brands " }, { "name": "*.test.*.lfscnp.com", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.dev.*.lfscnp.com", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.sandbox.*.lfscnp.com", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.-np.*.lfscnp.com", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " } ], "out_of_scope": [ { "name": "https://investors.latitudefinancial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://auth.latitudefinancial.com", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "https://auth.*.latitudefinancial.com", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "*.latitudefs.com", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "https://*.my.latitudepay.com/", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://*.sg.latitudepay.com/", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://my.latitudepay.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://sg.latitudepay.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://t.latitudefinancial.com", "asset_type": "website", "location": "https://t.latitudefinancial.com/*", "group": "Out of Scope Targets" }, { "name": "https://p.latitudefinancial.com", "asset_type": "website", "location": "https://p.latitudefinancial.com", "group": "Out of Scope Targets" }, { "name": "Payment APIs", "asset_type": "website", "location": "https://payments.latitudefinancial.com/hosted/*,https://payments.latitudefinancial.com/embed/*,https://payments-api.latitudefinancial.com/*", "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-f264c5f391e0a256.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-8c79e5965dcb8c85", "name": "LaunchDarkly Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/launchdarkly-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $7,500", "reward_min": "$150", "reward_max": "$7,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:09Z", "scope_published_at": null, "scope_group_count": null, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/launchdarkly-mbb-og/changelog/884450ef-4277-41a9-8394-5f8c49cae2d8.json" ], "in_scope": [ { "name": "app.launchdarkly.com", "asset_type": "website", "location": null, "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "events.launchdarkly.com", "asset_type": "website", "location": null, "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "stream.launchdarkly.com", "asset_type": "website", "location": null, "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "LaunchDarkly Open Source SDKs", "asset_type": "other", "location": null, "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "docs.launchdarkly.com", "asset_type": "website", "location": null, "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://launchdarkly.com/docs", "asset_type": "website", "location": "https://launchdarkly.com/docs", "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "blog.launchdarkly.com", "asset_type": "other", "location": null, "group": "Out of Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "launchdarkly.com", "asset_type": "other", "location": null, "group": "Out of Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "sandbox.launchdarkly.com", "asset_type": "other", "location": null, "group": "Out of Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "slack.launchdarkly.com", "asset_type": "other", "location": null, "group": "Out of Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "status.launchdarkly.com", "asset_type": "other", "location": null, "group": "Out of Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "launchdarkly.atlassian.net", "asset_type": "other", "location": "https://launchdarkly.atlassian.net", "group": "Out of Scope ", "source_ids": [ "assets-scope-2026-10-03" ] } ], "policy_review_state": "verified_policy_record", "verified_policy_id": "launchdarkly-managed-bug-bounty", "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-8c79e5965dcb8c85.md", "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ] }, { "id": "bugcrowd-005bf6589fbb8fe1", "name": "Lightspeed Hospitality", "program_url": "https://bugcrowd.com/engagements/lightspeed-hospitality", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,500", "reward_min": "$250", "reward_max": "$7,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:08Z", "scope_published_at": "2026-06-15T00:30:28.939Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/lightspeed-hospitality/changelog/b409de16-0a3b-4cad-9292-92582ced5b2f.json" ], "in_scope": [ { "name": "https://manager.trial.lsk.lightspeed.app/", "asset_type": "website", "location": "https://manager.trial.lsk.lightspeed.app/", "group": "Lightspeed Hospitality K-Series" }, { "name": "mylightspeed.app", "asset_type": "website", "location": "https://mylightspeed.app", "group": "Lightspeed Hospitality K-Series" }, { "name": "https://hq.breadcrumb.com/hq/restaurants/bounty-cafe-2/", "asset_type": "website", "location": "https://hq.breadcrumb.com/hq/restaurants/bounty-cafe-2/", "group": "Lightspeed Hospitality U-Series" } ], "out_of_scope": [ { "name": "lightspeedhq.com/trial", "asset_type": "website", "location": "https://lightspeedhq.com/trial ", "group": "Out of Scope" }, { "name": "pos-admin.trial.lsk.lightspeed.app", "asset_type": "other", "location": "https://pos-admin.trial.lsk.lightspeed.app", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-005bf6589fbb8fe1.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-5988a137d047f023", "name": "Lightspeed Retail", "program_url": "https://bugcrowd.com/engagements/lightspeed-retail", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,500", "reward_min": "$250", "reward_max": "$7,500", "scope_rank": 3, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:09Z", "scope_published_at": "2026-06-15T00:35:55.299Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/lightspeed-retail/changelog/0c06fd61-053e-4724-a145-506fde7e211c.json" ], "in_scope": [ { "name": "developers.retail.lightspeed.app", "asset_type": "website", "location": "https://developers.retail.lightspeed.app", "group": "Lightspeed Retail X-Series In Scope Targets" }, { "name": "payment-connectors.vendhq.com", "asset_type": "website", "location": "https://payment-connectors.vendhq.com/", "group": "Lightspeed Retail X-Series In Scope Targets" }, { "name": "store.retail.lightspeed.app", "asset_type": "website", "location": "https://store.retail.lightspeed.app", "group": "Lightspeed Retail X-Series In Scope Targets" }, { "name": "https://apps.apple.com/us/app/ecwid-ecommerce/id626731456", "asset_type": "ios", "location": null, "group": "Lightspeed Ecommerce E-Series In Scope Targets" }, { "name": "https://play.google.com/store/apps/details?id=com.ecwid.android&pli=1", "asset_type": "android", "location": null, "group": "Lightspeed Ecommerce E-Series In Scope Targets" }, { "name": "https://app.ecwid.com/api/v3/", "asset_type": "api", "location": "https://app.ecwid.com/api/v3/", "group": "Lightspeed Ecommerce E-Series In Scope Targets" } ], "out_of_scope": [ { "name": "x-series-support.lightspeedhq.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "vendhq.force.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "vendimageuploadcdn.global.ssl.fastly.net", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "partners.vendhq.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "track.api.vendhq.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "your-store.vendecommerce.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "partnerportal.vendhq.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://support.ecwid.com/hc/en-us", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "https://www.ecwid.com/", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-5988a137d047f023.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-01ae570586519d32", "name": "Lime", "program_url": "https://bugcrowd.com/engagements/lime", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $7,000", "reward_min": "$150", "reward_max": "$7,000", "scope_rank": 4, "access_status": "open", "industry": "Transportation", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:10Z", "scope_published_at": "2026-01-29T15:13:16.289Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/lime/changelog/75a57d34-9894-4750-bc84-f6937a266609.json" ], "in_scope": [ { "name": "proxy-production.lime.bike", "asset_type": "api", "location": null, "group": "Public In-Scope" }, { "name": "web-message.lime.bike", "asset_type": "api", "location": null, "group": "Public In-Scope" }, { "name": "web-message-high.lime.bike", "asset_type": "api", "location": null, "group": "Public In-Scope" }, { "name": "Supply iOS", "asset_type": "ios", "location": "https://apps.apple.com/ca/app/lime-supply/id1620058457", "group": "Public In-Scope" }, { "name": "web-production.lime.bike", "asset_type": "api", "location": null, "group": "Public In-Scope" }, { "name": "external-api.lime.bike", "asset_type": "api", "location": null, "group": "Public In-Scope" }, { "name": "Data.lime.bike", "asset_type": "api", "location": null, "group": "Public In-Scope" }, { "name": "Rider iOS", "asset_type": "ios", "location": "https://apps.apple.com/ca/app/lime-ridegreen/id1199780189", "group": "Public In-Scope" }, { "name": "Rider Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.limebike", "group": "Public In-Scope" }, { "name": "Supply Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.lime.supply&hl=en_US", "group": "Public In-Scope" }, { "name": "admintool.lime.bike", "asset_type": "api", "location": null, "group": "Private In-Scope" }, { "name": "juicer.lime.bike", "asset_type": "api", "location": null, "group": "Private In-Scope" }, { "name": "Data portal", "asset_type": "website", "location": "https://data.limeinternal.com", "group": "Private In-Scope" }, { "name": "help.lime.bike", "asset_type": "api", "location": null, "group": "Private In-Scope" }, { "name": "Admintool", "asset_type": "website", "location": "https://admintool.lime.bike", "group": "Private In-Scope" }, { "name": "ops.lime.bike", "asset_type": "api", "location": null, "group": "Private In-Scope" }, { "name": "LP dashboard", "asset_type": "website", "location": "https://lp.lime.bike/", "group": "Private In-Scope" }, { "name": "Inhouse deployment pipeline", "asset_type": "website", "location": "https://orchard.limeinternal.com", "group": "Private In-Scope" }, { "name": "Lime website", "asset_type": "website", "location": "https://www.li.me/", "group": "Private In-Scope" }, { "name": "Lime GPT", "asset_type": "website", "location": "https://gpt.lime.bike", "group": "Private In-Scope" } ], "out_of_scope": [ { "name": "community.li.me (bevy)", "asset_type": "api", "location": null, "group": "Out-of-Scope" }, { "name": "*.airflow.limeinternal.com (legacy domain)", "asset_type": "website", "location": null, "group": "Out-of-Scope" }, { "name": "https://help.li.me (Zendesk)", "asset_type": "website", "location": null, "group": "Out-of-Scope" }, { "name": "*.limeinternal.com", "asset_type": "api", "location": null, "group": "Out-of-Scope" }, { "name": "*.lime.bike", "asset_type": "api", "location": null, "group": "Out-of-Scope" }, { "name": "https://li.me (HubSpot)", "asset_type": "website", "location": null, "group": "Out-of-Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-01ae570586519d32.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-fddd727b486a2d92", "name": "Linktree", "program_url": "https://bugcrowd.com/engagements/linktree-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$25 - $7,500", "reward_min": "$25", "reward_max": "$7,500", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:11Z", "scope_published_at": "2025-09-22T23:17:40.600Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/linktree-mbb-og/changelog/c2fdce1d-ed5f-4a57-b7f0-8f79417d5cd0.json" ], "in_scope": [ { "name": "*.linktr.ee", "asset_type": "website", "location": "https://linktr.ee", "group": "Primary Targets" }, { "name": "*.linktree.com", "asset_type": "website", "location": "https://linktree.com", "group": "Primary Targets" }, { "name": "*.tr.ee", "asset_type": "website", "location": "https://tr.ee", "group": "Primary Targets" }, { "name": "*.linktree-extensions.com", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "Linktree iOS app", "asset_type": "ios", "location": "https://linktree.app.link/LinktreeWebsite?utm_medium=Linktree_Footer", "group": "Primary Targets" }, { "name": "Linktree Android app", "asset_type": "android", "location": "https://linktree.app.link/LinktreeWebsite?utm_medium=Linktree_Footer", "group": "Primary Targets" }, { "name": "plannthat.com", "asset_type": "website", "location": "https://*.plannthat.com", "group": "Secondary Targets" }, { "name": "Plann iOS app", "asset_type": "ios", "location": "https://apps.apple.com/au/app/plann-preview-for-instagram/id1106201141", "group": "Secondary Targets" }, { "name": "Plann Android app", "asset_type": "android", "location": "https://play.google.com/store/search?q=plann&c=apps", "group": "Secondary Targets" }, { "name": "*.odesli.co", "asset_type": "website", "location": "https://odesli.co", "group": "Secondary Targets" }, { "name": "*.odesli.com", "asset_type": "website", "location": "https://odesli.com", "group": "Secondary Targets" }, { "name": "*.song.link", "asset_type": "website", "location": "https://song.link", "group": "Secondary Targets" }, { "name": "*.songlink.io", "asset_type": "website", "location": "https://songlink.io", "group": "Secondary Targets" }, { "name": "*.album.link", "asset_type": "website", "location": "https://album.link", "group": "Secondary Targets" }, { "name": "*.artist.link", "asset_type": "website", "location": "https://artist.link", "group": "Secondary Targets" }, { "name": "*.pods.link", "asset_type": "website", "location": "https://pods.link", "group": "Secondary Targets" }, { "name": "*.playlist.link", "asset_type": "website", "location": "https://playlist.link", "group": "Secondary Targets" }, { "name": "*.mylink.page", "asset_type": "website", "location": "https://mylink.page", "group": "Secondary Targets" } ], "out_of_scope": [ { "name": "*.filestack.com", "asset_type": "website", "location": "https://filestack.com", "group": "Out of Scope Targets" }, { "name": "*.freshdesk.com", "asset_type": "website", "location": "https://freshdesk.com", "group": "Out of Scope Targets" }, { "name": "*.blstr.xyz", "asset_type": "website", "location": "https://blstr.xyz", "group": "Out of Scope Targets" }, { "name": "*.blstr.co", "asset_type": "website", "location": "https://blstr.co", "group": "Out of Scope Targets" }, { "name": "community.linktr.ee", "asset_type": "website", "location": "https://community.linktr.ee", "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-fddd727b486a2d92.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-9d73a32f2e0574aa", "name": "Litew8 GmbH - Marketplace Bug Bounty", "program_url": "https://bugcrowd.com/engagements/litew8", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:12Z", "scope_published_at": "2026-09-09T08:47:33.296Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/litew8/changelog/9c8e2d48-6a92-44d3-9d7e-c72ec4d1b68e.json" ], "in_scope": [ { "name": "Space Templates & Content Templates for Jira | https://marketplace.atlassian.com/apps/1230303/project-templates-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230303/project-templates-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Space Templates for Confluence | https://marketplace.atlassian.com/apps/1235430/space-templates-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235430/space-templates-for-confluence?tab=overview&hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-9d73a32f2e0574aa.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-0869e67e1925baf6", "name": "lululemon", "program_url": "https://bugcrowd.com/engagements/lululemon", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $8,000", "reward_min": "$50", "reward_max": "$8,000", "scope_rank": 3, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:13Z", "scope_published_at": "2026-09-22T21:12:08.291Z", "scope_group_count": 5, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/lululemon/changelog/dbc3059a-d453-413b-bf8c-6a0b4290bd75.json" ], "in_scope": [ { "name": "shop.lululemon.com", "asset_type": "website", "location": "https://shop.lululemon.com", "group": "North America e-commerce sites" }, { "name": "*.lululemon.com", "asset_type": "other", "location": null, "group": "North America e-commerce sites" }, { "name": "Lululemon Mobile App - iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/lululemon/id920098546", "group": "North America e-commerce sites" }, { "name": "https://www.lululemon.com.au", "asset_type": "website", "location": "https://www.lululemon.com.au/ ", "group": "International e-commerce sites" }, { "name": "https://www.lululemon.de", "asset_type": "website", "location": "https://www.lululemon.de/", "group": "International e-commerce sites" }, { "name": "https://www.lululemon.es", "asset_type": "website", "location": "https://www.lululemon.es/ ", "group": "International e-commerce sites" }, { "name": "https://www.eu.lululemon.com", "asset_type": "website", "location": "https://www.eu.lululemon.com/", "group": "International e-commerce sites" }, { "name": "https://www.lululemon.fr", "asset_type": "website", "location": "https://www.lululemon.fr/", "group": "International e-commerce sites" }, { "name": "https://www.lululemon.com.hk", "asset_type": "website", "location": "https://www.lululemon.com.hk/", "group": "International e-commerce sites" }, { "name": "http://www.lululemon.co.jp", "asset_type": "website", "location": "https://www.lululemon.co.jp/", "group": "International e-commerce sites" }, { "name": "http://www.lululemon.co.kr", "asset_type": "website", "location": "http://www.lululemon.co.kr/", "group": "International e-commerce sites" }, { "name": "https://www.lululemon.co.nz", "asset_type": "website", "location": "https://www.lululemon.co.nz/", "group": "International e-commerce sites" }, { "name": "https://www.lululemon.co.uk", "asset_type": "website", "location": "https://www.lululemon.co.uk/", "group": "International e-commerce sites" } ], "out_of_scope": [ { "name": "*.lululemon.cn", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://fr.shop.lululemon.com", "asset_type": "website", "location": "https://fr.shop.lululemon.com", "group": "Out of Scope" }, { "name": "*.lululemon.me", "asset_type": "website", "location": "https://www.lululemon.me", "group": "Out of Scope" }, { "name": "careers.lululemon.com", "asset_type": "website", "location": "https://careers.lululemon.com/", "group": "Out of Scope" }, { "name": "https://info.lululemon.com", "asset_type": "website", "location": "https://info.lululemon.com", "group": "AEM Systems" }, { "name": "https://pnimages.lululemon.com", "asset_type": "website", "location": "https://pnimage.lululemon.com", "group": "AEM Systems" }, { "name": "AEM - Assets", "asset_type": "website", "location": null, "group": "AEM Systems" }, { "name": "AEM - Sites", "asset_type": "website", "location": null, "group": "AEM Systems" }, { "name": "https://www.mirror.co", "asset_type": "website", "location": "https://www.mirror.co/", "group": "lululemon Studio" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-0869e67e1925baf6.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-5b3e28b10305cbb4", "name": "Luno Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/luno-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $7,500", "reward_min": "$100", "reward_max": "$7,500", "scope_rank": 3, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:14Z", "scope_published_at": "2026-05-27T11:04:11.684Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/luno-og/changelog/75bc83aa-24dc-4496-aaa2-9fc9abcbbb37.json" ], "in_scope": [ { "name": "Luno Android Application", "asset_type": "android", "location": "https://play.google.com/store/apps/details?hl=en&id=co.bitx.android.wallet", "group": "Mobile targets" }, { "name": "Luno iOS Application", "asset_type": "ios", "location": "https://apps.apple.com/app/bitx-wallet/id927362479", "group": "Mobile targets" }, { "name": "https://mobileapi.staging.luno.com/", "asset_type": "api", "location": "https://mobileapi.staging.luno.com/", "group": "Mobile targets" }, { "name": "*.staging.luno.com/", "asset_type": "website", "location": "https://staging.luno.com/", "group": "Web targets" }, { "name": "*staging.luno.com.ng/", "asset_type": "website", "location": "https://staging.luno.com.ng", "group": "Web targets" }, { "name": "https://api.staging.luno.com/", "asset_type": "api", "location": "https://api.staging.luno.com/", "group": "Web targets" }, { "name": "https://app.staging.luno.com/", "asset_type": "website", "location": "https://app.staging.luno.com/", "group": "Web targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-5b3e28b10305cbb4.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-00126820d84bf20e", "name": "Magic Apps Marketplace Bug Bounty", "program_url": "https://bugcrowd.com/engagements/magic-apps", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:15Z", "scope_published_at": "2026-08-13T04:40:02.093Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/magic-apps/changelog/270acdfc-4023-4590-81e0-094bf3f19da9.json" ], "in_scope": [ { "name": "Async and Planning Poker sizing for Jira- https://marketplace.atlassian.com/apps/1223655/magic-estimations-async-and-planning-poker-sizing-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223655/magic-estimations-async-and-planning-poker-sizing-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-00126820d84bf20e.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-5cd930125a62c3e1", "name": "Magic Labs Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/magiclabs-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $3,000", "reward_min": "$250", "reward_max": "$3,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:16Z", "scope_published_at": "2026-09-23T20:06:21.707Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/magiclabs-mbb-og/changelog/ab298bcb-308d-4860-b3fb-cbcee5285d50.json" ], "in_scope": [ { "name": "████████████████████", "asset_type": "website", "location": null, "group": "█████████" }, { "name": "███████████████", "asset_type": "website", "location": null, "group": "█████████" }, { "name": "██████████████", "asset_type": "api", "location": null, "group": "█████████" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-5cd930125a62c3e1.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-5be877d1d2b3dfa7", "name": "Majid Al Futtaim Customer Solutions", "program_url": "https://bugcrowd.com/engagements/majidalfuttaim-loyalty", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $2,500", "reward_min": "Points", "reward_max": "$2,500", "scope_rank": 4, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:17Z", "scope_published_at": "2026-07-29T11:35:16.211Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/majidalfuttaim-loyalty/changelog/c1fed137-acc0-4508-9396-ee9ea7a6c625.json" ], "in_scope": [ { "name": "https://www.sharerewards.com/", "asset_type": "website", "location": "https://www.sharerewards.com/", "group": "Share Rewards App" }, { "name": "Share Rewards Programme iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/share-rewards/id1465450657", "group": "Share Rewards App" }, { "name": "Share Rewards Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.maf.share&hl=en_US&gl=US", "group": "Share Rewards App" }, { "name": "https://www.vtcprodapi.maf.ae/svc/svcHifi.svc/SaveOCRReceipt", "asset_type": "api", "location": null, "group": "Share Rewards App" }, { "name": "https://production.maf.auth0.com/api/v2/", "asset_type": "api", "location": null, "group": "Share Rewards App" }, { "name": "https://production.maf.auth0.com", "asset_type": "api", "location": null, "group": "Share Rewards App" }, { "name": "https://maf-holding-prod.apigee.net", "asset_type": "api", "location": null, "group": "Share Rewards App" }, { "name": "WIFI", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/9h0hkx6nBNSDuhTSFySzPgcFyXrHOVNI", "group": "MPASS Targets" }, { "name": "SHARE", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/bN1YiObxLzbCkU6z6lRdE8jpGgEM2bqG", "group": "MPASS Targets" }, { "name": "MOE", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/8VdAQsuIqDPQhsNC1sNQtS2Jf7anninl", "group": "MPASS Targets" }, { "name": "LEGO", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/zISrnnxfS19jUJTUAtnFaTUkAJ27r8mE", "group": "MPASS Targets" }, { "name": "SKI-DUBAI", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/0dfwUn870OFm3aebVTKv0xz1viKKyXlL", "group": "MPASS Targets" }, { "name": "CRATE-BARREL", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/C1o8u0aPez0Qs5W5TGa1Cbpxq8Ieb63G", "group": "MPASS Targets" }, { "name": "THAT", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/I3ev7JpJpG4tmIKuXfQ5s29e1uUgtdaL", "group": "MPASS Targets" }, { "name": "THAT-MOBILE", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/gbYSXvAJqSRL0gb76oaWWBojroIDBJrb", "group": "MPASS Targets" }, { "name": "VOX", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/v0uVcrcyayqiTSbRUJPAWz2YJNN1tHTy", "group": "MPASS Targets" }, { "name": "VOX-MOBILE", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/9AHmz8YYRY6OVVTNHtLKjrFgwovO1eDE", "group": "MPASS Targets" }, { "name": "CBU", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/abGQxSUDBML2iWEP9P1KWjxnUi7RwfT1", "group": "MPASS Targets" }, { "name": "ALLSAINTS", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/kfwPMuCVbxNPvPpfDKiyvgVvHWmThXc8", "group": "MPASS Targets" }, { "name": "CB2", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/VhYxO10cBfgbvQ1KzcO0XYIsz9kLahZ6", "group": "MPASS Targets" }, { "name": "MAGIC-PLANET", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/xD3ktDwA9dnX1xNLig2S3oM8xvxXTnty", "group": "MPASS Targets" }, { "name": "MR-USTA", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/gsUkX5A6BA7wJLQxEiIjdC8PDrNJ42Mo", "group": "MPASS Targets" }, { "name": "MAFID-FAB", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/hqrMBSRmjuH85ACKnBvUEvOoBJllGPWn", "group": "MPASS Targets" }, { "name": "MAFID-DREAMSCAPE", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/p1Ji7cKQ7RG5KU3Jjuke5ZMG6vfWe0IV", "group": "MPASS Targets" }, { "name": "MAFID-MOE-MOBILE", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/mPbXCx7lA4dQNyEhhyCGMV6XKjuccbk8", "group": "MPASS Targets" }, { "name": "www.premogiftcards.com/", "asset_type": "website", "location": "https://www.premogiftcards.com/", "group": "MPASS Targets" }, { "name": "MPASS MAFid, Identity.majidalfutaaim.com", "asset_type": "website", "location": "https://identity.majidalfuttaim.com", "group": "MPASS Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-5be877d1d2b3dfa7.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-e9a9f536e2fdf50d", "name": "Majid Al Futtaim Entertainment", "program_url": "https://bugcrowd.com/engagements/vox", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $2,500", "reward_min": "Points", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:18Z", "scope_published_at": "2025-09-01T09:59:54.001Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/vox/changelog/e5223795-795b-45fb-9b38-28f6d7994775.json" ], "in_scope": [ { "name": "Vox Cinemas iOS", "asset_type": "ios", "location": null, "group": "InScope Target" }, { "name": "Vox Cinemas Android", "asset_type": "android", "location": null, "group": "InScope Target" }, { "name": "https://uae.voxcinemas.com/", "asset_type": "website", "location": "https://uae.voxcinemas.com/", "group": "InScope Target" }, { "name": "https://www.skidxb.com/", "asset_type": "website", "location": "https://www.skidxb.com/", "group": "InScope Target" }, { "name": "https://www.magicplanetmena.com/", "asset_type": "website", "location": "https://www.magicplanetmena.com/", "group": "InScope Target" } ], "out_of_scope": [ { "name": "http://www.theplaymania.com/", "asset_type": "website", "location": null, "group": "Out of scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-e9a9f536e2fdf50d.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-1d665db53af0f4a0", "name": "Majid Al Futtaim Lifestyle", "program_url": "https://bugcrowd.com/engagements/maffashion", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $3,500", "reward_min": "Points", "reward_max": "$3,500", "scope_rank": 4, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:19Z", "scope_published_at": "2025-09-01T15:47:05.385Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/maffashion/changelog/17e7a8a3-0049-417f-956e-6f7ae42679d0.json" ], "in_scope": [ { "name": "www.crateandbarrel.me", "asset_type": "website", "location": "https://www.crateandbarrel.me", "group": "In Scope Targets" }, { "name": "https://api-prod.thatconceptstore.com/", "asset_type": "api", "location": "https://api-prod.thatconceptstore.com/", "group": "In Scope Targets" }, { "name": "THAT Concept Store iOS", "asset_type": "ios", "location": "https://apps.apple.com/app/id1503045795", "group": "In Scope Targets" }, { "name": "THAT Concept Store Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.maf.thatandroid", "group": "In Scope Targets" }, { "name": "https://thatconceptstore.com", "asset_type": "website", "location": "https://thatconceptstore.com", "group": "In Scope Targets" }, { "name": "https://www.cb2.ae/en", "asset_type": "website", "location": "https://www.cb2.ae/en", "group": "In Scope Targets" }, { "name": "https://www.allsaints.me/", "asset_type": "website", "location": "https://www.allsaints.me/", "group": "In Scope Targets" }, { "name": "www.lululemon.me", "asset_type": "website", "location": "https://www.lululemon.me", "group": "In Scope Targets" }, { "name": "lapi.yellowblocks.me", "asset_type": "api", "location": "https://lapi.yellowblocks.me", "group": "In Scope Targets" }, { "name": "https://www.shiseido.me/", "asset_type": "website", "location": "https://www.shiseido.me/", "group": "In Scope Targets" }, { "name": "lego.me", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "psychobunny.me", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "fashion4less.me", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "www.americangirlmena.com", "asset_type": "website", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-1d665db53af0f4a0.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-790d2d69602f2358", "name": "Majid Al Futtaim Properties", "program_url": "https://bugcrowd.com/engagements/mallofemirates", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $2,500", "reward_min": "Points", "reward_max": "$2,500", "scope_rank": 4, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:20Z", "scope_published_at": "2026-08-03T11:06:23.599Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/mallofemirates/changelog/df50d9f1-2116-4dbe-aec5-6c901d965e07.json" ], "in_scope": [ { "name": "https://www.malloftheemirates.com", "asset_type": "website", "location": "https://www.malloftheemirates.com", "group": "Mall of Emirates" }, { "name": "https://api.mafshoppingmalls.com/", "asset_type": "api", "location": "https://api.mafshoppingmalls.com/", "group": "Mall of Emirates" }, { "name": "https://apps.apple.com/app/mall-of-the-emirates-moe/id1449578693", "asset_type": "ios", "location": "https://apps.apple.com/app/mall-of-the-emirates-moe/id1449578693", "group": "Mall of Emirates" }, { "name": "https://play.google.com/store/apps/details?id=com.belongi.moe", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.belongi.moe", "group": "Mall of Emirates" }, { "name": "Partner Connect", "asset_type": "website", "location": "https://partnerconnect.maf.ae/", "group": "Mall of Emirates" }, { "name": "Ecoupon", "asset_type": "website", "location": "https://ecoupon.maf.ae/", "group": "Mall of Emirates" }, { "name": "City Centre Deira", "asset_type": "website", "location": "https://citycentredeira.com/", "group": "Mall of Emirates" }, { "name": "City Centre Al Barsha", "asset_type": "website", "location": "https://www.mycitycentrealbarsha.com/", "group": "Mall of Emirates" }, { "name": "Tilal Al Ghaf Website", "asset_type": "website", "location": "https://www.tilalalghaf.com/en", "group": "Mall of Emirates" }, { "name": "Junction Website", "asset_type": "website", "location": "https://atjunction.com/", "group": "Mall of Emirates" }, { "name": "Ghafwoods Website", "asset_type": "website", "location": "https://www.ghafwoods.com/en", "group": "Mall of Emirates" }, { "name": "MAF Properties Website", "asset_type": "website", "location": "https://www.majidalfuttaimproperties.com/en", "group": "Mall of Emirates" }, { "name": "Sitefinity Portal", "asset_type": "website", "location": "https://smbu.mafcms.com/Sitefinity/adminapp/renderer/dashboard", "group": "Mall of Emirates" }, { "name": "Belong by MAF (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/belong-by-maf/id6443736108", "group": "Mall of Emirates" }, { "name": "Belong by MAF (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.maf.communities&hl=en-US", "group": "Mall of Emirates" }, { "name": "https://maf-properties-prod.apigee.net", "asset_type": "api", "location": "https://maf-properties-prod.apigee.net", "group": "Mall of Emirates" }, { "name": "https://api.mafshoppingmalls.com", "asset_type": "api", "location": "https://api.mafshoppingmalls.com", "group": "Mall of Emirates" }, { "name": "https://smbu-api.maf.ae/", "asset_type": "api", "location": "https://smbu-api.maf.ae/", "group": "Mall of Emirates" }, { "name": "https://www.citycentremalls.com/en", "asset_type": "website", "location": "https://www.citycentremalls.com/en", "group": "Mall of Emirates" }, { "name": "Mall of the Emirates", "asset_type": "android", "location": "https://play.google.com/store/search?q=mall+of+emirates&c=apps&hl=en_IN", "group": "Mall of Emirates" }, { "name": "Mall of the Emirates IOS", "asset_type": "ios", "location": "https://apps.apple.com/in/app/mall-of-the-emirates-moe/id1449578693", "group": "Mall of Emirates" }, { "name": "Mall of Egypt iOS", "asset_type": "ios", "location": "https://apps.apple.com/in/app/mall-of-egypt-official-app/id1441905105", "group": "Mall of Emirates" }, { "name": "Mall of Egypt Android", "asset_type": "android", "location": "https://apps.apple.com/in/app/mall-of-egypt-official-app/id1441905105", "group": "Mall of Emirates" }, { "name": "City Centre", "asset_type": "ios", "location": "https://apps.apple.com/in/app/city-centres/id1448471823", "group": "Mall of Emirates" }, { "name": "City Centre", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.belongi.citycenter&hl=en_IN", "group": "Mall of Emirates" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-790d2d69602f2358.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-e5c5830dc946aef5", "name": "Majid Al Futtaim Retail", "program_url": "https://bugcrowd.com/engagements/carrefour", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $4,000", "reward_min": "Points", "reward_max": "$4,000", "scope_rank": 2, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:21Z", "scope_published_at": "2025-09-01T15:54:10.461Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/carrefour/changelog/d7ee1cb5-3958-4a62-93ab-0747552a0aea.json" ], "in_scope": [ { "name": "Carrefour UAE iOS", "asset_type": "ios", "location": "https://itunes.apple.com/app/carrefour-uae/id626805470", "group": "MAF-Retail" }, { "name": "Carrefour UAE Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.aswat.carrefouruae", "group": "MAF-Retail" }, { "name": "carrefouruae.com", "asset_type": "website", "location": "https://www.carrefouruae.com/", "group": "MAF-Retail" }, { "name": "https://api-prod.retailsso.com", "asset_type": "api", "location": "https://api-prod.retailsso.com", "group": "MAF-Retail" } ], "out_of_scope": [ { "name": "https://cwingsfe.mafrservices.com/login", "asset_type": "website", "location": "https://cwingsfe.mafrservices.com/login", "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-e5c5830dc946aef5.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-54c317684c814148", "name": "Marketplace Expert SL", "program_url": "https://bugcrowd.com/engagements/marketplaceexpert", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Real Estate", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:22Z", "scope_published_at": "2026-08-13T04:38:05.097Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/marketplaceexpert/changelog/d50d1b75-009b-490c-b554-7d06d2816afb.json" ], "in_scope": [ { "name": "Links Hierarchy (Jira Datacenter) - https://marketplace.atlassian.com/apps/1211022/?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211022/?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "Links Hierachy (Jira Cloud) - https://marketplace.atlassian.com/apps/1211022/?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211022/?hosting=cloud", "group": "In Scope" }, { "name": "Links Hierarchy (Jira Server) - https://marketplace.atlassian.com/apps/1211022/links-hierarchy-jira-agile?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211022/links-hierarchy-jira-agile?hosting=server&tab=overview", "group": "In Scope" }, { "name": "Subversion ALM for the enterprise (Jira Datacenter) - https://marketplace.atlassian.com/apps/1211642/subversion-alm-for-the-enterprise?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211642/subversion-alm-for-the-enterprise?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "Subversion ALM for the enterprise (Jira Server) - https://marketplace.atlassian.com/apps/1211642/subversion-alm-for-the-enterprise?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211642/subversion-alm-for-the-enterprise?hosting=server&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-54c317684c814148.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-b314a0ab874b4cad", "name": "Marvelution", "program_url": "https://bugcrowd.com/engagements/marvelutionbv", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:23Z", "scope_published_at": "2026-06-24T04:49:56.769Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/marvelutionbv/changelog/88507c74-4c3d-4f51-ae25-1670e1e371b3.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1211376/jenkins-integration-for-jira?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211376/jenkins-integration-for-jira?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1211376/jenkins-integration-for-jira?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211376/jenkins-integration-for-jira?hosting=server&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1211376/jenkins-integration-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211376/jenkins-integration-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1234756/jenkins-for-compass?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1234756/jenkins-for-compass?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1236248/jenkins-for-confluence/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236248/jenkins-for-confluence/?tab=overview&hosting=cloud", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-b314a0ab874b4cad.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-9cac9944ac97cc74", "name": "Mastercard Public Bug Bounty", "program_url": "https://bugcrowd.com/engagements/mastercard", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $5,000", "reward_min": "$50", "reward_max": "$5,000", "scope_rank": 3, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:24Z", "scope_published_at": "2026-01-15T13:57:14.691Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/mastercard/changelog/0eb3c506-d8ac-41ee-b469-3e0c2778dd1b.json" ], "in_scope": [ { "name": "MasterCard.us - www.mastercard.us/en-us.html", "asset_type": "website", "location": "https://www.mastercard.us/en-us.html", "group": "Public Targets (In-scope)" }, { "name": "MasterCard.ch - (German) - www.mastercard.ch/de-ch.html", "asset_type": "website", "location": "https://www.mastercard.ch/de-ch.html", "group": "Public Targets (In-scope)" }, { "name": "MasterCard.ch - (French) - www.mastercard.ch/fr-ch.html", "asset_type": "website", "location": "https://www.mastercard.ch/fr-ch.html", "group": "Public Targets (In-scope)" }, { "name": "MasterCard.com.au - www.mastercard.com.au/en-au.html", "asset_type": "website", "location": "https://www.mastercard.com.au/en-au.html", "group": "Public Targets (In-scope)" }, { "name": "MasterCard.nl - www.mastercard.nl/nl-nl.html", "asset_type": "website", "location": "https://www.mastercard.nl/nl-nl.html", "group": "Public Targets (In-scope)" }, { "name": "https://developer.mastercard.com", "asset_type": "website", "location": "https://developer.mastercard.com", "group": "Public Targets (In-scope)" }, { "name": "donate.mastercard.com", "asset_type": "website", "location": "https://donate.mastercard.com", "group": "Public Targets (In-scope)" }, { "name": "Core Priceless.com - demo.priceless.com", "asset_type": "website", "location": "https://demo.priceless.com/", "group": "Public Targets (In-scope)" }, { "name": "https://priceless.com/golf/", "asset_type": "website", "location": "https://priceless.com/golf/", "group": "Public Targets (In-scope)" }, { "name": "https://performancemarketing.mastercard.com/portal/", "asset_type": "website", "location": "https://performancemarketing.mastercard.com/portal/", "group": "Public Targets (In-scope)" }, { "name": "https://src.mastercard.com/profile/enroll", "asset_type": "website", "location": "https://src.mastercard.com/profile/enroll", "group": "Public Targets (In-scope)" }, { "name": "https://src.mastercard.com/*", "asset_type": "website", "location": null, "group": "Public Targets (In-scope)" }, { "name": "SRC integration on https://masterpassteststore.com/. Only the Masterpass checkout functionality is in scope", "asset_type": "website", "location": null, "group": "Public Targets (In-scope)" }, { "name": "Finicity Connect", "asset_type": "api", "location": null, "group": "Public Targets (In-scope)" }, { "name": "Finicity- Data Services", "asset_type": "api", "location": null, "group": "Public Targets (In-scope)" }, { "name": "Finicity Decisioning", "asset_type": "api", "location": null, "group": "Public Targets (In-scope)" }, { "name": "https://www.finicity.com", "asset_type": "website", "location": "https://www.finicity.com", "group": "Public Targets (In-scope)" }, { "name": "https://consumer.finicityreports.com", "asset_type": "website", "location": "https://consumer.finicityreports.com", "group": "Public Targets (In-scope)" }, { "name": "Finicity- Open Banking Payment History application", "asset_type": "api", "location": null, "group": "Public Targets (In-scope)" }, { "name": "Finicity - OBB (Open Banking Business Service)", "asset_type": "api", "location": null, "group": "Public Targets (In-scope)" }, { "name": "https://pioneer.truata.com/", "asset_type": "website", "location": "https://pioneer.truata.com/", "group": "Public Targets (In-scope)" }, { "name": "Public Others Target", "asset_type": "other", "location": null, "group": "Public Other Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-9cac9944ac97cc74.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-b4bd8b3b0916e90f", "name": "MATLAB Online - Ongoing Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/matlab-online", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $7,000", "reward_min": "$200", "reward_max": "$7,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:10Z", "scope_published_at": null, "scope_group_count": null, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/matlab-online/changelog/6b90f7f3-355b-406d-848e-3dfb0622f02a.json" ], "in_scope": [ { "name": "https://matlab.mathworks.com/ [MATLAB ONLINE]", "asset_type": "website", "location": "https://matlab.mathworks.com/", "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [], "policy_review_state": "verified_policy_record", "verified_policy_id": "matlab-online-bug-bounty", "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-b4bd8b3b0916e90f.md", "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ] }, { "id": "bugcrowd-8965552f30be5e0b", "name": "Mattermost Public Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/mattermost-mbb-public", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,000", "reward_min": "$150", "reward_max": "$2,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:25Z", "scope_published_at": "2026-09-04T15:33:01.896Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/mattermost-mbb-public/changelog/12e51944-fd89-4d71-bf45-6e5868fa4d9c.json" ], "in_scope": [ { "name": "Mattermost Mobile Android", "asset_type": "android", "location": "https://play.google.com/store/search?q=mattermost&c=apps", "group": "In Scope" }, { "name": "Mattermost Mobile iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/mattermost/id1257222717", "group": "In Scope" }, { "name": "Mattermost Desktop Apps", "asset_type": "other", "location": "https://mattermost.com/apps/", "group": "In Scope" }, { "name": "https://bugcrowd-*your-own-instance*.cloud.mattermost.com/", "asset_type": "website", "location": "https://bugcrowd-*your-own-instance*.cloud.mattermost.com/", "group": "In Scope" }, { "name": "Mattermost Jira Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-jira ", "group": "In Scope" }, { "name": "Mattermost Zoom Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-zoom", "group": "In Scope" }, { "name": "Mattermost Github Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-github", "group": "In Scope" }, { "name": "Mattermost Gitlab Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-gitlab", "group": "In Scope" }, { "name": "Mattermost Calls Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-calls", "group": "In Scope" }, { "name": "Mattermost Playbooks Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-playbooks", "group": "In Scope" }, { "name": "Mattermost Boards Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-boards", "group": "In Scope" }, { "name": "Mattermost Copilot Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-ai", "group": "In Scope" }, { "name": "Mattermost Microsoft Calendar Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-mscalendar", "group": "In Scope" }, { "name": "Mattermost Plugin for Microsoft Teams Meetings", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-msteams-meetings", "group": "In Scope" }, { "name": "Mattermost Confluence Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-confluence", "group": "In Scope" }, { "name": "Mattermost MSTeams Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-msteams", "group": "In Scope" } ], "out_of_scope": [ { "name": "about.mattermost.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "integrations.mattermost.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "docs.mattermost.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "academy.mattermost.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "developers.mattermost.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "forum.mattermost.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "mattermost.com (the main website)", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-8965552f30be5e0b.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-e0dfaa34918b0ab2", "name": "Meetical", "program_url": "https://bugcrowd.com/engagements/meetical", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:26Z", "scope_published_at": "2026-10-01T06:06:54.923Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 1, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/meetical/changelog/bd4c7c9e-b655-415b-83c4-2c0892bede47.json" ], "in_scope": [ { "name": "Meetical for Confluence Cloud - https://marketplace.atlassian.com/apps/1222405/meetical-for-confluence-cloud?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222405/meetical-for-confluence-cloud", "group": "In Scope" }, { "name": "For reporting purposes only. Use staging environment listed in brief.", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "Easy Calendar for Jira (Forge App) - https://marketplace.atlassian.com/apps/1229489/easy-calendar-integration-for-jira-sync-issues-ics-export?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1229489/easy-calendar-integration-for-jira-sync-issues-ics-export?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-e0dfaa34918b0ab2.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "1 repeated rows in the published table were collapsed in this catalog." ] }, { "id": "bugcrowd-47fd8590e5ec12ce", "name": "META-INF", "program_url": "https://bugcrowd.com/engagements/metainfkft", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:27Z", "scope_published_at": "2026-09-07T14:34:23.190Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/metainfkft/changelog/d5962265-57cb-47c8-be2e-3b9619de3b68.json" ], "in_scope": [ { "name": "Email This Issue - Cloud - https://marketplace.atlassian.com/apps/4977/email-this-issue?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/4977/email-this-issue?hosting=cloud&tab=overview", "group": "In-Scope" }, { "name": "Content Exporter (Word, PDF, HTML) - https://marketplace.atlassian.com/apps/4909/content-exporter-word-pdf-html?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/4909/content-exporter-word-pdf-html?tab=overview&hosting=cloud", "group": "In-Scope" }, { "name": "Glass Project Documentation for Jira - Cloud - https://marketplace.atlassian.com/apps/1219628/glass-project-documentation-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219628/glass-project-documentation-for-jira?hosting=cloud&tab=overview", "group": "In-Scope" }, { "name": "Glass Project Information for Jira - Cloud - https://marketplace.atlassian.com/apps/1224984/glass-project-information-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224984/glass-project-information-for-jira?hosting=cloud&tab=overview", "group": "In-Scope" }, { "name": "Advanced Children Display for Confluence - https://marketplace.atlassian.com/apps/1218865/advanced-children-display-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218865/advanced-children-display-for-confluence?hosting=cloud&tab=overview", "group": "In-Scope" }, { "name": "Marketplace Integration for Jira - https://marketplace.atlassian.com/apps/1229346/marketplace-integration-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229346/marketplace-integration-for-jira?tab=overview&hosting=cloud", "group": "In-Scope" }, { "name": "Myra: CSAT, NPS & CES Feedback Hub for JSM - https://marketplace.atlassian.com/apps/3762467523/myra-csat-nps-ces-feedback-hub-for-jsm?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/3762467523/myra-csat-nps-ces-feedback-hub-for-jsm?hosting=cloud&tab=overview", "group": "In-Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-47fd8590e5ec12ce.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-26449df1f3798802", "name": "MGM China Holdings Limited Managed Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/mgmmacau-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,500", "reward_min": "$250", "reward_max": "$7,500", "scope_rank": 4, "access_status": "open", "industry": "Hospitality", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:29Z", "scope_published_at": "2026-04-23T07:08:29.356Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/mgmmacau-mbb-og/changelog/b597340e-20d4-46bb-bde5-dc8c87525e15.json" ], "in_scope": [ { "name": "*.www.mgm.mo", "asset_type": "website", "location": "https://mgm.mo", "group": "MGM Grand Paradise Macau - Web" }, { "name": "*.mgm.mo", "asset_type": "website", "location": "https://mgm.mo", "group": "MGM Grand Paradise Macau - Web" }, { "name": "*.booking.mgm.mo", "asset_type": "website", "location": "https://booking.mgm.mo/", "group": "MGM Grand Paradise Macau - Web" }, { "name": "*.jobs.mgm.mo", "asset_type": "website", "location": "https://jobs.mgm.mo", "group": "MGM Grand Paradise Macau - Web" }, { "name": "*.static.mgm.mo", "asset_type": "website", "location": "https://static.mgm.mo", "group": "MGM Grand Paradise Macau - Web" }, { "name": "*.Mlife.mo", "asset_type": "website", "location": "https://Mlife.mo", "group": "MGM Grand Paradise Macau - Web" }, { "name": "*.mgmmacau.com", "asset_type": "website", "location": "https://www.mgmmacau.com", "group": "MGM Grand Paradise Macau - Web" }, { "name": "*.tickets.mgm.mo", "asset_type": "website", "location": "https://www.tickets.mgm.mo/", "group": "MGM Grand Paradise Macau - Web" }, { "name": "MGM membership rewards iOS app", "asset_type": "ios", "location": "https://apps.apple.com/mo/app/%E7%BE%8E%E9%AB%98%E6%A2%85%E6%9C%83%E5%93%A1%E6%9C%8D%E5%8B%99-mgm-membership-rewards/id6444925665?l=en-GB", "group": "MGM Grand Paradise Macau - Mobile Apps and API " }, { "name": "MGM membership rewards Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=mo.mgm.app", "group": "MGM Grand Paradise Macau - Mobile Apps and API " }, { "name": "mobileapp-gaming.mgm.mo", "asset_type": "website", "location": "http://mobileapp-gaming.mgm.mo", "group": "MGM Grand Paradise Macau - Mobile Apps and API " }, { "name": "mobileapp-non-gaming.mgm.mo", "asset_type": "website", "location": "http://mobileapp-non-gaming.mgm.mo/", "group": "MGM Grand Paradise Macau - Mobile Apps and API " } ], "out_of_scope": [ { "name": "opay.icbc.com.cn", "asset_type": "website", "location": "https://opay.icbc.com", "group": "MGM Grand Paradise Macau - Out of Scope" }, { "name": "mgmchinaholdings.com", "asset_type": "website", "location": "https://mgmchinaholdings.com", "group": "MGM Grand Paradise Macau - Out of Scope" }, { "name": "hq.hero-cloud.com", "asset_type": "website", "location": "https://hq.hero-cloud.com/", "group": "MGM Grand Paradise Macau - Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-26449df1f3798802.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-41bbf7a8aac7694e", "name": "MobilityStream Bug Bounty", "program_url": "https://bugcrowd.com/engagements/mobilitystream", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:30Z", "scope_published_at": "2026-08-13T04:42:16.453Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/mobilitystream/changelog/2982539c-dfb0-4453-960c-da7b43db8c34.json" ], "in_scope": [ { "name": "Google Sheets Integration for Jira - https://marketplace.atlassian.com/apps/1216313/google-sheets-integration?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216313/google-sheets-integration?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Excel Online Integration - Cloud - https://marketplace.atlassian.com/apps/1220350/excel-online-integration?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220350/excel-online-integration?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Google Sheets Integration - Server - https://marketplace.atlassian.com/apps/1216313/google-sheets-integration?hosting=server&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216313/google-sheets-integration?hosting=server&tab=overview", "group": "In Scope" }, { "name": "Google Sheets Integration - Data Center - https://marketplace.atlassian.com/apps/1216313/google-sheets-integration?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216313/google-sheets-integration?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "Mobility for Jira - Cloud - https://marketplace.atlassian.com/apps/1211459/mobility-for-jira-mobile-jira-team?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211459/mobility-for-jira-mobile-jira-team?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Excel Online Integration - Server - https://marketplace.atlassian.com/apps/1220350/excel-online-integration?hosting=server&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220350/excel-online-integration?hosting=server&tab=overview", "group": "In Scope" }, { "name": "Excel Online Integration - Datacenter - https://marketplace.atlassian.com/apps/1220350/excel-online-integration?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220350/excel-online-integration?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1211459/mobility-for-jira-mobile-jira-team?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211459/mobility-for-jira-mobile-jira-team?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1220350/excel-online-integration?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220350/excel-online-integration?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1211459/mobility-for-jira-mobile-for-enterprise-teams?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211459/mobility-for-jira-mobile-for-enterprise-teams?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1211459/mobility-for-jira-mobile-for-enterprise-teams?hosting=server&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211459/mobility-for-jira-mobile-for-enterprise-teams?hosting=server&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1227353/snowflake-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227353/snowflake-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Databricks for Jira - Cloud - https://marketplace.atlassian.com/apps/1233310/databricks-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233310/databricks-for-jira?hosting=cloud", "group": "In Scope" }, { "name": "Microsoft Fabric for Jira - https://marketplace.atlassian.com/apps/738419736/microsoft-fabric-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/738419736/microsoft-fabric-for-jira?hosting=cloud", "group": "In Scope" }, { "name": "Asset Manager for Jira - https://marketplace.atlassian.com/apps/1442498121/asset-manager-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1442498121/asset-manager-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-41bbf7a8aac7694e.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-ed08e337730b0d9a", "name": "Monash University Bug Bounty", "program_url": "https://bugcrowd.com/engagements/monash-mbb", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $7,500", "reward_min": "$50", "reward_max": "$7,500", "scope_rank": 4, "access_status": "open", "industry": "Education", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:31Z", "scope_published_at": "2026-09-01T22:14:37.600Z", "scope_group_count": 4, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/monash-mbb/changelog/78091ed2-458c-4c85-ba6b-f585fd7c6d72.json" ], "in_scope": [ { "name": "identity.monash.edu", "asset_type": "website", "location": "https://identity.monash.edu/", "group": "Monash University - In Scope Targets - Tier 0" }, { "name": "mix.monash.edu", "asset_type": "api", "location": null, "group": "Monash University - In Scope Targets - Tier 0" }, { "name": "connect.monash.edu", "asset_type": "website", "location": "https://connect.monash.edu", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "identity.monash.edu", "asset_type": "website", "location": "https://identity.monash.edu", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "monash.edu", "asset_type": "website", "location": "https://www.monash.edu", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "Staff.monash", "asset_type": "website", "location": "https://staff.monash", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "apps.connect.monash.edu/", "asset_type": "website", "location": "http://apps.connect.monash.edu/", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "eassessment.monash.edu", "asset_type": "website", "location": null, "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "fileshare.ze.monash.edu", "asset_type": "website", "location": "https://fileshare.ze.monash.edu", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "cms.mobile.monash", "asset_type": "website", "location": "https://cms.mobile.monash/ ", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "mobile.monash", "asset_type": "website", "location": "https://mobile.monash/ ", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "status.mobile.monash", "asset_type": "website", "location": "https://status.mobile.monash/", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "https://monashcollege.edu.au", "asset_type": "website", "location": "https://monashcollege.edu.au", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "https://online.monash.edu/", "asset_type": "website", "location": "https://online.monash.edu/", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "Monash Study iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/monash-study/id1462126829", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "Monash Study Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=edu.monash.monashmobile", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "https://myapp.monash.edu/", "asset_type": "website", "location": "https://myapp.monash.edu/", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "https://alumni-friends.monash.edu", "asset_type": "website", "location": "https://alumni-friends.monash.edu", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "https://agent.apps.monash.edu/", "asset_type": "website", "location": "https://agent.apps.monash.edu/", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "https://compulsoryunits.monash.edu/", "asset_type": "website", "location": "https://compulsoryunits.monash.edu/", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "monash.app.nutrip.com", "asset_type": "website", "location": "https://monash.app.nutrip.com", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "*.gp.monash.edu", "asset_type": "website", "location": "https://*.gp.monash.edu", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "studentplacements.monash.edu", "asset_type": "website", "location": "https://studentplacements.monash.edu", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "unihub.monash.edu", "asset_type": "website", "location": "https://unihub.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "interviews.monash.edu", "asset_type": "website", "location": "https://interviews.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "shop.monash.edu", "asset_type": "website", "location": "https://shop.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "mlivetickets.monash.edu", "asset_type": "website", "location": "https://mlivetickets.monash.edu", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "partner.apps.monash.edu", "asset_type": "website", "location": "https://partner.apps.monash.edu", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "bSafe Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.scu.bsafe", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "bSafe iPhone App", "asset_type": "ios", "location": "https://apps.apple.com/au/app/monash-bsafe/id1462241951", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "forms.apps.monash.edu", "asset_type": "website", "location": "https://forms.apps.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "formative.eassessment.monas.edu", "asset_type": "website", "location": "https://formative.eassessment.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "monashprofessional.edu.au", "asset_type": "website", "location": "https://www.monashprofessional.edu.au/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "account-registration.monash.edu", "asset_type": "website", "location": "https://account-registration.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "pay.monashcollege.edu.au", "asset_type": "website", "location": "http://pay.monashcollege.edu.au/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "Monash e-Vigilation", "asset_type": "website", "location": "https://evigilation.monash.edu", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "student.monash", "asset_type": "website", "location": "https://student.monash", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "mids.monash.edu", "asset_type": "website", "location": "https://mids.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "ims.monash.edu", "asset_type": "website", "location": "https://ims.monash.edu", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "research.monash.edu", "asset_type": "website", "location": "https://research.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "researchmgt.monash.edu", "asset_type": "website", "location": "https://researchmgt.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "move.monash.edu", "asset_type": "website", "location": "https://move.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "collections.monash.edu", "asset_type": "website", "location": "https://collections.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "equella.monash.edu", "asset_type": "website", "location": "https://equella.monash.edu", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "M-Space App iOS", "asset_type": "ios", "location": "https://apps.apple.com/ky/app/m-space/id6761056432", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "M-Space App Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.monashuniversity.mspace.android&pcampaignid=web_share", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "mix-qat.monash.edu/*", "asset_type": "api", "location": null, "group": "API Target(s)" }, { "name": "mix-dev.monash.edu/*", "asset_type": "api", "location": null, "group": "API Target(s)" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-ed08e337730b0d9a.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-298d2da40b206bbb", "name": "Moneytree KK", "program_url": "https://bugcrowd.com/engagements/moneytreekkog", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$300 - $5,000", "reward_min": "$300", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:32Z", "scope_published_at": "2025-03-18T09:27:34.957Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/moneytreekkog/changelog/86959e61-5387-49f8-b326-483b3a91aa9d.json" ], "in_scope": [ { "name": "Moneytree Web for Web", "asset_type": "website", "location": "https://wwws-staging.moneytree.jp/link/", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree Universal Vault", "asset_type": "website", "location": "https://vault-staging.getmoneytree.com", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree Internal Redash", "asset_type": "website", "location": "https://redash-staging.getmoneytree.com/", "group": "Staging @ moneytree.jp" }, { "name": "https://app-staging.getmoneytree.com", "asset_type": "website", "location": "https://app-staging.getmoneytree.com", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree Web for Mobile", "asset_type": "website", "location": "https://wwws-staging.moneytree.jp/link/mobile/", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree Web for Mobile (with Oauth)", "asset_type": "website", "location": "https://wwws-staging.moneytree.jp/link/mobile/#/signup?client_id=38d99a6e8e9fc87c866f5aa82bdc2569c464b2323a55e0b28f658efa678e9623&redirect_uri=https://wwws-staging.moneytree.jp/link/mobile/callback&response_type=token&scope=guest_read+accounts_read+transactions_read+request_refresh", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree MyAccount", "asset_type": "website", "location": "https://myaccount-staging.getmoneytree.com", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree Business", "asset_type": "website", "location": "https://business-staging.getmoneytree.com/", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree API", "asset_type": "api", "location": "https://jp-api-staging.getmoneytree.com", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree Android Mobile Application (staging; see below)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=jp.moneytree.moneytree&hl=en_AU&gl=US", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree iOS Mobile Application (production; see below)", "asset_type": "ios", "location": "https://apps.apple.com/vc/app/moneytree-finance-made-easy/id586847189", "group": "Staging @ moneytree.jp" } ], "out_of_scope": [ { "name": "moneytree.jp", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "Any production asset of Moneytree KK (excepting the iOS app)", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "getmoneytree.com", "asset_type": "website", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-298d2da40b206bbb.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-d6f8548570a7cae7", "name": "Moovit Managed Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/moovit-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $7,000", "reward_min": "$100", "reward_max": "$7,000", "scope_rank": 1, "access_status": "open", "industry": "Utilities", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:11Z", "scope_published_at": null, "scope_group_count": null, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/moovit-mbb-og/changelog/6bded391-eff8-479d-a41c-4efdcee70ed0.json" ], "in_scope": [ { "name": "All In Scope Targets", "asset_type": "other", "location": null, "group": "Limited Double Bounty Promotion | July 7th - July 22nd", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Moovit Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.tranzmate&hl=en_US", "group": "In Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Moovit iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/moovit-all-transit-options/id498477945", "group": "In Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "WayFinder - Augmented Reality helper to find your stop", "asset_type": "ios", "location": "https://support.moovitapp.com/hc/en-us/articles/11389054527122-WayFinder-Augmented-Reality-helper-to-find-your-stop-iPhone-only", "group": "In Scope", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "Every Web App is Out Of Scope.", "asset_type": "website", "location": null, "group": "Out Of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Every app not related to the Moovit mobile application.", "asset_type": "other", "location": null, "group": "Out Of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Any WebView sources or web application rendered within the mobile applications", "asset_type": "other", "location": null, "group": "Out Of Scope", "source_ids": [ "assets-scope-2026-10-03" ] } ], "policy_review_state": "verified_policy_record", "verified_policy_id": "moovit-managed-bug-bounty", "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-d6f8548570a7cae7.md", "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ] }, { "id": "bugcrowd-37f0fa1cdf25bda2", "name": "Motorola Mobility Hardware Engagement", "program_url": "https://bugcrowd.com/engagements/motorolamobility-iot", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $5,000", "reward_min": "$100", "reward_max": "$5,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Hardware", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:33Z", "scope_published_at": "2025-04-24T16:07:03.936Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/motorolamobility-iot/changelog/a10ee0cf-8f1a-4b6b-8f47-c4a609f20c16.json" ], "in_scope": [ { "name": "All Motorola Devices running Android 13 and above.", "asset_type": "android", "location": null, "group": "In Scope " } ], "out_of_scope": [ { "name": "Vulnerabilities related to web-app related issues", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-37f0fa1cdf25bda2.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-1f577064397b1c92", "name": "Move Work Forward", "program_url": "https://bugcrowd.com/engagements/moveworkforward", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:34Z", "scope_published_at": "2026-08-19T23:36:43.857Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/moveworkforward/changelog/a0f2ba8b-4e0c-4d78-a53f-04bf3d54e605.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1231122/azure-devops-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231122/azure-devops-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1216348/microsoft-teams-confluence-connector?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216348/microsoft-teams-confluence-connector?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1222079/microsoftteams-confluence-connector-lite?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222079/microsoftteams-confluence-connector-lite?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1216325/microsoft-teams-jira-connector?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216325/microsoft-teams-jira-connector?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1216106/github-links-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216106/github-links-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1217566/github-links-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217566/github-links-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1223149/azure-devops-confluence-connector?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223149/azure-devops-confluence-connector?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Gitlab for Confluence - Cloud - https://marketplace.atlassian.com/apps/1216286/gitlab-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216286/gitlab-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1216286/gitlab-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216286/gitlab-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1233491/google-chat-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233491/google-chat-for-jira?tab=overview&hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1236139/capybara-github-azure-devops-for-jira-service-management?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236139/capybara-github-azure-devops-for-jira-service-management?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-1f577064397b1c92.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-ed595d9e42796a36", "name": "MyFitnessPal Managed Bug Bounty", "program_url": "https://bugcrowd.com/engagements/myfitnesspal-mbb", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $4,500", "reward_min": "$50", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Healthcare", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:35Z", "scope_published_at": "2025-09-24T19:40:03.554Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/myfitnesspal-mbb/changelog/51bde1a9-f3e2-44b2-ba5b-55af984be7f2.json" ], "in_scope": [ { "name": "com.myfitnesspal.android", "asset_type": "android", "location": "https://market.android.com/details?id=com.myfitnesspal.android&rdid=com.myfitnesspal.android", "group": "Mobile application (High priority targets)" }, { "name": "iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/myfitnesspal-calorie-counter/id341232718", "group": "Mobile application (High priority targets)" }, { "name": "*.myfitnesspal.com", "asset_type": "website", "location": null, "group": "In Scope Targets (Regular)" } ], "out_of_scope": [ { "name": "community.myfitnesspal.com", "asset_type": "website", "location": "https://community.myfitnesspal.com", "group": "Out of Scope" }, { "name": "community-stage.myfitnesspal.com", "asset_type": "website", "location": "https://community-stage.myfitnesspal.com", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-ed595d9e42796a36.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-e51a6028c15466d7", "name": "Navan", "program_url": "https://bugcrowd.com/engagements/navan", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $4,500", "reward_min": "$150", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Business Management", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:36Z", "scope_published_at": "2026-04-30T16:37:58.170Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/navan/changelog/75a59b74-de1b-4378-9e3a-bdc83286825d.json" ], "in_scope": [ { "name": "https://app.navan.com", "asset_type": "website", "location": "https://app.navan.com", "group": "In Scope" } ], "out_of_scope": [ { "name": "tripactions.com", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-e51a6028c15466d7.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-b9f276bdb7e2dc10", "name": "Navarambh", "program_url": "https://bugcrowd.com/engagements/navarambh", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:37Z", "scope_published_at": "2026-08-27T02:23:12.613Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/navarambh/changelog/c530f1e0-9d1b-44c6-8a74-fb1516ab2727.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1222843/aio-tests-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222843/aio-tests-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-b9f276bdb7e2dc10.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-440c8420c2ec7898", "name": "Nemetschek", "program_url": "https://bugcrowd.com/engagements/nemetschek", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:38Z", "scope_published_at": "2026-05-20T23:52:12.935Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/nemetschek/changelog/7f34a1a9-027b-4755-afb7-dacd85dd2347.json" ], "in_scope": [ { "name": "Advanced Portal Reports for Service Desk - Cloud Hosted - https://marketplace.atlassian.com/apps/1219230/advanced-portal-reports-for-service-desk?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219230/advanced-portal-reports-for-service-desk?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Self-Service Portal Report - Cloud Hosted | https://marketplace.atlassian.com/apps/1238203/self-service-portal-report?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1238203/self-service-portal-report?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Modify My Request - Cloud Hosted | https://marketplace.atlassian.com/apps/1234378/modify-my-request?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1234378/modify-my-request?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-440c8420c2ec7898.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-c50ff743ec931796", "name": "NEOGOV Public Assets", "program_url": "https://bugcrowd.com/engagements/neohrms", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $3,500", "reward_min": "$100", "reward_max": "$3,500", "scope_rank": 3, "access_status": "open", "industry": "Government", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:39Z", "scope_published_at": "2025-12-24T14:31:19.232Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/neohrms/changelog/7907edd2-5273-4d95-a91d-581248c4547c.json" ], "in_scope": [ { "name": "https://secure.neogov.com", "asset_type": "website", "location": "https://secure.neogov.com", "group": "In Scope" }, { "name": "https://login.neogov.com", "asset_type": "website", "location": "https://login.neogov.com", "group": "In Scope" }, { "name": "https://performance.neogov.com", "asset_type": "website", "location": "https://performance.neogov.com", "group": "In Scope" }, { "name": "https://learn.neogov.com", "asset_type": "website", "location": "https://learn.neogov.com", "group": "In Scope" }, { "name": "https://api.neogov.com", "asset_type": "website", "location": "https://api.neogov.com", "group": "In Scope" }, { "name": "https://onboard.neogov.com", "asset_type": "website", "location": "https://onboard.neogov.com", "group": "In Scope" }, { "name": "https://unified.neogov.com", "asset_type": "website", "location": "https://unified.neogov.com", "group": "In Scope" }, { "name": "https://eforms.neogov.com", "asset_type": "website", "location": "https://eforms.neogov.com", "group": "In Scope" }, { "name": "https://cdn.neogov.com", "asset_type": "website", "location": "https://cdn.neogov.com", "group": "In Scope" }, { "name": "https://www.governmentjobs.com", "asset_type": "website", "location": "https://www.governmentjobs.com", "group": "In Scope" }, { "name": "https://analytics.neogov.com", "asset_type": "website", "location": "https://analytics.neogov.com", "group": "In Scope" }, { "name": "https://powerdms.com/", "asset_type": "website", "location": "https://powerdms.com/", "group": "In Scope" }, { "name": "https://secure.cuehit.net/", "asset_type": "website", "location": "https://secure.cuehit.net", "group": "In Scope" }, { "name": "https://app.agency360.com/", "asset_type": "website", "location": "https://app.agency360.com", "group": "In Scope" }, { "name": "https://securesignin.neogov.com/", "asset_type": "website", "location": "https://securesignin.neogov.com", "group": "In Scope" }, { "name": "https://securesignin.powerdms.com/", "asset_type": "website", "location": "https://securesignin.powerdms.com/", "group": "In Scope" }, { "name": "https://hr.neogov.com", "asset_type": "website", "location": "https://hr.neogov.com", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-c50ff743ec931796.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-78e9b168b036d683", "name": "New Blue Website (NBW) - VWFS Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/volkswagen-vwfs-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 3, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:40Z", "scope_published_at": "2025-10-28T07:34:21.694Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/volkswagen-vwfs-mbb-og/changelog/b503b4ee-59b2-4fc5-8273-b7edb619462d.json" ], "in_scope": [ { "name": "https://www.vwfs.de", "asset_type": "website", "location": "https://www.vwfs.de", "group": "In Scope Targets" }, { "name": "https://www.vwfs.com", "asset_type": "website", "location": "https://www.vwfs.de/", "group": "In Scope Targets" }, { "name": "https://www.vwfs.pl", "asset_type": "website", "location": "https://www.vwfs.pl", "group": "In Scope Targets" }, { "name": "https://www.vwfs.com.ar", "asset_type": "website", "location": "https://www.vwfs.com.ar", "group": "In Scope Targets" }, { "name": "https://www.vwfs.com.au", "asset_type": "website", "location": "https://www.vwfs.com.au", "group": "In Scope Targets" }, { "name": "https://www.vwfs.cz", "asset_type": "website", "location": "https://www.vwfs.cz", "group": "In Scope Targets" }, { "name": "https://www.vwfs.co.in", "asset_type": "website", "location": "https://www.vwfs.co.in", "group": "In Scope Targets" }, { "name": "https://www.vwfs.ie", "asset_type": "website", "location": "https://www.vwfs.ie", "group": "In Scope Targets" }, { "name": "https://www.vwfs.es", "asset_type": "website", "location": "https://www.vwfs.es", "group": "In Scope Targets" }, { "name": "https://www.vwfs.co.za", "asset_type": "website", "location": "https://www.vwfs.co.za", "group": "In Scope Targets" }, { "name": "https://www.vwfs.mx", "asset_type": "website", "location": "https://www.vwfs.mx", "group": "In Scope Targets" }, { "name": "https://www.vwfs.it", "asset_type": "website", "location": "https://www.vwfs.it", "group": "In Scope Targets" }, { "name": "https://www.vwfs.fr", "asset_type": "website", "location": "https://www.vwfs.fr", "group": "In Scope Targets" }, { "name": "https://www.vwfs.com.br", "asset_type": "website", "location": "https://www.vwfs.com.br", "group": "In Scope Targets" }, { "name": "https://www.vwfs.pt", "asset_type": "website", "location": "https://www.vwfs.pt", "group": "In Scope Targets" }, { "name": "https://www.vwfs.sk", "asset_type": "website", "location": "https://www.vwfs.sk", "group": "In Scope Targets" }, { "name": "https://www.vwfs.gr", "asset_type": "website", "location": "https://www.vwfs.gr", "group": "In Scope Targets" }, { "name": "https://www.vwfs.dk", "asset_type": "website", "location": "https://www.vwfs.dk", "group": "In Scope Targets" }, { "name": "https://www.vwfs.nl", "asset_type": "website", "location": "https://www.vwfs.nl", "group": "In Scope Targets" }, { "name": "https://www.vwfs.kr", "asset_type": "website", "location": "https://www.vwfs.kr", "group": "In Scope Targets" }, { "name": "https://www.vwfs.com.tw", "asset_type": "website", "location": "https://www.vwfs.com.tw", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-78e9b168b036d683.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-c3256a2af6f43a79", "name": "New Relic Public Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/newrelic-mbb-og-public", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $6,000", "reward_min": "$100", "reward_max": "$6,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:41Z", "scope_published_at": "2026-09-09T10:51:22.515Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/newrelic-mbb-og-public/changelog/fd927439-3332-4416-b6d3-b88f31184197.json" ], "in_scope": [ { "name": "https://one.newrelic.com", "asset_type": "website", "location": "https://one.newrelic.com", "group": "Tier One Targets" }, { "name": "New Relic Android Application", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.newrelic.rpm", "group": "Tier One Targets" }, { "name": "New Relic iOS Application", "asset_type": "ios", "location": "https://apps.apple.com/ie/app/new-relic/id594038638", "group": "Tier One Targets" }, { "name": "*.nr-data.net", "asset_type": "other", "location": null, "group": "Tier Two Targets" }, { "name": "*.nr-ops.net", "asset_type": "other", "location": null, "group": "Tier Two Targets" }, { "name": "https://docs.newrelic.com/", "asset_type": "website", "location": "https://docs.newrelic.com/", "group": "Tier Two Targets" }, { "name": "https://newrelic.com/*", "asset_type": "website", "location": "https://newrelic.com/", "group": "Tier Two Targets" }, { "name": "https://newrelic.com/blog", "asset_type": "website", "location": "https://newrelic.com/blog", "group": "Tier Two Targets" }, { "name": "https://support.newrelic.com/", "asset_type": "website", "location": "https://support.newrelic.com/", "group": "Tier Two Targets" }, { "name": "https://forum.newrelic.com", "asset_type": "website", "location": "https://forum.newrelic.com", "group": "Tier Two Targets" }, { "name": "https://knowledge.newrelic.com/", "asset_type": "website", "location": "https://knowledge.newrelic.com/", "group": "Tier Two Targets" }, { "name": "https://learn.newrelic.com/", "asset_type": "website", "location": "https://learn.newrelic.com/", "group": "Tier Two Targets" }, { "name": "https://developer.newrelic.com/", "asset_type": "website", "location": "https://developer.newrelic.com/", "group": "Tier Two Targets" } ], "out_of_scope": [ { "name": "https://status.newrelic.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "New Relic open source software repos in github.com not in the list of agents or on docs.newrelic.com; New Relic Example Code, New Relic Experimental and Archived repos are explicitly out of scope.", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "https://iopipe.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://one.newrelic.com/help-xp - This specific endpoint is excluded from scope", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://newrelic.com/lp/1mind-ai-chat", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-c3256a2af6f43a79.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-e12a5f0e456f4fa4", "name": "Nextup.ai", "program_url": "https://bugcrowd.com/engagements/nextupai", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:42Z", "scope_published_at": "2022-10-06T18:31:45.464Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/nextupai/changelog/c7330ea0-1a3b-4b36-bc30-da642d8576b5.json" ], "in_scope": [ { "name": "████████████████████████████████████████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "██████████████████████████████████████████████████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "███████████████████████████████████████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "██████████████████████████████████████████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "████████████████████████████████████████████████████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-e12a5f0e456f4fa4.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-6a819e4aafe414d2", "name": "Northwestern Mutual - Public Bug Bounty", "program_url": "https://bugcrowd.com/engagements/northwestern-mutual-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $6,000", "reward_min": "$200", "reward_max": "$6,000", "scope_rank": 3, "access_status": "open", "industry": "Insurance", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:43Z", "scope_published_at": "2026-10-01T15:33:26.210Z", "scope_group_count": 5, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/northwestern-mutual-mbb-og/changelog/023b04b9-26c1-48eb-8fe2-142a83ebc901.json" ], "in_scope": [ { "name": "Anything Owned by Northwestern Mutual on the Public Internet Not Listed as Out of Scope", "asset_type": "website", "location": null, "group": "🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual" }, { "name": "216.20.176.0/20", "asset_type": "website", "location": null, "group": "🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual" }, { "name": "*.northwesternmutual.com", "asset_type": "website", "location": "https://northwesternmutual.com", "group": "🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual" }, { "name": "*.nml.com", "asset_type": "website", "location": "https://*.nml.com", "group": "🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual" }, { "name": "*.nmfn.com", "asset_type": "website", "location": "https://*.nmfn.com", "group": "🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual" }, { "name": "NM Android Mobile App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.nm.nm&hl=en_US&gl=US", "group": "🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual" }, { "name": "NM iOS Mobile App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/northwestern-mutual/id1132579006", "group": "🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual" }, { "name": "Anything that Clearly Affects Northwestern Mutual But is Not Own by Northwestern Mutual", "asset_type": "website", "location": null, "group": "🐞 In Scope - Other Public Targets (Vulnerability Disclosure)" } ], "out_of_scope": [ { "name": "northwesternmutual.com/find-a-financial-advisor/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/financial/advisor/*", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/careers-apply/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/report-a-death/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/notice-of-long-term-care-form/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/financial-professionals/?name=*", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/notice-of-disability-form/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/notice-of-group-disability-form/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "Any Domain that Follows the Pattern */webforms/nmfnForms/*", "asset_type": "website", "location": null, "group": "❌ Temporary Rules" }, { "name": "servicenmfn.awms.apps.northwesternmutual.com/webforms/nmfnForms/*", "asset_type": "website", "location": null, "group": "❌ Temporary Rules" }, { "name": "servicenmfnstage.awms.apps.northwesternmutual.com/webforms/nmfnForms/*", "asset_type": "website", "location": null, "group": "❌ Temporary Rules" }, { "name": "servicenmfntest.awms.apps.northwesternmutual.com/webforms/nmfnForms/*", "asset_type": "website", "location": null, "group": "❌ Temporary Rules" }, { "name": "service.nmfn.com/webforms/nmfnForms/*", "asset_type": "website", "location": null, "group": "❌ Temporary Rules" }, { "name": "servicestage.nmfn.com/webforms/nmfnForms/*", "asset_type": "website", "location": null, "group": "❌ Temporary Rules" }, { "name": "servicetest.nmfn.com/webforms/nmfnForms/*", "asset_type": "website", "location": null, "group": "❌ Temporary Rules" }, { "name": "calculator.northwesternmutual.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "gbpwealth.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "mymhs.nmfn.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "nmresearchlibrary.nml.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "nwm.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "sparks-financial.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "theandersonfinancialgroupnm.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "themint.org", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "21fiveca.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "Emerald Publications", "asset_type": "ip_address", "location": null, "group": "❌ Out of Scope - Known Third Party" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-6a819e4aafe414d2.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-52bd57313a7f7e27", "name": "Nubank Brasil Managed Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/nubank", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $4,000", "reward_min": "$50", "reward_max": "$4,000", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:13Z", "scope_published_at": null, "scope_group_count": null, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/nubank/changelog/90947bf4-bb77-470a-85a7-a71bc80b9ef2.json" ], "in_scope": [ { "name": "Nubank Android: Play Store", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.nu.production&hl=pt_BR&gl=US&pli=1", "group": "Core Assets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Nubank iOS App", "asset_type": "ios", "location": "https://apps.apple.com/br/app/nubank-conta-e-cart%C3%A3o/id814456780", "group": "Core Assets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "prod-*.nubank.com.br", "asset_type": "api", "location": null, "group": "Core Assets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "prod-*.nu.com.mx", "asset_type": "api", "location": null, "group": "Core Assets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "prod-*.nu.com.co", "asset_type": "api", "location": null, "group": "Core Assets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.nubank.com.br", "asset_type": "other", "location": "https://nubank.com.br/", "group": "Primary Assets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.nu.com.mx", "asset_type": "other", "location": "https://nubank.com.mx", "group": "Primary Assets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.nu.com.co", "asset_type": "other", "location": "https://nubank.com.co", "group": "Primary Assets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.nuinvest.com.br", "asset_type": "website", "location": "https://www.nuinvest.com.br/", "group": "Supplementary Assets", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "*.nuinternational.com", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.nat-a.nubank.com.br", "asset_type": "other", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "international.nubank.com.br", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "NuCommunity endpoints (BR, MX, CO)", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] } ], "policy_review_state": "verified_policy_record", "verified_policy_id": "nubank-brasil-bug-bounty", "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-52bd57313a7f7e27.md", "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ] }, { "id": "bugcrowd-872c27a03a553259", "name": "Octopus", "program_url": "https://bugcrowd.com/engagements/octopus-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $6,000", "reward_min": "$200", "reward_max": "$6,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:44Z", "scope_published_at": "2026-09-07T08:41:14.292Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/octopus-og/changelog/b99d1ef0-f64e-463b-9c35-e2a080e7ee8d.json" ], "in_scope": [ { "name": "*.octopus.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "Octopus Deploy Git Repo", "asset_type": "other", "location": "https://github.com/OctopusDeploy", "group": "In Scope" }, { "name": "octopus.com", "asset_type": "website", "location": "https://octopus.com", "group": "In Scope" } ], "out_of_scope": [ { "name": "partners.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.octopus.app", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "artifactorysample.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "bamboosample.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "jenkinssample.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "teamcitysample.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "nexussample.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "myget.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "trust.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "i.octopus.com", "asset_type": "other", "location": null, "group": "Out of scope targets" }, { "name": "ir.octopus.com", "asset_type": "other", "location": null, "group": "Out of scope targets" }, { "name": "shop.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-872c27a03a553259.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-f0d49161a55c2e21", "name": "Octopus Deploy", "program_url": "https://bugcrowd.com/engagements/octopus-deploy", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $6,000", "reward_min": "$200", "reward_max": "$6,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:45Z", "scope_published_at": "2025-10-28T02:04:41.378Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/octopus-deploy/changelog/e680db64-f4c3-4e11-bb1f-db7b32c2b905.json" ], "in_scope": [ { "name": "Octopus Tentacle", "asset_type": "other", "location": "https://octopus.com/downloads", "group": "In Scope" }, { "name": "Octopus Server", "asset_type": "other", "location": "https://octopus.com/downloads", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-f0d49161a55c2e21.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-c83dcd73ad17a9b0", "name": "oDesk", "program_url": "https://bugcrowd.com/engagements/odesk", "program_type": "unknown", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:03:19Z", "scope_published_at": "2020-02-13T00:30:15.122Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/odesk/changelog/d227fbed-0493-486e-a073-7dd275423337.json" ], "in_scope": [ { "name": "███████████", "asset_type": "other", "location": null, "group": "████████" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-c83dcd73ad17a9b0.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-ca27e2d750e1bf5b", "name": "Okapya", "program_url": "https://bugcrowd.com/engagements/okapya", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:46Z", "scope_published_at": "2026-09-03T14:56:36.501Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/okapya/changelog/7589ea6b-f167-4ca8-8e62-134ba3af5c61.json" ], "in_scope": [ { "name": "Connectors for Jira (Atlassian Marketplace App) - https://marketplace.atlassian.com/apps/1233908/connectors-for-jira-free?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233908/connectors-for-jira-free?hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-ca27e2d750e1bf5b.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-758420a1e8b43734", "name": "Okta", "program_url": "https://bugcrowd.com/engagements/okta", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $75,000", "reward_min": "$100", "reward_max": "$75,000", "scope_rank": 4, "access_status": "open", "industry": "Cloud", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:17Z", "scope_published_at": null, "scope_group_count": null, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/okta/changelog/d4dc2398-db8d-4b89-9f7f-0aae75251307.json" ], "in_scope": [ { "name": "bugcrowd-pam-###.oktapreview.com", "asset_type": "website", "location": null, "group": "Okta Privileged Access", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "bugcrowd-pam-###.pam.oktapreview.com", "asset_type": "website", "location": null, "group": "Okta Privileged Access", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://bugcrowd-pam-###.workflows.oktapreview.com", "asset_type": "website", "location": null, "group": "Okta Workflows", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Desktop MFA for Windows", "asset_type": "other", "location": null, "group": "Okta Device Access", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Desktop MFA for macOS", "asset_type": "other", "location": null, "group": "Okta Device Access", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Password Sync for macOS", "asset_type": "other", "location": null, "group": "Okta Device Access", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "support.okta.com", "asset_type": "website", "location": "https://support.okta.com", "group": "Okta Support Portal (support.okta.com)", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://bugcrowd-pam-###.at.oktapreview.com", "asset_type": "website", "location": null, "group": "AtSpoke (Okta Access Requests) (New)", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://bugcrowd-pam-###.oktapreview.com", "asset_type": "website", "location": null, "group": "Okta (OIE) In-Scope Targets (New)", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Okta Verify Fastpass", "asset_type": "other", "location": "https://www.okta.com/fastpass/", "group": "Okta (OIE) In-Scope Targets (New)", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://bugcrowd-pam-###-admin.oktapreview.com", "asset_type": "website", "location": null, "group": "Okta (OIE) In-Scope Targets (New)", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Advanced Server Access (ASA) / (ScaleFT)", "asset_type": "website", "location": "https://www.okta.com/products/advanced-server-access/", "group": "Advanced Server Access", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "http://app.scaleft.com/", "asset_type": "website", "location": null, "group": "Advanced Server Access", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Advanced Server Access Client / Agents", "asset_type": "other", "location": "https://help.okta.com/asa/en-us/Content/Topics/Adv_Server_Access/docs/client.htm", "group": "Advanced Server Access", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Okta Verify (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/okta-verify/id490179405", "group": "Other In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Okta Verify (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.okta.android.auth&hl=en_US&gl=US", "group": "Other In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Okta Verify (Mac OS)", "asset_type": "other", "location": "https://apps.apple.com/us/app/okta-verify/id490179405", "group": "Other In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Okta Verify (Windows)", "asset_type": "other", "location": null, "group": "Other In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Okta On-Prem Agents ( AD, LDAP, RDP, IWA )", "asset_type": "other", "location": null, "group": "Other In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Okta Agent Windows", "asset_type": "other", "location": "https://help.okta.com/en/prod/Content/Topics/Adv_Server_Access/docs/sftd-windows.htm", "group": "Other In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Okta Browser Plugin (IE / Firefox / Chrome)", "asset_type": "other", "location": "https://help.okta.com/en/prod/Content/Topics/Settings/download-browser-plugin.htm", "group": "Other In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "personal.trexcloud.com", "asset_type": "website", "location": null, "group": "Okta Personal", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "bugcrowd-%username%-1.oktapreview.com", "asset_type": "website", "location": null, "group": "Okta (Classic) In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "bugcrowd-%username%-2.oktapreview.com", "asset_type": "website", "location": null, "group": "Okta (Classic) In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.okta.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.trexcloud.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "login.okta.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "pages.okta.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "developer.okta.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "trust.okta.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "www.okta.com (static site)", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://scaleft.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://app.scaleft.com/p/signup", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://github.com/oktadev", "asset_type": "website", "location": "https://github.com/oktadev", "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Backend Okta non-app infrastructure", "asset_type": "other", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Network layer issues", "asset_type": "other", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "AtSpoke - Okta Workflows actions in access requests", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "AtSpoke - Entitlement bundles as a resource in access requests", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Anything not explicitly called out above as in-scope", "asset_type": "other", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] } ], "policy_review_state": "verified_policy_record", "verified_policy_id": "okta-bug-bounty", "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-758420a1e8b43734.md", "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ] }, { "id": "bugcrowd-bc1852a81ee6062a", "name": "OneTrust", "program_url": "https://bugcrowd.com/engagements/onetrust", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$300 - $6,500", "reward_min": "$300", "reward_max": "$6,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "P1 24/7", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:19Z", "scope_published_at": null, "scope_group_count": null, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/onetrust/changelog/33280231-4d3c-4ce3-9c8f-8d8ee98aeec7.json" ], "in_scope": [ { "name": "https://pentest-app.onetrust.com/", "asset_type": "website", "location": "https://pentest-app.onetrust.com/", "group": "In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "https://*.onetrust.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://store.onetrust.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.convercent.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.dataguidance.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://app.vendorpedia.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.preferencechoice.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.redacted.ai", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.sharedassessments.org", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://developer.onetrust.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://my.onetrust.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.vendorpedia.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.onetrustgrc.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.cookiepro.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://tv.onetrust.com/", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.cookielaw.org", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.onetrustpro.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.privacyconnect.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.onetrust.de", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.onetrust.se", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.onetrust.es", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.onetrust.fr", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.onetrust.it", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.privacytech.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.privacypedia.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.esgiq.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.trustweek2021.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] } ], "policy_review_state": "verified_policy_record", "verified_policy_id": "onetrust-bug-bounty", "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-bc1852a81ee6062a.md", "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ] }, { "id": "bugcrowd-ab096e58d404fd6b", "name": "Onward Software Solutions Inc. - Marketplace Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/onward-software-solutions-inc", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:47Z", "scope_published_at": "2026-08-13T03:55:15.625Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/onward-software-solutions-inc/changelog/f6331dac-f269-4d8b-8d82-42f2b0c24171.json" ], "in_scope": [ { "name": "OnLink - HR Systems Integration for Jira - https://marketplace.atlassian.com/apps/1231655/onlink-hr-systems-integration-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231655/onlink-hr-systems-integration-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "OnRamp - Employee Onboarding and Offboarding - https://marketplace.atlassian.com/apps/1232053/onramp-employee-onboarding-and-offboarding?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1232053/onramp-employee-onboarding-and-offboarding?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "OnLink AI - Integrations Toolkit - https://marketplace.atlassian.com/apps/1235010/onlink-ai-integration-toolkit-to-automate-your-workflows?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235010/onlink-ai-integration-toolkit-to-automate-your-workflows?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-ab096e58d404fd6b.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-00daeb0512f7127a", "name": "OpenAI", "program_url": "https://bugcrowd.com/engagements/openai", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $6,500", "reward_min": "$50", "reward_max": "$6,500", "scope_rank": 3, "access_status": "open", "industry": "Technology", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:20Z", "scope_published_at": null, "scope_group_count": null, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/openai/changelog/e76106d3-3796-492b-9997-569446b51b72.json" ], "in_scope": [ { "name": "api.openai.com", "asset_type": "api", "location": "https://api.openai.com", "group": "API Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "ChatGPT", "asset_type": "website", "location": "https://chat.openai.com", "group": "ChatGPT", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "ChatGPT Plugins", "asset_type": "api", "location": "https://chat.openai.com", "group": "ChatGPT", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Third Party Targets", "asset_type": "website", "location": null, "group": "Third Party Corporate Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "OpenAI API Keys", "asset_type": "api", "location": null, "group": "OpenAI API Keys", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://openai.org", "asset_type": "website", "location": "https://*.openai.org", "group": "OpenAI Research Org", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.openai.org", "asset_type": "api", "location": "https://*.openai.org", "group": "OpenAI Research Org", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "openai.com", "asset_type": "website", "location": "https://openai.com/", "group": "Other OpenAI Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.openai.com", "asset_type": "other", "location": null, "group": "Other OpenAI Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Developer Platform Playground", "asset_type": "website", "location": "https://platform.openai.com/playground", "group": "Other OpenAI Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Other", "asset_type": "other", "location": null, "group": "Other OpenAI Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Codex Desktop", "asset_type": "other", "location": null, "group": "Codex", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [], "policy_review_state": "verified_policy_record", "verified_policy_id": "openai-security-bug-bounty", "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-00daeb0512f7127a.md", "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ] }, { "id": "bugcrowd-8aad9224e529fec9", "name": "OpenSea Managed Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/opensea", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$125 - $3,000,000", "reward_min": "$125", "reward_max": "$3,000,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:48Z", "scope_published_at": "2026-09-01T19:23:26.211Z", "scope_group_count": 11, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/opensea/changelog/fcf4828b-8af5-4c9a-9516-6b41140343eb.json" ], "in_scope": [ { "name": "opensea.io", "asset_type": "website", "location": "https://opensea.io/", "group": "Opensea.io" }, { "name": "http://wallet.opensea.io/", "asset_type": "website", "location": "http://wallet.opensea.io/", "group": "Embedded Wallet Experience Powered by Privy" }, { "name": "io.opensea - Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=io.opensea&hl=en_US&gl=US", "group": "io.opensea - Android App" }, { "name": "io.opensea - iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/opensea-nft-marketplace/id1582861796", "group": "io.opensea - iOS App" }, { "name": "OpenSea MCP", "asset_type": "other", "location": "https://mcp.opensea.io", "group": "OpenSea MCP" }, { "name": "https://github.com/ProjectOpenSea/seaport#deployments", "asset_type": "other", "location": "https://github.com/ProjectOpenSea/seaport#deployments", "group": "Seaport Deployment" }, { "name": "https://etherscan.io/address/0x0000a26b00c1F0DF003000390027140000fAa719", "asset_type": "other", "location": "https://etherscan.io/address/0x0000a26b00c1F0DF003000390027140000fAa719", "group": "Fee Collector Smart Contract" }, { "name": "https://etherscan.io/address/0x00005EA00Ac477B1030CE78506496e8C2dE24bf5", "asset_type": "other", "location": "https://etherscan.io/address/0x00005EA00Ac477B1030CE78506496e8C2dE24bf5", "group": "Seadrop Smart Contract" }, { "name": "OpenSea Solana Marketplace Program", "asset_type": "other", "location": null, "group": "OpenSea Solana Marketplace Program" }, { "name": "Agent SDKs", "asset_type": "other", "location": null, "group": "OpenSea Agent SDKs" }, { "name": "Broken Link", "asset_type": "website", "location": null, "group": "Broken Links" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-8aad9224e529fec9.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-a216bcdd2eca3cdd", "name": "Opera Public Bug Bounty", "program_url": "https://bugcrowd.com/engagements/opera", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $5,000", "reward_min": "$50", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:50Z", "scope_published_at": "2026-05-11T10:02:25.561Z", "scope_group_count": 4, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/opera/changelog/da132bfc-7cac-47cb-b07b-8069d169a63e.json" ], "in_scope": [ { "name": "auth.opera.com", "asset_type": "website", "location": "https://auth.opera.com", "group": "Primary Targets" }, { "name": "accounts.opera.com", "asset_type": "api", "location": "https://accounts.opera.com", "group": "Primary Targets" }, { "name": "flow.opera.com", "asset_type": "api", "location": "https://flow.opera.com", "group": "Primary Targets" }, { "name": "autoupdate.geo.opera.com", "asset_type": "api", "location": "https://autoupdate.geo.opera.com", "group": "Primary Targets" }, { "name": "net.geo.opera.com", "asset_type": "api", "location": "https://net.geo.opera.com", "group": "Primary Targets" }, { "name": "download.opera.com", "asset_type": "website", "location": "https://download.opera.com", "group": "Primary Targets" }, { "name": "speeddials.opera.com", "asset_type": "api", "location": "https://speeddials.opera.com", "group": "Primary Targets" }, { "name": "browser-notifications.opera.com", "asset_type": "api", "location": "https://browser-notifications.opera.com", "group": "Primary Targets" }, { "name": "www.opera.com", "asset_type": "website", "location": "https://www.opera.com/", "group": "Primary Targets" }, { "name": "Opera PC", "asset_type": "other", "location": "https://www.opera.com/computer/thanks?ni=stable&os=windows", "group": "Primary Targets" }, { "name": "Opera GX", "asset_type": "other", "location": "https://www.opera.com/computer/thanks?ni=eapgx&os=windows", "group": "Primary Targets" }, { "name": "Opera Neon", "asset_type": "other", "location": "https://www.operaneon.com", "group": "Primary Targets" }, { "name": "Opera Air", "asset_type": "other", "location": "https://www.opera.com/computer/thanks?ni=opera_air&os=windows", "group": "Primary Targets" }, { "name": "get.geo.opera.com", "asset_type": "website", "location": "https://get.geo.opera.com", "group": "Primary Targets" }, { "name": "Opera Mini", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.opera.mini.native", "group": "Mobile Targets" }, { "name": "Apex Football", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.opera.app.sports", "group": "Mobile Targets" }, { "name": "Opera for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.opera.browser", "group": "Mobile Targets" }, { "name": "Opera News", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.opera.app.news", "group": "Mobile Targets" }, { "name": "Opera GX for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.opera.gx", "group": "Mobile Targets" }, { "name": "Opera for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/opera-ai-browser-with-vpn/id1411869974", "group": "Mobile Targets" }, { "name": "Opera GX for iOS", "asset_type": "ios", "location": "https://apps.apple.com/pl/app/opera-gx/id1559740799", "group": "Mobile Targets" }, { "name": "MiniPay", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.opera.minipay", "group": "Mobile Targets" }, { "name": "cryptowallet.opera-api.com", "asset_type": "api", "location": "https://cryptowallet.opera-api.com", "group": "Secondary Targets" }, { "name": "suggestions.opera-api.com", "asset_type": "api", "location": "https://suggestions.opera-api.com", "group": "Secondary Targets" }, { "name": "*.opera.software", "asset_type": "other", "location": null, "group": "Secondary Targets" }, { "name": "weather.opera-api.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "push.opera.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.osp.opera.software", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "bugs.opera.com", "asset_type": "website", "location": "https://bugs.opera.com/", "group": "Secondary Targets" }, { "name": "*.opera.technology", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "https://gx.games", "asset_type": "website", "location": "https://gx.games", "group": "Secondary Targets" }, { "name": "https://create.gx.games", "asset_type": "website", "location": "https://create.gx.games", "group": "Secondary Targets" }, { "name": "https://gx.me", "asset_type": "website", "location": "https://gx.me", "group": "Secondary Targets" }, { "name": "features.opera-api.com", "asset_type": "api", "location": "https://features.opera-api.com", "group": "Secondary Targets" }, { "name": "cdn-store.opera-api.com", "asset_type": "api", "location": "https://cdn-store.opera-api.com", "group": "Secondary Targets" }, { "name": "*.sec-tunnel.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.opera.com", "asset_type": "website", "location": null, "group": "Secondary Targets" }, { "name": "exchange.opera.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "merchandise.opera-api.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "blocklist.opera-api.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "gx.opera-api.com", "asset_type": "api", "location": "https://gx.opera-api.com", "group": "Secondary Targets" }, { "name": "37.228.104.0/21", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "77.111.244.0/22", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "82.145.208.0/20", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "91.203.96.0/22", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "102.23.96.0/22", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "103.83.120.0/22", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "107.167.96.0/19", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "141.0.8.0/21", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "185.26.180.0/22", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "195.189.143.0/24", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "203.89.100.0/22", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "marketplace.gamemaker.io", "asset_type": "website", "location": null, "group": "Secondary Targets" }, { "name": "*.opera-mini.net", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.opera.news", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.operanewsapp.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "GameMaker Studio 2", "asset_type": "other", "location": null, "group": "Secondary Targets" }, { "name": "*.yoyogames.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "www.gamemaker.io", "asset_type": "website", "location": "https://www.gamemaker.io", "group": "Secondary Targets" }, { "name": "cashback.opera.com", "asset_type": "website", "location": "https://cashback.opera.com/", "group": "Secondary Targets" }, { "name": "*.apex-football.com", "asset_type": "website", "location": null, "group": "Secondary Targets" }, { "name": "*.operafootball.com", "asset_type": "website", "location": null, "group": "Secondary Targets" }, { "name": "*.feednews.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.dailyadvent.com", "asset_type": "website", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.games/gxc", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.games/dc", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.games/dev", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.games/profile", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.games/session", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.games/gms", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.games/gx", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.games/pub", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.me/me", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.apexnews.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.apexscores.io", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.opr.news", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.osite99.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.savi.xyz", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.rtbscale.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "ofp.adx.opera.com", "asset_type": "website", "location": "https://ofp.adx.opera.com", "group": "Secondary Targets" }, { "name": "ofa.adx.opera.com", "asset_type": "website", "location": "https://ofa.adx.opera.com", "group": "Secondary Targets" }, { "name": "cms.adx.opera.com", "asset_type": "website", "location": "https://cms.adx.opera.com", "group": "Secondary Targets" }, { "name": "auth-adx.op-mobile.opera.com", "asset_type": "website", "location": "https://auth-adx.op-mobile.opera.com", "group": "Secondary Targets" }, { "name": "*.adx.opera.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "operaneon.com", "asset_type": "website", "location": "https://operaneon.com", "group": "Secondary Targets" }, { "name": "api.neon.opera.com/neon/pub", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.neon.opera.com/neon/store", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.neon.opera.com/pub", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "https://neon.opera.com/cards/", "asset_type": "website", "location": "https://neon.opera.com/cards/", "group": "Secondary Targets" } ], "out_of_scope": [ { "name": "concurso.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "investor.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "help.yoyogames.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "bugs.yoyogames.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "admanager.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "accountsstage.yoyogames.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "control.gx-servers.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "help.gx-servers.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "verizon-us-seattle.opera-mini.net", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "s2{1,2}-05-08-v09.opera-mini.net", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "verizon-us-lvs-seattle.opera-mini.net", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "107.167.127.4{0,1}", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "jobs.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "verizon-us-lvs-ashburn.opera-mini.net", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "interstitial.opera-mini.net", "asset_type": "api", "location": null, "group": "Out of scope" }, { "name": "certs.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "checkout.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "contest.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "catch.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "wallpaper.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "tabfulness.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "32s.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-a216bcdd2eca3cdd.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-dce78967aa941ffc", "name": "Opsgenie", "program_url": "https://bugcrowd.com/engagements/opsgenie", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,000", "reward_min": "$100", "reward_max": "$4,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:51Z", "scope_published_at": "2026-04-07T21:21:19.663Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/opsgenie/changelog/ff365908-5159-4d8d-9895-43512891a90b.json" ], "in_scope": [ { "name": "app.opsgenie.com", "asset_type": "website", "location": "https://app.opsgenie.com", "group": "In Scope" }, { "name": "mobileapp.opsgenie.com", "asset_type": "website", "location": "https://mobileapp.opsgenie.com", "group": "In Scope" }, { "name": "*.opsgenie.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "Opsgenie (IoS)", "asset_type": "ios", "location": null, "group": "In Scope" }, { "name": "Opsgenie (Android)", "asset_type": "android", "location": null, "group": "In Scope" } ], "out_of_scope": [ { "name": "Opsgenie Production (billing systems, third parties)", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Any internal or development services.", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-dce78967aa941ffc.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-b733e2b078ea0162", "name": "Optimizely", "program_url": "https://bugcrowd.com/engagements/optimizely", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $3,500", "reward_min": "Points", "reward_max": "$3,500", "scope_rank": 3, "access_status": "open", "industry": "Business Management", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:52Z", "scope_published_at": "2026-09-30T19:31:29.243Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/optimizely/changelog/34794730-0036-45c7-b6c6-9a0b462b1233.json" ], "in_scope": [ { "name": "https://app.optimizely.com/", "asset_type": "website", "location": "https://app.optimizely.com/", "group": "In scope" }, { "name": "https://cdn.optimizely.com/", "asset_type": "website", "location": "https://cdn.optimizely.com/", "group": "In scope" }, { "name": "https://cdn-pci.optimizely.com/", "asset_type": "website", "location": "https://cdn-pci.optimizely.com/", "group": "In scope" }, { "name": "https://optimizely-edge.com", "asset_type": "website", "location": "https://optimizely-edge.com", "group": "In scope" }, { "name": "https://api.optimizely.com/", "asset_type": "api", "location": "https://api.optimizely.com/", "group": "In scope" }, { "name": "https://dxc.episerver.net/", "asset_type": "website", "location": "https://dxc.episerver.net/ ", "group": "In scope" }, { "name": "https://paasportal.episerver.net/", "asset_type": "website", "location": "https://paasportal.episerver.net/", "group": "In scope" }, { "name": "https://paasportal.episerver.net/api/v1.0/", "asset_type": "website", "location": "https://paasportal.episerver.net/api/v1.0/", "group": "In scope" }, { "name": "https://app.welcomesoftware.com/", "asset_type": "website", "location": "https://app.welcomesoftware.com/", "group": "In scope" }, { "name": "https://accounts.welcomesoftware.com/", "asset_type": "website", "location": "https://accounts.welcomesoftware.com/", "group": "In scope" }, { "name": "https://api.welcomesoftware.com/", "asset_type": "api", "location": "https://api.welcomesoftware.com/", "group": "In scope" }, { "name": "https://cdn-app.welcomesoftware.com/", "asset_type": "website", "location": "https://cdn-app.welcomesoftware.com/", "group": "In scope" }, { "name": "https://analytics.welcomesoftware.com/", "asset_type": "website", "location": "https://analytics.welcomesoftware.com/", "group": "In scope" }, { "name": "https://flags.expeng.optimizely.com", "asset_type": "api", "location": "https://flags.expeng.optimizely.com", "group": "In scope" }, { "name": "https://accounts.cmp.optimizely.com/", "asset_type": "website", "location": "https://accounts.cmp.optimizely.com/", "group": "In scope" } ], "out_of_scope": [ { "name": "https://www.optimizely.com/", "asset_type": "website", "location": "https://www.optimizely.com/", "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-b733e2b078ea0162.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-9e66537b932e44c2", "name": "Optus Managed Bug Bounty", "program_url": "https://bugcrowd.com/engagements/optus-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $5,000", "reward_min": "$150", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:53Z", "scope_published_at": "2026-06-24T05:08:42.545Z", "scope_group_count": 7, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/optus-mbb-og/changelog/e1f284c8-3041-4ae0-ab63-b76726884600.json" ], "in_scope": [ { "name": "Optus android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=au.com.optus.selfservice&hl=en_AU&gl=US", "group": "In Scope - Optus " }, { "name": "https://webmail.optusnet.com.au/", "asset_type": "website", "location": "https://webmail.optusnet.com.au/", "group": "In Scope - Optus " }, { "name": "Optus iOS App", "asset_type": "ios", "location": "https://apps.apple.com/au/app/my-optus/id503716230", "group": "In Scope - Optus " }, { "name": "*.optus.com.au", "asset_type": "website", "location": null, "group": "In Scope - Optus " }, { "name": "FM - EFRAMS", "asset_type": "website", "location": "https://www.outsourcing.optus.net.au/eFRAMS3/", "group": "In Scope - Optus " }, { "name": "FM2 – EFRAMS", "asset_type": "website", "location": "https://www.outsourcing2.optus.net.au/eFRAMS3/", "group": "In Scope - Optus " }, { "name": "OB PORTAL", "asset_type": "website", "location": "https://www.optus.com.au/osp-ecare", "group": "In Scope - Optus " }, { "name": "https://optus.my.site.com/MyHub/s/", "asset_type": "website", "location": "https://optus.my.site.com/MyHub/s/", "group": "In Scope - Optus " }, { "name": "Prepaid Activation", "asset_type": "website", "location": "https://www.optus.com.au/prepaid/activate", "group": "In Scope - Optus " }, { "name": "https://gateway.optus.com.au/api/ai-search/search/v1", "asset_type": "api", "location": null, "group": "Optus - AI Search " }, { "name": "vpn01.syd.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "172.24.250.128", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.65.253", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "Naasapi.optus.com.au", "asset_type": "api", "location": null, "group": "In scope - Infrastructure " }, { "name": "ras1.optus.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "ns1.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "ns2.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "dns0.optus.net.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "dns1.optus.net.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "ddosportal.optus.com.au", "asset_type": "network", "location": "https://ddosportal.optus.com.au", "group": "In scope - Infrastructure " }, { "name": "172.26.39.9", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "172.26.2.133", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.28.90.133", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.28.90.134", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.28.90.148", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.28.90.164", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.28.90.196", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "https://ogws.optusnet.com.au/", "asset_type": "website", "location": "https://ogws.optusnet.com.au/", "group": "In scope - Infrastructure " }, { "name": "https://oes.optusnet.com.au/", "asset_type": "website", "location": "https://oes.optusnet.com.au/", "group": "In scope - Infrastructure " }, { "name": "speedtest-sydney.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-newcastle.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-blacktown.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-melbourne.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-geelong.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-hobart.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-perth.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-broome.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-rockingham.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-eastburwood.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-brisbane.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-goldcoast.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-townsville.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "202.139.138.208/28", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.127.0/24", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.128.128/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.129.0/24", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.16.75.0/24", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.98.0/26", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.98.144/28", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.98.253/32", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.98.254/32", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.125.32/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.128.0/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.128.64/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.128.160/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.128.192/26", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.16.76.0/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.16.76.32/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.16.76.64/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.16.76.96/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.16.76.30", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.16.78.30", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.205.252", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.205.253", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.205.254", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.205.244", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.205.245", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.235.18", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.33", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.132.28", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.13", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.14", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.132.82", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.132.101", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.15", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.152", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.152.243", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.32", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.60", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.35", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.43", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.89", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.93.8", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.61", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.36", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.44", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.90", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.93.9", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.51", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.67", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.52", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.148", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.68", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.132.27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.161", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.91", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.163", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.128", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.149", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.150", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.5", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.21", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.6", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.22", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.3", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.19", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.4", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.20", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.104", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.94", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.107", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.185", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.132", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.108", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.124", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.116", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.100", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.140", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.92", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.133", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.109", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.125", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.101", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.141", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.93", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.151", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.244", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.96", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.152.202", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.97", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.115", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.132.223", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.93.5", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.93.6", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.152.120", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.152.114", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.152.97", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.98", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.231.44", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.231.36", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.231.45", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.231.37", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.74", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.75", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.76", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.77", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.78", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.79", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.80", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.81", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.82", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.7", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.8", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.9", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.13", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.14", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.15", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.16", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.17", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.18", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "61.88.222.56", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "61.88.222.57", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "61.88.222.58", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "61.88.222.59", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.172", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.180", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.188", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.196", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " } ], "out_of_scope": [ { "name": "https://www.optus.com.au/portal/*", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "personal.optus.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "yes4good.optus.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.optus.com.au/web/ocaportal.portal", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "103.213.120.0/24", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "103.213.121.0/24", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "ibs.optus.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "ibs2.optus.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.nsw.optusnet.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.vic.optusnet.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.wa.optusnet.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.sa.optusnet.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.qld.optusnet.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.nt.optusnet.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.act.optusnet.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.tas.optusnet.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "samsung-pp.optussport.tv", "asset_type": "website", "location": "https://samsung-pp.optussport.tv/", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "chromecast-pp.optussport.tv", "asset_type": "website", "location": "https://chromecast-pp.optussport.tv", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "api-cdn.optussport.info/api/", "asset_type": "api", "location": "https://api-cdn.optussport.info/api/*", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "static.sport-pp.optus.com.au/api/", "asset_type": "api", "location": "https://static.sport-pp.optus.com.au/api/*", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "stats-pp.akamai.optussport.tv", "asset_type": "api", "location": "https://stats-pp.akamai.optussport.tv", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "stats.optussport.info", "asset_type": "api", "location": "https://stats.optussport.info", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "cms-uat.optussport.tv", "asset_type": "website", "location": "https://cms-uat.optussport.tv", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "cms-qa.optussport.tv", "asset_type": "website", "location": "https://cms-qa.optussport.tv", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "static.cms-uat.optussport.tv", "asset_type": "website", "location": "https://static.cms-uat.optussport.tv", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "static.cms-qa.optussport.tv", "asset_type": "website", "location": "https://static.cms-qa.optussport.tv", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "Any other Optus Sport asset", "asset_type": "other", "location": null, "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "1.44.64.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "1.44.80.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "1.44.112.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "1.44.144.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "1.44.192.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.0.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.32.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.48.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.64.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.80.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.96.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.128.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.144.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.160.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.176.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "119.225.0.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "119.225.16.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "119.225.32.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "119.225.48.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "124.19.0.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "124.19.16.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "124.19.32.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "124.19.48.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "124.19.96.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "124.19.112.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "125.63.128.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "125.63.144.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "125.63.160.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "125.63.176.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "sport.optus.com.au", "asset_type": "website", "location": "https://sport.optus.com.au/", "group": "Out of Scope - Optus Sport Production" }, { "name": "chromecast.optussport.tv", "asset_type": "website", "location": "https://samsung.optussport.tv", "group": "Out of Scope - Optus Sport Production" }, { "name": "samsung.optussport.tv", "asset_type": "website", "location": "https://samsung.optussport.tv", "group": "Out of Scope - Optus Sport Production" }, { "name": "api-cdn.optussport.tv", "asset_type": "api", "location": "https://api-cdn.optussport.tv/api/*", "group": "Out of Scope - Optus Sport Production" }, { "name": "static.sport.optus.com.au", "asset_type": "api", "location": "https://static.sport.optus.com.au/api/*", "group": "Out of Scope - Optus Sport Production" }, { "name": "stats.sport.optus.com.au", "asset_type": "api", "location": "https://stats.sport.optus.com.au", "group": "Out of Scope - Optus Sport Production" }, { "name": "stats.akamai.optussport.tv", "asset_type": "api", "location": "https://stats.akamai.optussport.tv", "group": "Out of Scope - Optus Sport Production" }, { "name": "cms.optussport.tv", "asset_type": "website", "location": "https://cms.optussport.tv", "group": "Out of Scope - Optus Sport Production" }, { "name": "static.cms.optussport.tv", "asset_type": "website", "location": "https://static.cms.optussport.tv", "group": "Out of Scope - Optus Sport Production" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-9e66537b932e44c2.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-a9b77aadf6364449", "name": "Opus Guard Marketplace Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/opus-guard-market", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:54Z", "scope_published_at": "2026-07-08T21:07:20.275Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/opus-guard-market/changelog/51f20d7d-3c7d-4eee-b8fb-16d25d3dbe7e.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1233769/content-retention-manager-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233769/content-retention-manager-for-confluence?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1234057/content-retention-manager-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1234057/content-retention-manager-for-jira?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1237739?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237739?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1237740?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237740?tab=overview&hosting=cloud", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-a9b77aadf6364449.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-331f87409b14080b", "name": "Orderly Network Public Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/orderlynetwork-mbb-og2", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $9,000", "reward_min": "$200", "reward_max": "$9,000", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:55Z", "scope_published_at": "2025-07-10T19:56:51.274Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/orderlynetwork-mbb-og2/changelog/26b379db-8dce-4ac4-9792-2861ed518825.json" ], "in_scope": [ { "name": "████████████████████████", "asset_type": "website", "location": null, "group": "█████████████" }, { "name": "████████████████████████", "asset_type": "api", "location": null, "group": "█████████████" }, { "name": "████████████████████████████", "asset_type": "api", "location": null, "group": "█████████████" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-331f87409b14080b.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-0f2855e69aa69153", "name": "Orderly Network: Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/orderlynetwork-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $9,000", "reward_min": "$200", "reward_max": "$9,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:56Z", "scope_published_at": "2024-09-26T16:17:34.993Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/orderlynetwork-mbb-og/changelog/4248ff0c-264f-4a90-910a-2d3d5d5bcb33.json" ], "in_scope": [ { "name": "████████████████████████████", "asset_type": "api", "location": null, "group": "██████████████" }, { "name": "████████████████████████", "asset_type": "website", "location": null, "group": "██████████████" }, { "name": "████████████████████████", "asset_type": "api", "location": null, "group": "██████████████" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-0f2855e69aa69153.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-d59899b7c4f774ee", "name": "Origin Energy", "program_url": "https://bugcrowd.com/engagements/originenergy-og1", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $2,500", "reward_min": "$50", "reward_max": "$2,500", "scope_rank": 4, "access_status": "open", "industry": "Utilities", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:57Z", "scope_published_at": "2026-08-10T08:13:09.092Z", "scope_group_count": 10, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/originenergy-og1/changelog/0596f021-4ec5-453c-8ab9-08340895d163.json" ], "in_scope": [ { "name": "https://www.originenergy.com.au/", "asset_type": "website", "location": "https://www.originenergy.com.au/", "group": "In Scope - Origin" }, { "name": "*.origindigital-pac.com.au", "asset_type": "website", "location": null, "group": "In Scope - Origin" }, { "name": "*.odcdn.com.au", "asset_type": "website", "location": null, "group": "In Scope - Origin" }, { "name": "dataportal.originenergy.com.au", "asset_type": "website", "location": "https://dataportal.originenergy.com.au", "group": "In Scope - Origin" }, { "name": "*.support.originenergy.com.au", "asset_type": "website", "location": null, "group": "In Scope - Origin" }, { "name": "*.api.originenergy.com.au", "asset_type": "api", "location": null, "group": "In Scope - Origin" }, { "name": "*.download.originenergy.com.au", "asset_type": "website", "location": null, "group": "In Scope - Origin" }, { "name": "https://api.rx.originenergy.com.au/v1/lpg/graphql", "asset_type": "api", "location": "https://api.rx.originenergy.com.au/v1/lpg/graphql", "group": "API - Origin" }, { "name": "https://www.winconnect.com.au/moving-out/", "asset_type": "website", "location": "https://www.winconnect.com.au/moving-out/", "group": "Winconnect" }, { "name": "https://www.winconnect.com.au/get-connected/", "asset_type": "website", "location": "https://www.winconnect.com.au/get-connected/", "group": "Winconnect" }, { "name": "https://customerportal.winconnect.com.au/login", "asset_type": "website", "location": "https://customerportal.winconnect.com.au/login", "group": "Winconnect" }, { "name": "portal.myconnect.com.au", "asset_type": "website", "location": null, "group": "MyConnect" }, { "name": "myconnect.com.au", "asset_type": "website", "location": null, "group": "MyConnect" }, { "name": "portal.myconnect.com.au/new-connection", "asset_type": "website", "location": null, "group": "MyConnect" }, { "name": "hub.myconnect.com.au", "asset_type": "website", "location": null, "group": "MyConnect" }, { "name": "ssu.staging.myconnect.com.au", "asset_type": "website", "location": "https://ssu.staging.myconnect.com.au/get-connected", "group": "MyConnect" }, { "name": "portal.anz.kinergysolutions.com", "asset_type": "website", "location": "https://portal.anz.kinergysolutions.com", "group": "Kinergy" }, { "name": "portal-api.anz.kinergysolutions.com", "asset_type": "api", "location": "https://portal-api.anz.kinergysolutions.com", "group": "Kinergy" }, { "name": "portal.originzero.com.au", "asset_type": "website", "location": "https://portal.originzero.com.au", "group": "Origin Zero" }, { "name": "api-portal.originzero.com.au", "asset_type": "api", "location": "https://api-portal.originzero.com.au", "group": "Origin Zero" }, { "name": "sign.originzero.com.au", "asset_type": "website", "location": "https://sign.originzero.com.au", "group": "Origin Zero" }, { "name": "businessportal.origin.com.au", "asset_type": "website", "location": "https://businessportal.origin.com.au", "group": "MyBusiness" }, { "name": "api-businessportal.origin.com.au", "asset_type": "api", "location": "https://api-businessportal.origin.com.au", "group": "MyBusiness" } ], "out_of_scope": [ { "name": "https://www.originenergy.com.au/moving/", "asset_type": "website", "location": "https://www.originenergy.com.au/moving/", "group": "Out of Scope" }, { "name": "https://auth.api.originenergy.com.au/**", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://origin-energy.formstack.com/**", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://ssu.myconnect.com.au/", "asset_type": "website", "location": "https://ssu.myconnect.com.au/**", "group": "Out of Scope" }, { "name": "Renew Eclipse", "asset_type": "website", "location": "https://reneweclipse.originenergy.com.au/*", "group": "Out of Scope" }, { "name": "GraphQL Schema", "asset_type": "other", "location": "https://api.rx.originenergy.com.au/v1/gateway/schema/graphql", "group": "Out of Scope" }, { "name": "https://www.compareandconnect.com.au/", "asset_type": "website", "location": null, "group": "1Bill" }, { "name": "https://agent.compareandconnect.com.au/", "asset_type": "website", "location": null, "group": "1Bill" }, { "name": "https://fastconnect.co.nz", "asset_type": "website", "location": null, "group": "1Bill" }, { "name": "https://Yourporter.com.au", "asset_type": "website", "location": null, "group": "1Bill" }, { "name": "https://raywhitehomenow.com/", "asset_type": "website", "location": null, "group": "1Bill" }, { "name": "solarquotes.com.au/leads", "asset_type": "website", "location": "https://www.solarquotes.com.au/leads/", "group": "SolarQuotes" }, { "name": "solarquotes.com.au/suppliers", "asset_type": "website", "location": "https://www.solarquotes.com.au/suppliers/", "group": "SolarQuotes" }, { "name": "solarquotes.com.au/wp-admin", "asset_type": "website", "location": "https://www.solarquotes.com.au/wp-admin/", "group": "SolarQuotes" }, { "name": "manufacturers.solarquotes.com.au", "asset_type": "website", "location": "https://manufacturers.solarquotes.com.au/", "group": "SolarQuotes" }, { "name": "solarquotes.com.au/quote/start", "asset_type": "website", "location": "https://www.solarquotes.com.au/quote/start/", "group": "SolarQuotes" }, { "name": "solarquotes.com.au/quotesv2", "asset_type": "website", "location": "https://www.solarquotes.com.au/quotesv2/", "group": "SolarQuotes" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-d59899b7c4f774ee.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-756e4fbd08de38da", "name": "OSL Managed Public Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/osl-mbb-og1", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $1,500", "reward_min": "Points", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:58Z", "scope_published_at": "2026-03-31T15:59:29.712Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/osl-mbb-og1/changelog/fcc595ef-dd4c-4cef-ae4d-875b75364d2f.json" ], "in_scope": [ { "name": "www.osl.com/hk-en", "asset_type": "website", "location": "https://www.osl.com/hk-en", "group": "In scope" }, { "name": "www.osl.com/en", "asset_type": "website", "location": "https://www.osl.com/en", "group": "In scope" }, { "name": "OSL Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.oslmobile.global", "group": "In scope" }, { "name": "OSL iOS app", "asset_type": "ios", "location": "https://apps.apple.com/es/app/osl-buy-bitcoin-crypto/id6743699672", "group": "In scope" } ], "out_of_scope": [ { "name": "https://www.osl.com/id-id", "asset_type": "website", "location": null, "group": "Out of the Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-756e4fbd08de38da.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-f2a920ecc6c44f7f", "name": "OST Consulting SRL Marketplace Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/ost-consulting-market", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:59Z", "scope_published_at": "2026-08-19T23:41:24.254Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ost-consulting-market/changelog/829f9481-6525-4107-b1c4-586691d1e28e.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1230344/issue-templates-for-jira-cloud?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230344/issue-templates-for-jira-cloud?hosting=cloud", "group": "In Scope Target " }, { "name": "https://atlassian.ost-consulting.be", "asset_type": "api", "location": "https://atlassian.ost-consulting.be", "group": "In Scope Target " }, { "name": "https://marketplace.atlassian.com/apps/1233398/easy-clone-for-jira-cloud-free?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233398/easy-clone-for-jira-cloud-free?hosting=cloud&tab=overview", "group": "In Scope Target " }, { "name": "https://marketplace.atlassian.com/apps/1235901/html-macro-pro-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235901/html-macro-pro-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Target " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-f2a920ecc6c44f7f.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-8f1a9b3c0c0b42d6", "name": "Pantheon", "program_url": "https://bugcrowd.com/engagements/pantheon", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $500", "reward_min": "Points", "reward_max": "$500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:00Z", "scope_published_at": "2026-01-28T02:35:02.851Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/pantheon/changelog/5cf4f3ff-0610-4e20-87ae-b124f3d63dc8.json" ], "in_scope": [ { "name": "https://dashboard.pantheon.io", "asset_type": "other", "location": "https://dashboard.pantheon.io", "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-8f1a9b3c0c0b42d6.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-fa258de553288fb4", "name": "Pexels", "program_url": "https://bugcrowd.com/engagements/pexels", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $6,000", "reward_min": "$100", "reward_max": "$6,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:01Z", "scope_published_at": "2026-09-09T04:06:43.452Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/pexels/changelog/3873b40e-2e15-4d7e-9134-6655143961ce.json" ], "in_scope": [ { "name": "*.pexels.com", "asset_type": "website", "location": "https://www.pexels.com/", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-fa258de553288fb4.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-b4834546e3a7fbe4", "name": "Pinterest", "program_url": "https://bugcrowd.com/engagements/pinterest", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $25,000", "reward_min": "$200", "reward_max": "$25,000", "scope_rank": 4, "access_status": "open", "industry": "Media", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:02Z", "scope_published_at": "2025-11-04T14:51:44.478Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/pinterest/changelog/404acb1a-eb4d-4fd9-9c00-ebbfce65d845.json" ], "in_scope": [ { "name": "api.pinterest.com", "asset_type": "api", "location": "https://api.pinterest.com", "group": "in scope" }, { "name": "*.pinterest.com Web Apps", "asset_type": "website", "location": null, "group": "in scope" }, { "name": "Pinterest iOS Mobile Application", "asset_type": "ios", "location": "https://apps.apple.com/us/app/pinterest/id429047995", "group": "in scope" }, { "name": "Pinterest Android Mobile Application", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.pinterest&hl=en_US&gl=US", "group": "in scope" }, { "name": "Pinterest Lite Android Mobile Application", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.pinterest.twa&hl=en_US&gl=US", "group": "in scope" }, { "name": "Chrome extension (download at: chrome.google.com/webstore/detail/pinterest-save-button/gpdjojdkbbmdfjfahjcgigfpmkopogic?hl=en)", "asset_type": "other", "location": "https://chrome.google.com/webstore/detail/pinterest-save-button/gpdjojdkbbmdfjfahjcgigfpmkopogic?hl=en", "group": "in scope" }, { "name": "Edge extension (download at: https://microsoftedge.microsoft.com/addons/detail/pinterest-save-button/bkgoflemacdadndiohhdnphcmdhacabg)", "asset_type": "other", "location": "https://microsoftedge.microsoft.com/addons/detail/pinterest-save-button/bkgoflemacdadndiohhdnphcmdhacabg", "group": "in scope" }, { "name": "Firefox extension (download at: https://addons.mozilla.org/firefox/addon/pinterest/)", "asset_type": "other", "location": "https://addons.mozilla.org/en-US/firefox/addon/pinterest/", "group": "in scope" }, { "name": "Safari extension (download at: https://apps.apple.com/us/app/save-to-pinterest/id6473649042)", "asset_type": "other", "location": "https://apps.apple.com/us/app/save-to-pinterest/id6473649042", "group": "in scope" }, { "name": "Open source projects(non-forked) listed at github.com/pinterest/", "asset_type": "other", "location": "https://github.com/pinterest/", "group": "in scope" }, { "name": "https://www.shffls.com", "asset_type": "website", "location": "https://www.shffls.com", "group": "in scope" }, { "name": "Shuffles App for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.pinterest.shuffles", "group": "in scope" }, { "name": "Shuffles App for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/shuffles-by-pinterest/id1573869498", "group": "in scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-b4834546e3a7fbe4.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-571e7853e571876f", "name": "Pixabay", "program_url": "https://bugcrowd.com/engagements/pixabay", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $6,000", "reward_min": "$100", "reward_max": "$6,000", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:03Z", "scope_published_at": "2024-12-13T17:28:32.921Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/pixabay/changelog/398d040b-fc5d-403a-87b4-bf0a523f7ed0.json" ], "in_scope": [ { "name": "*.pixabay.com/", "asset_type": "website", "location": "https://pixabay.com/", "group": "In Scope targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-571e7853e571876f.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-ffe80e0a39b98503", "name": "PlanetHoster Bug Bounty", "program_url": "https://bugcrowd.com/engagements/planethosterinc", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $3,000", "reward_min": "$200", "reward_max": "$3,000", "scope_rank": 1, "access_status": "open", "industry": "Cloud", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:04Z", "scope_published_at": "2026-07-14T13:54:09.748Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/planethosterinc/changelog/135dcfde-cc84-4d0a-a183-c5e4938a8067.json" ], "in_scope": [ { "name": "my.planethoster.com", "asset_type": "website", "location": "https://my.planethoster.com", "group": "In Scope " }, { "name": "api.planethoster.net", "asset_type": "api", "location": "https://api.planethoster.net", "group": "In Scope " }, { "name": "world.planethoster.net", "asset_type": "website", "location": "https://world.planethoster.net", "group": "In Scope " }, { "name": "https://mg.n0c.com/", "asset_type": "website", "location": "https://mg.n0c.com/", "group": "In Scope " }, { "name": "www.planethoster.com", "asset_type": "website", "location": "https://www.planethoster.com", "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-ffe80e0a39b98503.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-26955c64dcfb76a4", "name": "Plusgrade Loyalty Public Program", "program_url": "https://bugcrowd.com/engagements/plusgrade-mbb-public", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $5,000", "reward_min": "$150", "reward_max": "$5,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:05Z", "scope_published_at": "2025-10-30T22:52:33.905Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/plusgrade-mbb-public/changelog/2392574e-a42e-4703-bde5-d1ba5d23b325.json" ], "in_scope": [ { "name": "*.points.com", "asset_type": "website", "location": null, "group": "Loyalty" }, { "name": "Additional Loyalty scope included under resources tab", "asset_type": "website", "location": null, "group": "Loyalty" } ], "out_of_scope": [ { "name": "Partner Website & Applications", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "Anything not explicitly listed as in-scope", "asset_type": "website", "location": null, "group": "Out-Of-Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-26955c64dcfb76a4.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-0670535f899adf47", "name": "PNI Media - Bug Bounty", "program_url": "https://bugcrowd.com/engagements/pnimedia-bb", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $4,500", "reward_min": "$150", "reward_max": "$4,500", "scope_rank": 3, "access_status": "open", "industry": "eCommerce", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:06Z", "scope_published_at": "2026-01-30T22:17:07.546Z", "scope_group_count": 5, "capture_error": null, "scope_source_duplicate_rows": 26, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/pnimedia-bb/changelog/0a2ca749-6631-4d52-8a1c-7f34bff46915.json" ], "in_scope": [ { "name": "████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "███████████████████████████" }, { "name": "██████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████████████" }, { "name": "█████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "██████████████████████████████████████████" }, { "name": "████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "██████████████████████████████████████████" }, { "name": "████████████████████████████████████████", "asset_type": "website", "location": null, "group": "██████████████████████████████████████████" }, { "name": "██████████████████████████████████████", "asset_type": "website", "location": null, "group": "██████████████████████████████████████████" }, { "name": "█████████████████████████████████████████", "asset_type": "website", "location": null, "group": "██████████████████████████████████████████" }, { "name": "███████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "██████████████████████████████████████████" }, { "name": "█████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "███████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "█████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "███████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "█████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "█████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "██████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "██████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "███████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "██████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "███████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "██████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "███████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "█████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "███████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "█████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "███████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "██████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" } ], "out_of_scope": [ { "name": "████████████████████████████████", "asset_type": "other", "location": null, "group": "████████████" }, { "name": "██████████████████████████████", "asset_type": "other", "location": null, "group": "████████████" }, { "name": "████████████████████████", "asset_type": "other", "location": null, "group": "████████████" }, { "name": "█████████████████████", "asset_type": "other", "location": null, "group": "████████████" }, { "name": "████████████████████████████", "asset_type": "other", "location": null, "group": "████████████" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-0670535f899adf47.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "26 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-b7f50402edbce8ef", "name": "Presago Marketplace Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/presago", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:08Z", "scope_published_at": "2026-09-23T17:32:36.696Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/presago/changelog/fda5ca3a-889e-46f4-bac5-21f2529290d0.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1226883/google-sheets-for-confluence-workspace-connector?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226883/google-sheets-for-confluence-workspace-connector?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1224380/microsoft-power-bi-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224380/microsoft-power-bi-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1224584/google-forms-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224584/google-forms-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1224583/microsoft-forms-for-confluence-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224583/microsoft-forms-for-confluence-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1226884/google-docs-for-confluence-workspace-connector?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226884/google-docs-for-confluence-workspace-connector?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1226885/google-slides-workspace-connector-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226885/google-slides-workspace-connector-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1224419/microsoft-stream-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224419/microsoft-stream-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1231249/microsoft-power-apps-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231249/microsoft-power-apps-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1231250/microsoft-power-apps-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231250/microsoft-power-apps-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1236956/power-bi-for-jira-embed-and-share-reports?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236956/power-bi-for-jira-embed-and-share-reports?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-b7f50402edbce8ef.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-ef2aa16121ee462d", "name": "Programmer Hat Marketplace Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/programmer-hat-market", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:09Z", "scope_published_at": "2026-05-06T18:18:00.723Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/programmer-hat-market/changelog/61d8c683-ec50-414d-8832-016aac1046be.json" ], "in_scope": [ { "name": "Create Ticket Template, Issue Template, Easy Templates - https://marketplace.atlassian.com/apps/1233451/create-ticket-template-issue-template-easy-templates?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233451/create-ticket-template-issue-template-easy-templates?hosting=cloud", "group": "In Scope Targets" }, { "name": "Export Backlog to CSV, Excel - https://marketplace.atlassian.com/apps/1233695/export-backlog-to-csv-excel?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233695/export-backlog-to-csv-excel?hosting=cloud", "group": "In Scope Targets" }, { "name": "Rich Text Editor for Jira - https://marketplace.atlassian.com/apps/1233647/rich-text-editor-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233647/rich-text-editor-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "Email This Issue for Jira - https://marketplace.atlassian.com/apps/1233583/email-this-issue-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233583/email-this-issue-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "Mail Handler for Jira, Service Desk, Service Management - https://marketplace.atlassian.com/apps/1233836/mail-handler-for-jira-service-desk-service-management?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233836/mail-handler-for-jira-service-desk-service-management?hosting=cloud", "group": "In Scope Targets" }, { "name": "Basecamp Integration for Jira - https://marketplace.atlassian.com/apps/1234316/basecamp-integration-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1234316/basecamp-integration-for-jira?hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-ef2aa16121ee462d.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-5e0fbed3286fbb2c", "name": "ProjectBalm", "program_url": "https://bugcrowd.com/engagements/projectbalm", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:10Z", "scope_published_at": "2026-03-12T14:53:12.123Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/projectbalm/changelog/a9af7b0b-4ddd-4c19-9f43-2d14b78f1a0a.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1213146/risk-register?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1213146/risk-register?hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-5e0fbed3286fbb2c.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-248af3b08a95d4f4", "name": "Prosus", "program_url": "https://bugcrowd.com/engagements/prosus-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,250", "reward_min": "$100", "reward_max": "$1,250", "scope_rank": 3, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:11Z", "scope_published_at": "2024-09-03T13:51:53.678Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/prosus-og/changelog/8d1c0bc5-48f5-484a-861a-b54be1b4598c.json" ], "in_scope": [ { "name": "dealflow.prosus.com", "asset_type": "website", "location": "https://dealflow.prosus.com", "group": "Prosus Domains" }, { "name": "dealflowapi.prosus.com", "asset_type": "api", "location": "https://dealflowapi.prosus.com", "group": "Prosus Domains" }, { "name": "analytics-admin.prosus.com", "asset_type": "website", "location": "https://analytics-admin.prosus.com", "group": "Prosus Domains" }, { "name": "analytics.prosus.com", "asset_type": "website", "location": "http://analytics.prosus.com", "group": "Prosus Domains" }, { "name": "data.prosus.com", "asset_type": "website", "location": "https://data.prosus.com/", "group": "Prosus Domains" }, { "name": "hr.prosus.com", "asset_type": "website", "location": "https://hr.prosus.com/", "group": "Prosus Domains" }, { "name": "tracker.naspers.com", "asset_type": "website", "location": "https://tracker.naspers.com/", "group": "Naspers Domains" }, { "name": "cfc.naspers.com", "asset_type": "website", "location": "https://cfc.naspers.com/", "group": "Naspers Domains" }, { "name": "peopleview.naspers.com", "asset_type": "website", "location": "https://peopleview.naspers.com", "group": "Naspers Domains" }, { "name": "nav.naspers.com", "asset_type": "website", "location": "http://nav.naspers.com/", "group": "Naspers Domains" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-248af3b08a95d4f4.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-e956d44cbd9826a3", "name": "QuintoAndar Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/quintoandar", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $1,000", "reward_min": "Points", "reward_max": "$1,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:12Z", "scope_published_at": "2026-04-28T20:50:51.109Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/quintoandar/changelog/766c37c3-6b66-4f52-bb75-89bfd519f6d3.json" ], "in_scope": [ { "name": "https://www.quintoandar.com.br/*", "asset_type": "website", "location": "https://www.quintoandar.com.br/*", "group": "In Scope" }, { "name": "https://user.quintoandar.com.br/admin/*", "asset_type": "website", "location": "https://www.user.quintoandar.com.br/admin/*", "group": "In Scope" }, { "name": "https://financeiro.quintoandar.com.br/*", "asset_type": "website", "location": "https://www.financeiro.quintoandar.com.br/*", "group": "In Scope" }, { "name": "https://apigw.prod.quintoandar.com.br/pixar-api/*", "asset_type": "api", "location": "https://apigw.prod.quintoandar.com.br/pixar-api/*", "group": "In Scope" }, { "name": "https://finance.quintoandar.com.br/*", "asset_type": "website", "location": "https://finance.quintoandar.com.br/*", "group": "In Scope" }, { "name": "https://trato-feito-api.quintoandar.com.br/*", "asset_type": "api", "location": "https://trato-feito-api.quintoandar.com.br/*", "group": "In Scope" }, { "name": "https://apigw.prod.quintoandar.com.br/checkout-api/*", "asset_type": "api", "location": "https://apigw.prod.quintoandar.com.br/checkout-api/*", "group": "In Scope" }, { "name": "https://apigw.prod.quintoandar.com.br/sales-flow-api/*", "asset_type": "api", "location": "https://apigw.prod.quintoandar.com.br/sales-flow-api/*", "group": "In Scope" }, { "name": "https://apigw.prod.quintoandar.com.br/nazare-api/*", "asset_type": "api", "location": "https://apigw.prod.quintoandar.com.br/nazare-api/*", "group": "In Scope" }, { "name": "https://apigw.prod.quintoandar.com.br/rental-guarantee-api/*", "asset_type": "api", "location": "https://apigw.prod.quintoandar.com.br/rental-guarantee-api/*", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-e956d44cbd9826a3.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-28a43e77dc485833", "name": "Quirk Consulting Marketplace Bug Bounty", "program_url": "https://bugcrowd.com/engagements/quirk-consulting", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:13Z", "scope_published_at": "2026-05-06T18:18:23.011Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/quirk-consulting/changelog/0051f903-833b-4f5c-a354-a6f88bf2fb26.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1221796/dependency-mapper-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221796/dependency-mapper-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1229966/scrum-master-assistant-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229966/scrum-master-assistant-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-28a43e77dc485833.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-befd6a6f039a6806", "name": "Quizlet", "program_url": "https://bugcrowd.com/engagements/quizlet", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,000", "reward_min": "$150", "reward_max": "$2,000", "scope_rank": 2, "access_status": "open", "industry": "Education", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:14Z", "scope_published_at": "2025-10-13T20:28:10.156Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/quizlet/changelog/52d56575-2cb1-4d86-8988-d5d30b7000c2.json" ], "in_scope": [ { "name": "https://*.quizlet.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "Quizlet iOS App", "asset_type": "ios", "location": "https://itunes.apple.com/us/app/quizlet-flashcards/id546473125", "group": "In Scope" }, { "name": "Quizlet Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.quizlet.quizletandroid", "group": "In Scope" }, { "name": "3.0 API", "asset_type": "api", "location": null, "group": "In Scope" } ], "out_of_scope": [ { "name": "api.quizlet.com/2.0", "asset_type": "api", "location": null, "group": "Out of Scope" }, { "name": "help.quizlet.com (zendesk)", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "get.quizlet.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-befd6a6f039a6806.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-1ca7d5337bfefdfb", "name": "RadBee Ltd.", "program_url": "https://bugcrowd.com/engagements/radbee", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Corporate Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:15Z", "scope_published_at": "2026-08-19T23:53:13.846Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/radbee/changelog/9a7d47a2-6599-4795-b0f7-80bebe8a2967.json" ], "in_scope": [ { "name": "Speedy PDF Sign-Offs For Jira Cloud - https://marketplace.atlassian.com/apps/1222932/speedy-pdf-sign-offs-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222932/speedy-pdf-sign-offs-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Jira Snapshots for Confluence - https://marketplace.atlassian.com/apps/1225123/jira-snapshots-time-stamped-baselines-into-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225123/jira-snapshots-time-stamped-baselines-into-confluence?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "Access Agent for Jira Snapshots for Confluence - https://marketplace.atlassian.com/apps/1229545/access-agent-for-jira-snapshots-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229545/access-agent-for-jira-snapshots-for-confluence?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "Snapshots Traceability Extensions for Jira Snapshots - https://marketplace.atlassian.com/apps/1228815?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228815?tab=overview&hosting=cloud", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-1ca7d5337bfefdfb.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-b6ffae63f48d49b9", "name": "Railsware", "program_url": "https://bugcrowd.com/engagements/railsware", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:16Z", "scope_published_at": "2026-09-10T16:09:46.393Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/railsware/changelog/118e6d78-31e6-4983-80a8-35de51176f44.json" ], "in_scope": [ { "name": "Smart Checklist for Jira. Enterprise - https://marketplace.atlassian.com/apps/1216451/smart-checklist-for-jira-enterprise?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216451/smart-checklist-for-jira-enterprise?hosting=cloud", "group": "In Scope" }, { "name": "Smart Checklist for Jira Free - https://marketplace.atlassian.com/apps/1215277/smart-checklist-for-jira-free?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215277/smart-checklist-for-jira-free?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Smart Templates: Issue Templates for Jira - https://marketplace.atlassian.com/apps/1231143/smart-templates-issue-templates-for-jira?hosting=cloud&tab", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231143/smart-templates-issue-templates-for-jira?hosting=cloud&tab", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1233681/smart-ai-release-notes-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233681/smart-ai-release-notes-for-jira?tab=overview&hosting=cloud", "group": "In Scope" } ], "out_of_scope": [ { "name": "https://jirachecklist.com/", "asset_type": "website", "location": "https://jirachecklist.com/", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-b6ffae63f48d49b9.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-a32ac2750258b402", "name": "Raley Apps", "program_url": "https://bugcrowd.com/engagements/raleyapps", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:17Z", "scope_published_at": "2026-08-19T23:17:13.696Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/raleyapps/changelog/662a52fe-3d60-4c10-a6a3-24b24a264360.json" ], "in_scope": [ { "name": "Raley Email Notifications for Jira / JSM - https://marketplace.atlassian.com/apps/1214045/raley-email-notifications-for-jira-jsm?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214045/raley-email-notifications-for-jira-jsm?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1223409/raley-purchase-orders?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223409/raley-purchase-orders?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-a32ac2750258b402.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-9977a9c172a632fe", "name": "Rapyd", "program_url": "https://bugcrowd.com/engagements/rapyd", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $7,500", "reward_min": "$100", "reward_max": "$7,500", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:21Z", "scope_published_at": null, "scope_group_count": null, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/rapyd/changelog/4fd154ee-8a7d-4d42-bab8-2ff1e017c1b2.json" ], "in_scope": [ { "name": "api.rapyd.net", "asset_type": "api", "location": null, "group": "Tier 3 In scope Premium", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "dashboard.rapyd.net", "asset_type": "website", "location": "https://dashboard.rapyd.net/", "group": "Tier 2 In scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "verify.rapyd.net", "asset_type": "website", "location": null, "group": "Tier 2 In scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "checkout.rapyd.net", "asset_type": "other", "location": null, "group": "Tier 2 In scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.rapyd.net", "asset_type": "website", "location": null, "group": "Tier 1 In scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.korta.is", "asset_type": "website", "location": null, "group": "Tier 1 In scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "jointhemoment.net", "asset_type": "website", "location": "https://jointhemoment.net/", "group": "Tier 1 In scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.rapyd.com", "asset_type": "other", "location": null, "group": "Tier 1 In scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.rapyd.org", "asset_type": "other", "location": null, "group": "Tier 1 In scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.kortathjonustan.is", "asset_type": "website", "location": null, "group": "Tier 1 In scope", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "community.rapyd.net", "asset_type": "other", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "support.rapyd.net", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "docs.rapyd.net", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "sandbox.rapyd.net", "asset_type": "other", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "3rd party services", "asset_type": "other", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "ghost.rapyd.net", "asset_type": "other", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.neatcommerce.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.neattest.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.neat.com.hk", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.neat.hk", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.neat.wtf", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] } ], "policy_review_state": "verified_policy_record", "verified_policy_id": "rapyd-bug-bounty", "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-9977a9c172a632fe.md", "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ] }, { "id": "bugcrowd-c78fbe6afa8d0916", "name": "REA Group | realestate.com.au, realcommercial.com.au, property.com.au", "program_url": "https://bugcrowd.com/engagements/rea-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $4,500", "reward_min": "$50", "reward_max": "$4,500", "scope_rank": 4, "access_status": "open", "industry": "Real Estate", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:18Z", "scope_published_at": "2026-07-27T00:27:49.052Z", "scope_group_count": 17, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/rea-mbb-og/changelog/d9a84c1d-2911-4875-abbb-696accf7c084.json" ], "in_scope": [ { "name": "rea-group.com", "asset_type": "website", "location": null, "group": "REA Group - Corporate Website" }, { "name": "reastatic.net", "asset_type": "website", "location": null, "group": "REA Group - Corporate Website" }, { "name": "*.api.id.realestate.com.au", "asset_type": "api", "location": null, "group": "REA Group - www.realestate.com.au" }, { "name": "*.id.realestate.com.au", "asset_type": "website", "location": null, "group": "REA Group - www.realestate.com.au" }, { "name": "*.accounts.realestate.com.au", "asset_type": "website", "location": null, "group": "REA Group - www.realestate.com.au" }, { "name": "realestate.com.au Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=au.com.realestate.app", "group": "REA Group - www.realestate.com.au" }, { "name": "realestate.com.au iOS App", "asset_type": "ios", "location": "https://apps.apple.com/au/app/realestate-com-au-property/id404667893", "group": "REA Group - www.realestate.com.au" }, { "name": "*.realestate.com.au", "asset_type": "website", "location": null, "group": "REA Group - www.realestate.com.au" }, { "name": "*.realcommercial.com.au", "asset_type": "website", "location": "https://www.realcommercial.com.au/", "group": "REA Group - Real Commercial (RCA)" }, { "name": "next.flatmates.com.au", "asset_type": "website", "location": "https://next.flatmates.com.au", "group": "REA Group - next.flatmates.com.au (Staging)" }, { "name": "api-next.flatmates.com.au", "asset_type": "api", "location": "https://api-next.flatmates.com.au", "group": "REA Group - next.flatmates.com.au (Staging)" }, { "name": "www.property.com.au", "asset_type": "website", "location": "https://property.com.au", "group": "REA Group - Property.com.au (PCA)" }, { "name": "*.mortgagechoice.com.au", "asset_type": "website", "location": null, "group": "REA Group - mortgagechoice.com.au" }, { "name": "*.demo.bp.mortgagechoice.com.au", "asset_type": "website", "location": null, "group": "REA Group - mortgagechoice.com.au" }, { "name": "*.smartline.com.au", "asset_type": "website", "location": null, "group": "REA Group - mortgagechoice.com.au" }, { "name": "*.mclead.com.au", "asset_type": "api", "location": null, "group": "REA Group - mortgagechoice.com.au" }, { "name": "www.developersites.com.au/testing-2505-lms/", "asset_type": "website", "location": "https://www.developersites.com.au/testing-2505-lms/", "group": "REA Group - developersites.com.au" }, { "name": "www.developersites.com.au/testing-2505-houston/", "asset_type": "website", "location": "https://www.developersites.com.au/testing-2505-houston/", "group": "REA Group - developersites.com.au" }, { "name": "scripts.developersites.com.au", "asset_type": "website", "location": null, "group": "REA Group - developersites.com.au" }, { "name": "ftp.developersites.com.au", "asset_type": "network", "location": "sftp://ftp.developersites.com.au:45875", "group": "REA Group - developersites.com.au" }, { "name": "agent-contact.realestate.com.au/lead-capture-page/campaign-id/8e50c3d0-0d2b-44d1-9df6-f4e02b9a690e", "asset_type": "api", "location": "https://agent-contact.realestate.com.au/lead-capture-page/campaign-id/8e50c3d0-0d2b-44d1-9df6-f4e02b9a690e", "group": "REA Group - developersites.com.au" }, { "name": "https://*.report.uat.proptrack.com", "asset_type": "website", "location": "https://*.report.uat.proptrack.com", "group": "REA Group - Proptrack.com.au" }, { "name": "access-sit.uat.proptrack.com", "asset_type": "website", "location": "https://access-sit.uat.proptrack.com", "group": "REA Group - Proptrack.com.au" }, { "name": "desktop-sit.uat.proptrack.com", "asset_type": "website", "location": "https://desktop-sit.uat.proptrack.com", "group": "REA Group - Proptrack.com.au" }, { "name": "explore-sit.uat.proptrack.com", "asset_type": "website", "location": "https://explore-sit.uat.proptrack.com", "group": "REA Group - Proptrack.com.au" }, { "name": "one-sit.uat.proptrack.com", "asset_type": "website", "location": "https://one-sit.uat.proptrack.com/", "group": "REA Group - Proptrack.com.au" }, { "name": "https://portfolio-manager-sit.uat.proptrack.com/", "asset_type": "website", "location": "https://portfolio-manager-sit.uat.proptrack.com/", "group": "REA Group - Proptrack.com.au" }, { "name": "https://valuations-sit.uat.proptrack.com", "asset_type": "website", "location": "https://valuations-sit.uat.proptrack.com", "group": "REA Group - Proptrack.com.au" }, { "name": "www.proptrack.com", "asset_type": "website", "location": "https://www.proptrack.com", "group": "REA Group - Proptrack.com.au" }, { "name": "www.proptrack.com.au", "asset_type": "website", "location": "https://www.proptrack.com.au", "group": "REA Group - Proptrack.com.au" } ], "out_of_scope": [ { "name": "*.email.rea-group.com", "asset_type": "website", "location": null, "group": "Out of Scope - www.rea-group.com" }, { "name": "autodiscover.rea-group.com", "asset_type": "website", "location": null, "group": "Out of Scope - www.rea-group.com" }, { "name": "garage.rea-group.com", "asset_type": "website", "location": null, "group": "Out of Scope - www.rea-group.com" }, { "name": "help.enterprise.rea-group.com", "asset_type": "website", "location": null, "group": "Out of Scope - www.rea-group.com" }, { "name": "help.rea-group.com", "asset_type": "website", "location": null, "group": "Out of Scope - www.rea-group.com" }, { "name": "university.rea-group.com", "asset_type": "website", "location": null, "group": "Out of Scope - www.rea-group.com" }, { "name": "analytics[.e2e].realestate.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "*.realestate.com.au/homeloans", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "homeloans.realestate.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "realestate.com.au/advice", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "realestate.com.au/insights", "asset_type": "website", "location": "https://www.realestate.com.au/insights/", "group": "Out of Scope - www.realestate.com.au" }, { "name": "realestate.com.au/lifestyle", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "realestate.com.au/news", "asset_type": "website", "location": "https://www.realestate.com.au/advice/", "group": "Out of Scope - www.realestate.com.au" }, { "name": "realestate.com.au/podcasts", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "sasinator.realestate.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "smetrics.realestate.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "video.realestate.com.au", "asset_type": "website", "location": "https://video.realestate.com.au/", "group": "Out of Scope - www.realestate.com.au" }, { "name": "help.realestate.com.au", "asset_type": "website", "location": "https://help.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "*.propertypanel.realestate.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "realtair-sell.realestate.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "realtair-buy.realestate.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "*.realtair.realestate.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "adslot.realestate.com.au", "asset_type": "website", "location": "https://adslot.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "everest.realestate.com.au", "asset_type": "website", "location": "https://everest.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "images.media-comms.realestate.com.au", "asset_type": "website", "location": "http://images.media-comms.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "images.mediateam.realestate.com.au", "asset_type": "website", "location": "https://images.mediateam.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "metrics.realestate.com.au", "asset_type": "website", "location": "https://metrics.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "stg-api.realtair.gateway.ignite.realestate.com.au", "asset_type": "website", "location": "https://stg-api.realtair.gateway.ignite.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "support.realestate.com.au", "asset_type": "website", "location": "https://support.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "stg-pitch.realtair.gateway.ignite.realestate.com.au", "asset_type": "website", "location": "https://stg-pitch.realtair.gateway.ignite.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "tags.realestate.com.au", "asset_type": "website", "location": "https://tags.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "api.leads.developersites.devlob-staging.realestate.com.au", "asset_type": "website", "location": "https://api.leads.developersites.devlob-staging.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "*.agent.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "*.email.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "abmail.campaign.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "autodiscover.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "metrics.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "propertypanelcontent.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "realcommercial.com.au/building/enquiry", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "realcommercial.com.au/contact-agency-commercial/*", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "realcommercial.com.au/listing-ui/enquiry", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "realcommercial.com.au/mobile/enquiries/*/*", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "research.surveys.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "smetrics.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "support.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "propertypanel.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "autodiscover.property.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Property.com.au (PCA)" }, { "name": "email.property.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Property.com.au (PCA)" }, { "name": "help.property.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Property.com.au (PCA)" }, { "name": "info.property.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Property.com.au (PCA)" }, { "name": "*.realtair.com", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.campaignagent.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.simpology.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.athena.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.housing.com", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.proptiger.com", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.makaan.com", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.easiloan.com", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.realtor.com", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.spacely.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.flatmates.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Flatmates (Staging)" }, { "name": "www.flatmates.com.au", "asset_type": "website", "location": "https://www.flatmates.com.au", "group": "Out of Scope - Flatmates (Staging)" }, { "name": "api.flatmates.com.au", "asset_type": "api", "location": "https://api.flatmates.com.au", "group": "Out of Scope - Flatmates (Staging)" }, { "name": "flatmates-experience-api.flatmates.com.au", "asset_type": "api", "location": "https://flatmates-experience-api.flatmates.com.au", "group": "Out of Scope - Flatmates (Staging)" }, { "name": "help.flatmates.com.au", "asset_type": "website", "location": "https://help.flatmates.com.au", "group": "Out of Scope - Flatmates (Staging)" }, { "name": "email.flatmates.com.au", "asset_type": "network", "location": null, "group": "Out of Scope - Flatmates (Staging)" }, { "name": "sasinator.flatmates.com.au", "asset_type": "website", "location": "https://sasinator.flatmates.com.au", "group": "Out of Scope - Flatmates (Staging)" }, { "name": "*.lendingtoolkit.mortgagechoice.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "*.apps.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "*.bp.mortgagechoice.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "*.bpm.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "*myhub*.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "*.primeuat.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "*.prime.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "awverify.*.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "zendesk*.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "links-*.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "web-*.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "autodiscover.mortgagechoice.net.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "bh5po56arjfv.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "broker.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "calendar.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "cpt.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "dashboard.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "docs.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "documents.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "ecomply.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "elink.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "enterpriseenrollment.mortgagechoice.net.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "enterpriseregistration.mortgagechoice.net.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "fil.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "go.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "groups.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "hbvuanp6xgfw.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "home.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "info.lp.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "learn.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "lyncdiscover.mortgagechoice.net.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "mail.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "mcmoneytrack.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "msoid.mortgagechoice.net.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "one.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "project-*.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "questions.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "servicefo.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "servicemorfo.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "services.mortgagechoice.com.au/Services/NextGenIntegrator/*", "asset_type": "website", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "sip.mortgagechoice.net.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "sites.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "slxtest.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "sta.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "trackinsight.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "video.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "wave.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "zac80040032.mortgagechoice.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "em1997.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "em398464.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "em8918.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "cloudhq.mortgagechoice.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "cloudhqforms.mortgagechoice.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "*.leads.developersites.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Developer Sites" }, { "name": "www.developersites.com.au/*", "asset_type": "website", "location": null, "group": "Out of Scope - Developer Sites" }, { "name": "*.proptrack.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - proptrack.com.au" }, { "name": "*.proptrack.com", "asset_type": "website", "location": null, "group": "Out of Scope - proptrack.com.au" }, { "name": "website.proptrack.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - proptrack.com.au" }, { "name": "developer.proptrack.com.au", "asset_type": "api", "location": "https://developer.proptrack.com.au", "group": "Out of Scope - proptrack.com.au" }, { "name": "www.proptrack.com.au/contact-us/*", "asset_type": "website", "location": "https://www.proptrack.com.au/contact-us/*", "group": "Out of Scope - proptrack.com.au" }, { "name": "widgets-api-sit.uat.proptrack.com", "asset_type": "website", "location": "https://widgets-api-sit.uat.proptrack.com", "group": "Out of Scope - proptrack.com.au" }, { "name": "avm-sit.uat.proptrack.com", "asset_type": "website", "location": "https://avm-sit.uat.proptrack.com", "group": "Out of Scope - proptrack.com.au" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-c78fbe6afa8d0916.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-ac7779f0b4aa65b9", "name": "Rec Room Video Games", "program_url": "https://bugcrowd.com/engagements/recroom-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,500", "reward_min": "$150", "reward_max": "$2,500", "scope_rank": 4, "access_status": "open", "industry": "Games", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:19Z", "scope_published_at": "2026-02-10T20:57:17.343Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 3, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/recroom-og/changelog/ea1fbbf5-344d-40a4-8f56-38f1000928c6.json" ], "in_scope": [ { "name": "██████████████████████████", "asset_type": "other", "location": null, "group": "████████████████" }, { "name": "█████████████████████████████████████████████", "asset_type": "other", "location": null, "group": "████████████████" }, { "name": "███████████████████████", "asset_type": "other", "location": null, "group": "████████████████" }, { "name": "███████████████", "asset_type": "other", "location": null, "group": "████████████████" }, { "name": "███", "asset_type": "ios", "location": null, "group": "████████████████" }, { "name": "███████", "asset_type": "android", "location": null, "group": "████████████████" }, { "name": "█████████████", "asset_type": "other", "location": null, "group": "████████████████" }, { "name": "████", "asset_type": "other", "location": null, "group": "████████████████" }, { "name": "████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "███████████████████", "asset_type": "api", "location": null, "group": "████████████████" }, { "name": "████████████████████", "asset_type": "api", "location": null, "group": "████████████████" }, { "name": "██████████████████████████", "asset_type": "api", "location": null, "group": "████████████████" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-ac7779f0b4aa65b9.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "3 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-707dcd792086376b", "name": "Recorded Future Public Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/recorded-future-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $5,000", "reward_min": "$250", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:20Z", "scope_published_at": "2026-06-17T06:40:52.877Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/recorded-future-mbb-og/changelog/403c49b2-0f28-44d6-a1f8-8d70c45158b8.json" ], "in_scope": [ { "name": "www.recordedfuture.com", "asset_type": "website", "location": "https://www.recordedfuture.com", "group": "In Scope Targets" }, { "name": "https://tria.ge", "asset_type": "website", "location": "https://tria.ge", "group": "In Scope Targets" }, { "name": "id.recordedfuture.com", "asset_type": "website", "location": "https://id.recordedfuture.com", "group": "In Scope Targets" }, { "name": "hatching.io", "asset_type": "website", "location": "https://hatching.io", "group": "In Scope Targets" }, { "name": "geminiadvisory.io", "asset_type": "website", "location": "https://geminiadvisory.io", "group": "In Scope Targets" }, { "name": "app.recordedfuture.com", "asset_type": "website", "location": "https://app.recordedfuture.com", "group": "In Scope Targets" }, { "name": "api.recordedfuture.com", "asset_type": "api", "location": "https://api.recordedfuture.com", "group": "In Scope Targets" }, { "name": "Recorded Future iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/recorded-future/id1435597894", "group": "In Scope Targets" }, { "name": "Recorded Future Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.recordedfuture.mobile&hl=en_US", "group": "In Scope Targets" }, { "name": "securitytrails.com", "asset_type": "website", "location": "https://securitytrails.com", "group": "In Scope Targets" }, { "name": "Riskrecon", "asset_type": "website", "location": "https://www.riskrecon.com", "group": "In Scope Targets" }, { "name": "Riskrecon Vendor portal US", "asset_type": "website", "location": "https://vendor.riskrecon.com", "group": "In Scope Targets" }, { "name": "Riskrecon Vendor portal EU", "asset_type": "website", "location": "https://vendor.riskrecon.eu", "group": "In Scope Targets" }, { "name": "Riskrecon API us", "asset_type": "api", "location": "https://api.riskrecon.com", "group": "In Scope Targets" }, { "name": "Riskrecon API EU", "asset_type": "api", "location": "https://api.riskrecon.eu", "group": "In Scope Targets" }, { "name": "Riskrecon IDP US", "asset_type": "api", "location": "https://auth.riskrecon.com", "group": "In Scope Targets" }, { "name": "Riskrecon IDP EU", "asset_type": "api", "location": "https://auth.riskrecon.eu", "group": "In Scope Targets" }, { "name": "Riskrecon Portal US", "asset_type": "website", "location": "https://portal.riskrecon.com", "group": "In Scope Targets" }, { "name": "Riskrecon Portal EU", "asset_type": "website", "location": "https://portal.riskrecon.eu", "group": "In Scope Targets" }, { "name": "Recorded Future MCP", "asset_type": "api", "location": "https://mcp.recordedfuture.com", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-707dcd792086376b.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-7a1b4fb31a5ba552", "name": "Redmoon", "program_url": "https://bugcrowd.com/engagements/redmoon", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Electronics", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:21Z", "scope_published_at": "2026-07-30T23:27:10.503Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/redmoon/changelog/b324d66b-aa06-497b-ae39-5ea7c4442c27.json" ], "in_scope": [ { "name": "Custom Fields for Jira Cloud - https://marketplace.atlassian.com/apps/1213649/custom-fields-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1213649/custom-fields-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Sub Task Manager for Jira - Cloud Hosted - https://marketplace.atlassian.com/apps/1214056/sub-task-manager-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214056/sub-task-manager-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Watch It for Jira Cloud - https://marketplace.atlassian.com/apps/1213851/watch-it-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1213851/watch-it-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Comment History for Jira Cloud - https://marketplace.atlassian.com/apps/1211639/comment-history-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211639/comment-history-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Document Vault for Jira Cloud - https://marketplace.atlassian.com/apps/1211880/document-vault-secure-attachments-in-jira?tab=installation&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211880/document-vault-secure-attachments-in-jira?tab=installation&hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-7a1b4fb31a5ba552.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-18ad6bd5f24792d6", "name": "Refined", "program_url": "https://bugcrowd.com/engagements/refined2", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $2,500", "reward_min": "$100", "reward_max": "$2,500", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:22Z", "scope_published_at": "2026-05-06T18:17:11.517Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/refined2/changelog/ab2104d7-819d-4aef-b5d5-f3a9a1c96ec6.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1216056/refined-toolkit-for-confluence-cloud?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216056/refined-toolkit-for-confluence-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "refined.site/admin", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "refinedsites.refinedwiki.com", "asset_type": "website", "location": "https://refinedsites.refinedwiki.com", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1221322/refined-for-confluence-cloud?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221322/refined-for-confluence-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1218481/refined-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218481/refined-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "bugbounty-refined-test-.refined.site", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1236998/refined-ui-toolkit-for-confluence-page-builder-navigation?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236998/refined-ui-toolkit-for-confluence-page-builder-navigation?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1211136/refined-macro-toolkit-content-formatting-macros?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211136/refined-macro-toolkit-content-formatting-macros?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-18ad6bd5f24792d6.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-56a051843b1d3e79", "name": "Release Management (by Y2 ENGR)", "program_url": "https://bugcrowd.com/engagements/releasemanagement", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:23Z", "scope_published_at": "2026-06-03T22:08:57.737Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/releasemanagement/changelog/e522db25-0877-4e81-9956-16c7b4d3816a.json" ], "in_scope": [ { "name": "Release Management & Roadmap -Jira Cloud - https://marketplace.atlassian.com/apps/1221946/release-management-roadmap-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221946/release-management-roadmap-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Gadgets for Release Management & Roadmap - Cloud - https://marketplace.atlassian.com/apps/1223487/gadgets-for-release-management-roadmap?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223487/gadgets-for-release-management-roadmap?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Gadgets for Release Management & Roadmap - DC - https://marketplace.atlassian.com/apps/1223487/gadgets-for-release-management-roadmap?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223487/gadgets-for-release-management-roadmap?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "Gadgets for Release Management & Road - Server - https://marketplace.atlassian.com/apps/1223487/gadgets-for-release-management-roadmap?hosting=server&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223487/gadgets-for-release-management-roadmap?hosting=server&tab=overview", "group": "In Scope" }, { "name": "Advanced Agile Boards - Cloud - https://marketplace.atlassian.com/apps/1223877/advanced-agile-boards?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223877/advanced-agile-boards?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1222474/work-status-time-tracking-calendar-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222474/work-status-time-tracking-calendar-for-jira?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1228657/easy-peasy-roadmap-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228657/easy-peasy-roadmap-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-56a051843b1d3e79.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-1d80f55318d6b971", "name": "Requirement Yogi (Bug bounty)", "program_url": "https://bugcrowd.com/engagements/requirement-yogi", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:24Z", "scope_published_at": "2026-06-24T23:40:19.459Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/requirement-yogi/changelog/1a2d4655-56f5-4c58-a543-cd511c1ddb7c.json" ], "in_scope": [ { "name": "Requirement Yogi for Jira Cloud - https://marketplace.atlassian.com/apps/1214094/requirement-yogi-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214094/requirement-yogi-for-jira?hosting=cloud", "group": "In Scope" }, { "name": "Standalone app (HTML assets)", "asset_type": "website", "location": "https://app.requirementyogi.com", "group": "In Scope" }, { "name": "REST API", "asset_type": "api", "location": "https://api.requirementyogi.com", "group": "In Scope" }, { "name": "Keycloak", "asset_type": "website", "location": "https://auth.requirementyogi.com", "group": "In Scope" }, { "name": "Confluence app back-end", "asset_type": "website", "location": "https://confluence.requirementyogi.com", "group": "In Scope" }, { "name": "Jira app back-end", "asset_type": "website", "location": "https://jira.requirementyogi.com", "group": "In Scope" }, { "name": "Requirement Yogi for Confluence Cloud - https://marketplace.atlassian.com/apps/1212523/requirements-yogi?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1212523/requirements-yogi?hosting=cloud", "group": "In Scope" }, { "name": "Old back-end for Confluence app", "asset_type": "website", "location": "https://ww1.requirementyogi.cloud", "group": "In Scope" }, { "name": "Old back-end for Jira app", "asset_type": "website", "location": "https://ww2.requirementyogi.cloud", "group": "In Scope" } ], "out_of_scope": [ { "name": "Documentation (Out of scope)", "asset_type": "website", "location": "https://docs.requirementyogi.com", "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-1d80f55318d6b971.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-9358ab34ac09914a", "name": "Resolution", "program_url": "https://bugcrowd.com/engagements/resolutionde", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Cloud", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:25Z", "scope_published_at": "2026-08-27T09:39:38.669Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/resolutionde/changelog/88fe01e3-527e-4da5-adf9-89d62898d9b0.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1218305/out-of-office-assistant-for-jira-cloud?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218305/out-of-office-assistant-for-jira-cloud?hosting=cloud", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1219932/language-translation-jira-service-desk?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219932/language-translation-jira-service-desk?hosting=cloud", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1212130/saml-single-sign-on-sso-jira-saml-sso?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212130/saml-single-sign-on-sso-jira-saml-sso?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1212130/saml-single-sign-on-sso-jira-saml-sso?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212130/saml-single-sign-on-sso-jira-saml-sso?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1212129/saml-single-sign-on-sso-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212129/saml-single-sign-on-sso-confluence?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1212129/saml-single-sign-on-sso-confluence?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212129/saml-single-sign-on-sso-confluence?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1217045/saml-single-sign-on-sso-bitbucket?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217045/saml-single-sign-on-sso-bitbucket?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1217045/saml-single-sign-on-sso-bitbucket?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217045/saml-single-sign-on-sso-bitbucket?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1217672/saml-single-sign-on-sso-bamboo?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217672/saml-single-sign-on-sso-bamboo?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221586/api-token-authentication-jira?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221586/api-token-authentication-jira?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221586/api-token-authentication-jira?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221586/api-token-authentication-jira?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221608/api-token-authentication-confluence?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221608/api-token-authentication-confluence?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221608/api-token-authentication-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221608/api-token-authentication-confluence?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1211109/user-deactivator-jira?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211109/user-deactivator-jira?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1211109/user-deactivator-jira?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211109/user-deactivator-jira?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221601/user-deactivator-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221601/user-deactivator-confluence?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221601/user-deactivator-confluence?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221601/user-deactivator-confluence?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1218164/redirects-and-vanity-urls-for-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218164/redirects-and-vanity-urls-for-confluence?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1218164/redirects-and-vanity-urls-for-confluence?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218164/redirects-and-vanity-urls-for-confluence?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221625/http-header-authentication-for-jira?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221625/http-header-authentication-for-jira?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221625/http-header-authentication-for-jira?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221625/http-header-authentication-for-jira?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221627/http-header-auth-for-confluence?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221627/http-header-auth-for-confluence?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221627/http-header-auth-for-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221627/http-header-auth-for-confluence?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1219399/users-sync-groups-sync-jira?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219399/users-sync-groups-sync-jira?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1219399/users-sync-groups-sync-jira?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219399/users-sync-groups-sync-jira?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1219400/users-sync-groups-sync-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219400/users-sync-groups-sync-confluence?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1219400/users-sync-groups-sync-confluence?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219400/users-sync-groups-sync-confluence?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1219401/users-sync-groups-sync-bitbucket?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219401/users-sync-groups-sync-bitbucket?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1219401/users-sync-groups-sync-bitbucket?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219401/users-sync-groups-sync-bitbucket?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221738/users-sync-groups-sync-bamboo?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221738/users-sync-groups-sync-bamboo?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221629/user-deactivator-for-bitbucket?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221629/user-deactivator-for-bitbucket?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1224142/monday-com-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224142/monday-com-for-confluence?hosting=cloud&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1224678/monday-com-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224678/monday-com-for-jira?hosting=cloud&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1225346/hubspot-crm-for-confluence-hubspot-integration?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1225346/hubspot-crm-for-confluence-hubspot-integration?hosting=cloud&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1224457/aws-load-balancer-authentication-cognito-compatible-jira?hosting=server", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224457/aws-load-balancer-authentication-cognito-compatible-jira?hosting=server", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1224459/aws-alb-and-amazon-cognito-authentication-for-confluence?hosting=server", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224459/aws-alb-and-amazon-cognito-authentication-for-confluence?hosting=server", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1224117/api-token-authentication-for-bitbucket?hosting=server&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224117/api-token-authentication-for-bitbucket?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1224117/api-token-authentication-for-bitbucket?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224117/api-token-authentication-for-bitbucket?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221629/license-user-deactivator-for-bitbucket?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221629/license-user-deactivator-for-bitbucket?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1226752/google-translation-automation-for-jira-issue-language?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226752/google-translation-automation-for-jira-issue-language?hosting=cloud&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1224459/aws-sso-alb-amazon-cognito-authentication-for-confluence?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224459/aws-sso-alb-amazon-cognito-authentication-for-confluence?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1224457/aws-sso-alb-amazon-cognito-authentication-for-jira?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224457/aws-sso-alb-amazon-cognito-authentication-for-jira?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221738/user-sync-users-provisioning-sync-groups-sync-bamboo?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221738/user-sync-users-provisioning-sync-groups-sync-bamboo?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1217672/saml-single-sign-on-saml-sso-bamboo?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217672/saml-single-sign-on-saml-sso-bamboo?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1228240/hubspot-jira-crm-issue-link-integration-collaboration?hosting=cloud&tab=reviews", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228240/hubspot-jira-crm-issue-link-integration-collaboration?hosting=cloud&tab=reviews", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1231965/structure-your-jira-scrum-nasa-not-another-standup-app?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231965/structure-your-jira-scrum-nasa-not-another-standup-app?hosting=cloud&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1211109/user-management-and-license-optimizer-for-jira-confluence?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211109/user-management-and-license-optimizer-for-jira-confluence?hosting=cloud&tab=overview", "group": "Apps" } ], "out_of_scope": [ { "name": "https://id.atlassian.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://marketplace.atlassian.com/*", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://*.resolution.de", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Any app URLs that contain \"staging\", \"stg\", \"dev\" or \"ngrok\"", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-9358ab34ac09914a.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-62af323b0682b642", "name": "Revyz - Marketplace Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/revyz", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:26Z", "scope_published_at": "2026-09-23T17:36:45.963Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/revyz/changelog/fbba3e8c-4288-465c-ad89-ef4b4a0d9fa9.json" ], "in_scope": [ { "name": "Revyz Assets Data Manager for Jira- https://marketplace.atlassian.com/apps/1232736/revyz-assets-data-manager-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1232736/revyz-assets-data-manager-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Revyz Configuration Manager- https://marketplace.atlassian.com/apps/1231935/revyz-configuration-manager-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231935/revyz-configuration-manager-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Revyz Data Manager for Confluence- https://marketplace.atlassian.com/apps/1233056/revyz-data-manager-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233056/revyz-data-manager-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Revyz Backup Restore- https://marketplace.atlassian.com/apps/1228694/revyz-backup-restore?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228694/revyz-backup-restore?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-62af323b0682b642.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-e825660652a9e90b", "name": "RV Softwares Marketplace Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/rv-softwares", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:27Z", "scope_published_at": "2026-07-08T20:34:19.683Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/rv-softwares/changelog/9e63f52e-431e-4b61-9474-e1eb5cad2cac.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1223200/agile-tools-epic-tree-links-tree-time-in-status-worklogs?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223200/agile-tools-epic-tree-links-tree-time-in-status-worklogs?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1226187/time-in-status-reports?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226187/time-in-status-reports?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1230243/worklogs-time-tracking-timesheets?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230243/worklogs-time-tracking-timesheets?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1228019/issue-hierarchy-structure?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228019/issue-hierarchy-structure?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Agile Tools - https://marketplace.atlassian.com/apps/1223200/agile-tools-epic-tree-links-tree-time-in-status-worklogs?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223200/agile-tools-epic-tree-links-tree-time-in-status-worklogs?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Time in Status Reports - https://marketplace.atlassian.com/apps/1226187/time-in-status-reports?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226187/time-in-status-reports?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Worklogs Time Tracking and Timesheets - https://marketplace.atlassian.com/apps/1230243/worklogs-time-tracking-timesheets?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230243/worklogs-time-tracking-timesheets?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Issue Hierarchy Structure -https://marketplace.atlassian.com/apps/1228019/issue-hierarchy-structure?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228019/issue-hierarchy-structure?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-e825660652a9e90b.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-c8b3be65a8ce7ce4", "name": "SaaSJet", "program_url": "https://bugcrowd.com/engagements/saasjet", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:28Z", "scope_published_at": "2026-08-19T19:10:10.985Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/saasjet/changelog/be05e638-e07d-4601-84cc-47c2b7facc60.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1219732/time-in-status-for-jira-cloud?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219732/time-in-status-for-jira-cloud?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1219732/time-in-status?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219732/time-in-status?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1220385/issue-history?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220385/issue-history?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1220385/issue-history-for-jira?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220385/issue-history-for-jira?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1227085/forms-checklists-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227085/forms-checklists-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1220741/sla-time-and-report-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220741/sla-time-and-report-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1221462/time-between-statuses?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221462/time-between-statuses?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1228109/recurring-checklists-and-report?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228109/recurring-checklists-and-report?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1229405/cost-tracker-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229405/cost-tracker-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1231078/issue-creator-for-jira-cloud-capture-screen-annotate?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231078/issue-creator-for-jira-cloud-capture-screen-annotate?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-c8b3be65a8ce7ce4.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-d5232977eebb9998", "name": "Safety Bug Bounty", "program_url": "https://bugcrowd.com/engagements/openai-safety", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,500", "reward_min": "$250", "reward_max": "$7,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:29Z", "scope_published_at": "2026-08-07T18:31:30.219Z", "scope_group_count": 5, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/openai-safety/changelog/3dc49551-ddac-4a19-8cb7-6a0f44ff144e.json" ], "in_scope": [ { "name": "Agentic Tools", "asset_type": "other", "location": null, "group": "Agentic Tools Including MCP" }, { "name": "*.openai.com", "asset_type": "other", "location": null, "group": "OpenAI Proprietary Information" }, { "name": "openai.com", "asset_type": "website", "location": "https://openai.com/", "group": "Account and Platform Integrity" }, { "name": "Other", "asset_type": "other", "location": null, "group": "Other Novel Abuse" } ], "out_of_scope": [ { "name": "OpenAI models", "asset_type": "other", "location": null, "group": "Content Issues" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-d5232977eebb9998.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-f3cff1e0d12e7858", "name": "SAP Invitational Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/sap-private-invite", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $20,000", "reward_min": "$250", "reward_max": "$20,000", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:31Z", "scope_published_at": "2026-07-06T08:44:07.947Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/sap-private-invite/changelog/0ac488c0-d1d5-42c0-8983-62b0eedd33ca.json" ], "in_scope": [ { "name": "SAP SuccessFactors Employee Central", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP SuccessFactors Recruiting Marketing", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP S/4HANA Cloud Public Edition", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP S/4HANA Cloud Private Edition", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Integrated Business Planning for Supply Chain", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Cloud ALM", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Customer Data Cloud portfolio from Gigya", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Customer Data Platform", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP S/4HANA migration cockpit", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Risk and Assurance Management", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Continuous Integration and Delivery", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Order Management foundation", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Business Network for Logistics", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Decentralized Identity Verification", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Order and Delivery Scheduling", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Business Network for Asset Collaboration", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Watch List Screening", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP BusinessObjects Business Intelligence platform", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP WalkMe", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Signavio Process Intelligence", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Signavio Process Management", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP AI Core", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP BusinessOne", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "Gardener", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Concur", "asset_type": "website", "location": null, "group": "Our products" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-f3cff1e0d12e7858.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-bed722d3874ee39a", "name": "Savignano Software Solutions Marketplace Bug Bounty Program", "program_url": "https://bugcrowd.com/engagements/savignano", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:32Z", "scope_published_at": "2026-09-10T17:15:41.784Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/savignano/changelog/28aae822-add2-441e-9966-9c379c97117d.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1218251/s-notify-email-encryption-for-jira?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218251/s-notify-email-encryption-for-jira?hosting=datacenter", "group": "In-Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1218509/s-notify-email-encryption-for-confluence?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218509/s-notify-email-encryption-for-confluence?hosting=datacenter", "group": "In-Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1226720/s-notify-email-encryption-for-bitbucket?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226720/s-notify-email-encryption-for-bitbucket?hosting=datacenter", "group": "In-Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-bed722d3874ee39a.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-7440fb39ee67de1a", "name": "SecureDrop", "program_url": "https://bugcrowd.com/engagements/freedomofpress", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $2,500", "reward_min": "$100", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:33Z", "scope_published_at": "2026-08-26T18:55:50.108Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/freedomofpress/changelog/8cda910a-43f2-4767-8a42-e494490cf43a.json" ], "in_scope": [ { "name": "https://github.com/freedomofpress/securedrop", "asset_type": "other", "location": "https://github.com/freedomofpress/securedrop", "group": "In Scope Targets" }, { "name": "https://github.com/freedomofpress/securedrop-workstation", "asset_type": "other", "location": "https://github.com/freedomofpress/securedrop-workstation", "group": "In Scope Targets" }, { "name": "https://github.com/freedomofpress/securedrop-client", "asset_type": "other", "location": "https://github.com/freedomofpress/securedrop-client", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-7440fb39ee67de1a.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-eb13449fb7aa9493", "name": "SecureFlag Marketplace Bug Bounty", "program_url": "https://bugcrowd.com/engagements/secureflag-mbb-market", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:34Z", "scope_published_at": "2026-04-08T18:24:52.236Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/secureflag-mbb-market/changelog/9e559ff0-888f-4ad2-a37b-eddce655ce6c.json" ], "in_scope": [ { "name": "SecureFlag Knowledge Base - https://marketplace.atlassian.com/apps/1226453/secureflag-knowledge-base?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226453/secureflag-knowledge-base?tab=overview&hosting=cloud", "group": "In Scope Targets" }, { "name": "SecureFlag ThreatCanvas - https://marketplace.atlassian.com/apps/1232491?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1232491?tab=overview&hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-eb13449fb7aa9493.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-fa190530d12ab00d", "name": "SEEK", "program_url": "https://bugcrowd.com/engagements/seek", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $10,000", "reward_min": "$50", "reward_max": "$10,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:35Z", "scope_published_at": "2026-09-08T23:49:18.446Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/seek/changelog/c6255a1b-4e66-4536-bb13-cc725c374079.json" ], "in_scope": [ { "name": "*.seek.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.employer.seek.com", "asset_type": "website", "location": "https://*.employer.seek.com", "group": "In Scope Targets" }, { "name": "*.seekpass.co", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.jobsdb.com", "asset_type": "website", "location": "https://*.jobsdb.com", "group": "In Scope Targets" }, { "name": "*.jobstreet.com", "asset_type": "website", "location": "https://*.jobstreet.com", "group": "In Scope Targets" }, { "name": "https://seekcdn.com", "asset_type": "other", "location": "https://seekcdn.com", "group": "In Scope Targets" }, { "name": "*.myseek.xyz", "asset_type": "website", "location": "https://*.myseek.xyz", "group": "In Scope Targets" }, { "name": "*.outfra.xyz", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.skinfra.xyz", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "graphql.seek.com", "asset_type": "api", "location": "https://graphql.seek.com", "group": "API" }, { "name": "auth.seek.com", "asset_type": "api", "location": "https://auth.seek.com", "group": "API" }, { "name": "*.jobapi.net", "asset_type": "api", "location": null, "group": "API" }, { "name": "*.sol-data.com", "asset_type": "api", "location": null, "group": "API" }, { "name": "*.aips-internal.com", "asset_type": "website", "location": null, "group": "API" }, { "name": "SEEK mobile app for iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/seek-jobs-job-search/id520400855", "group": "Mobile Targets" }, { "name": "SEEK mobile app for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=au.com.seek&hl=en_AU&gl=US", "group": "Mobile Targets" }, { "name": "SEEK Pass Mobile App for iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/certsy/id1617796159", "group": "Mobile Targets" }, { "name": "SEEK Pass Mobile App for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.certsy.app", "group": "Mobile Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-fa190530d12ab00d.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-fa369eff5afec47f", "name": "Seek.com", "program_url": "https://bugcrowd.com/engagements/seek-com", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$25 - $6,000", "reward_min": "$25", "reward_max": "$6,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:36Z", "scope_published_at": "2026-05-14T01:53:10.198Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 9, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/seek-com/changelog/c2e4716d-4e31-47ea-8617-5cbe2e818657.json" ], "in_scope": [ { "name": "███████████████████", "asset_type": "website", "location": null, "group": "█████████████████████" }, { "name": "████████████", "asset_type": "website", "location": null, "group": "█████████████████████" }, { "name": "███████████████", "asset_type": "website", "location": null, "group": "█████████████████████" }, { "name": "██████████████████", "asset_type": "website", "location": null, "group": "█████████████████████" }, { "name": "█████████████████", "asset_type": "website", "location": null, "group": "█████████████████████" }, { "name": "██████████████", "asset_type": "website", "location": null, "group": "█████████████████████" }, { "name": "████████████████████████████", "asset_type": "website", "location": null, "group": "██████████████████" }, { "name": "███████████████████████████", "asset_type": "website", "location": null, "group": "██████████████████" }, { "name": "█████████████████████", "asset_type": "website", "location": null, "group": "██████████████████" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-fa369eff5afec47f.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "9 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-1c78c73cebd5a0eb", "name": "Shinetech Software Inc Marketplace Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/shinetech-software-market", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:37Z", "scope_published_at": "2026-09-03T00:38:29.583Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/shinetech-software-market/changelog/f14c154e-3396-4b2b-b1fb-2c8bd79f3a5c.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1221271/easy-heading-macro-floating-table-of-contents?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221271/easy-heading-macro-floating-table-of-contents?hosting=datacenter", "group": "In Scope Target" }, { "name": "https://marketplace.atlassian.com/apps/1221271/easy-heading-macro-floating-table-of-contents?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221271/easy-heading-macro-floating-table-of-contents?hosting=cloud&tab=overview", "group": "In Scope Target" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-1c78c73cebd5a0eb.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-b453878121ec1606", "name": "SimpliSafe Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/simplisafe", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $6,000", "reward_min": "$175", "reward_max": "$6,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:38Z", "scope_published_at": "2026-08-17T14:22:05.498Z", "scope_group_count": 4, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/simplisafe/changelog/3d443036-c530-47c2-8139-5649a834eb7b.json" ], "in_scope": [ { "name": "bb1.simplisafe.com", "asset_type": "api", "location": "https://bb1.simplisafe.com", "group": "SimpliSafe Home Security Platform - Backend" }, { "name": "bb2.simplisafe.com", "asset_type": "api", "location": "https://bb2.simplisafe.com", "group": "SimpliSafe Home Security Platform - Backend" }, { "name": "cb.simplisafe.com", "asset_type": "api", "location": "https://cb.simplisafe.com", "group": "SimpliSafe Home Security Platform - Backend" }, { "name": "api.simplisafe.com (HSP Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Home Security Platform - Backend" }, { "name": "api.services.simplisafe.com (HSP Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Home Security Platform - Backend" }, { "name": "*.prd.cam.simplisafe.com (HSP Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Home Security Platform - Backend" }, { "name": "*.prd.platform.simplisafe.com (HSP Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Home Security Platform - Backend" }, { "name": "*.prd.services.simplisafe.com (HSP Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Home Security Platform - Backend" }, { "name": "SimpliSafe Customer Webapp - US", "asset_type": "website", "location": "https://webapp.simplisafe.com", "group": "SimpliSafe Customer App" }, { "name": "SimpliSafe Customer Webapp - UK", "asset_type": "website", "location": "https://webapp.simplisafe.co.uk", "group": "SimpliSafe Customer App" }, { "name": "SimpliSafe Customer iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/simplisafe-home-security-app/id555798051", "group": "SimpliSafe Customer App" }, { "name": "SimpliSafe Customer Android App", "asset_type": "android", "location": "https://play.google.com/store/search?q=simplisafe&c=apps", "group": "SimpliSafe Customer App" }, { "name": "mfa.simplisafe.com", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "*.prd.aser.simplisafe.com", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "*.prd.webapps.simplisafe.com", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "api.simplisafe.com (App Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "api.services.simplisafe.com (App Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "*.prd.services.simplisafe.com (App Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "*.prd.platform.simplisafe.com (App Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "media.simplisafe.com", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "*.prd.cam.simplisafe.com (App Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "SimpliSafe Website - US", "asset_type": "website", "location": "https://simplisafe.com", "group": "SimpliSafe Ecommerce Platform" }, { "name": "SimpliSafe Website - UK", "asset_type": "website", "location": "https://simplisafe.co.uk", "group": "SimpliSafe Ecommerce Platform" }, { "name": "api.prd.commerce.simplisafe.com", "asset_type": "api", "location": null, "group": "SimpliSafe Ecommerce Platform" } ], "out_of_scope": [ { "name": "auth.simplisafe.com", "asset_type": "api", "location": null, "group": "Out of Scope Targets" }, { "name": "careers.simplisafe.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "clicks.simplisafe.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "library.simplisafe.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "livechat.simplisafe.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "press.simplisafe.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "support.simplisafe.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-b453878121ec1606.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-ed73386dabe2aacd", "name": "Skroutz Public Managed Bug Bounty", "program_url": "https://bugcrowd.com/engagements/skroutz", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $5,000", "reward_min": "$100", "reward_max": "$5,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:39Z", "scope_published_at": "2026-08-19T08:55:17.524Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/skroutz/changelog/136f05a0-10c7-428a-b65f-d9dfc27b662b.json" ], "in_scope": [ { "name": "https://www.skroutz.gr", "asset_type": "website", "location": "https://www.skroutz.gr", "group": "Skroutz Public Application" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-ed73386dabe2aacd.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-2f3f1cb837e30fea", "name": "Sky DACH Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/sky-plc-mbb-og2", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $1,000", "reward_min": "Points", "reward_max": "$1,000", "scope_rank": 1, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:40Z", "scope_published_at": "2026-01-07T12:03:08.954Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/sky-plc-mbb-og2/changelog/e795d126-59ee-4388-aa73-2206dcfceeb1.json" ], "in_scope": [ { "name": "All internet facing Sky DACH assets", "asset_type": "website", "location": null, "group": "In scope" } ], "out_of_scope": [ { "name": "*skybroadband.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skybet.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skynewsarabia.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skynews.com.au", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "All internet facing Sky UK/ROI assets", "asset_type": "website", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "All internet facing Sky Italy assets", "asset_type": "website", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-2f3f1cb837e30fea.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-73b5a8a6c9dc06e9", "name": "Sky Italy Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/sky-plc-mbb-og1", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $1,000", "reward_min": "Points", "reward_max": "$1,000", "scope_rank": 1, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:41Z", "scope_published_at": "2026-01-08T15:31:56.624Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/sky-plc-mbb-og1/changelog/6c4b1bbe-0f75-49e9-b4fe-cd26411d1722.json" ], "in_scope": [ { "name": "All internet facing Sky Italy assets", "asset_type": "website", "location": null, "group": "In scope" } ], "out_of_scope": [ { "name": "*skybroadband.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skybet.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skynewsarabia.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skynews.com.au", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*safetytraining.sky.it", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "All internet facing Sky UK/ROI assets", "asset_type": "website", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "All internet facing Sky DACH assets", "asset_type": "website", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-73b5a8a6c9dc06e9.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-75c6578ce8fdb5b5", "name": "Sky UK/ROI Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/sky-plc-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $1,000", "reward_min": "Points", "reward_max": "$1,000", "scope_rank": 1, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:42Z", "scope_published_at": "2026-01-07T12:01:14.122Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/sky-plc-mbb-og/changelog/029706df-805a-47ca-9a55-2da93b25b6ba.json" ], "in_scope": [ { "name": "All internet facing Sky UK/ROI assets", "asset_type": "website", "location": null, "group": "In scope" } ], "out_of_scope": [ { "name": "*skybroadband.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skybet.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skynewsarabia.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skynews.com.au", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "All internet facing Sky DACH assets", "asset_type": "website", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "All internet facing Sky Italy assets", "asset_type": "website", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-75c6578ce8fdb5b5.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-2a496c7014675793", "name": "Skyscanner", "program_url": "https://bugcrowd.com/engagements/skyscanner", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $8,000", "reward_min": "$100", "reward_max": "$8,000", "scope_rank": 4, "access_status": "open", "industry": "Consumer Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:43Z", "scope_published_at": "2026-07-24T10:20:34.086Z", "scope_group_count": 4, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/skyscanner/changelog/2c1e110f-7462-40b2-9539-13e36cd1dd1d.json" ], "in_scope": [ { "name": "Skyscanner iOS App", "asset_type": "ios", "location": null, "group": "In scope targets" }, { "name": "Skyscanner Android App", "asset_type": "android", "location": null, "group": "In scope targets" }, { "name": "gateway.skyscanner.net/*", "asset_type": "api", "location": null, "group": "In scope targets" }, { "name": "skyscanner.net/hotels/book/*", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "skyscanner.net/*", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "partnerportal.skyscanner.net/*", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.skyscanner.net", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "Skyscanner Android app", "asset_type": "android", "location": null, "group": "AI Bias Testing" }, { "name": "Skyscanner iOS app", "asset_type": "ios", "location": null, "group": "AI Bias Testing" }, { "name": "AWS Infrastructure", "asset_type": "other", "location": null, "group": "AWS Infrastructure" } ], "out_of_scope": [ { "name": "Corporate Email (*@skyscanner.net)", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "help.skyscanner.net", "asset_type": "website", "location": "https://help.skyscanner.net", "group": "Out of scope" }, { "name": "carhirehelp.skyscanner.net", "asset_type": "website", "location": "https://carhirehelp.skyscanner.net", "group": "Out of scope" }, { "name": "hotelshelp.skyscanner.net", "asset_type": "website", "location": "https://hotelshelp.skyscanner.net", "group": "Out of scope" }, { "name": "support.business.skyscanner.net", "asset_type": "website", "location": "https://support.business.skyscanner.net", "group": "Out of scope" }, { "name": "www.partners.skyscanner.net", "asset_type": "website", "location": "https://www.partners.skyscanner.net", "group": "Out of scope" }, { "name": "creators.skyscanner.net", "asset_type": "website", "location": "https://creators.skyscanner.net", "group": "Out of scope" }, { "name": "preferences.skyscanner.net", "asset_type": "website", "location": "https://preferences.skyscanner.net", "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-2a496c7014675793.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-a935fa9b8ffc5a50", "name": "Snapbytes Marketplace Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/snapbytes-market", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:44Z", "scope_published_at": "2026-09-23T17:51:44.298Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/snapbytes-market/changelog/5f4fafbc-42c3-423e-a1ee-0969d092994a.json" ], "in_scope": [ { "name": "SnapMetrics - https://marketplace.atlassian.com/apps/1237433/snapmetrics-real-time-analytics?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237433/snapmetrics-real-time-analytics?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-a935fa9b8ffc5a50.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-dc34e7961be1e0ca", "name": "SnapNames Bug Bounty", "program_url": "https://bugcrowd.com/engagements/snapnames", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $2,000", "reward_min": "Points", "reward_max": "$2,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:45Z", "scope_published_at": "2026-04-24T06:22:22.654Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/snapnames/changelog/edd9ae05-5b64-40ed-b7fc-ec8bd70979ea.json" ], "in_scope": [ { "name": "https://snapnames.com/", "asset_type": "website", "location": "https://snapnames.com/", "group": "In Scope" }, { "name": "https://www.namejet.com/", "asset_type": "website", "location": "https://www.namejet.com/", "group": "In Scope" } ], "out_of_scope": [ { "name": "*.snapnames.com", "asset_type": "website", "location": "https://www.*.snapnames.com", "group": "Out Of Scope" }, { "name": "*.namejet.com", "asset_type": "website", "location": "https://www.namejet.com", "group": "Out Of Scope" }, { "name": "*.buydomains.com", "asset_type": "website", "location": null, "group": "Out Of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-dc34e7961be1e0ca.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-fa4a054bd1c67263", "name": "SolDevelo", "program_url": "https://bugcrowd.com/engagements/soldevelo", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:46Z", "scope_published_at": "2026-08-13T04:00:34.336Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/soldevelo/changelog/5959ccd9-0c09-48bd-814f-89ece74ed8e3.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1219004/worklogs-time-tracking-and-reports?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219004/worklogs-time-tracking-and-reports?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1220026/multiple-checklists-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220026/multiple-checklists-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1222083/qality-test-management-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1222083/qality-test-management-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1223344/qality-plus-test-management-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1223344/qality-plus-test-management-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219196/team-performance-reports-and-insights?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219196/team-performance-reports-and-insights?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1229442/team-planner-resource-planning-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1229442/team-planner-resource-planning-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1235478/time-assistant-time-tracking-and-workload-dashboard?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1235478/time-assistant-time-tracking-and-workload-dashboard?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1235478/time-assistant-time-tracking-and-workload-dashboard?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235478/time-assistant-time-tracking-and-workload-dashboard?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-fa4a054bd1c67263.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-eb62f872e2df2201", "name": "Sophos", "program_url": "https://bugcrowd.com/engagements/sophos", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $80,000", "reward_min": "$100", "reward_max": "$80,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:47Z", "scope_published_at": "2025-12-04T10:00:53.560Z", "scope_group_count": 6, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/sophos/changelog/15ecb6b8-00f6-4b9e-a854-911e5c976a6e.json" ], "in_scope": [ { "name": "Intercept X Endpoint (Windows) - Zero-click RCE", "asset_type": "other", "location": "https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial ", "group": "Intercept X Endpoint (Windows) Special Target" }, { "name": "Sophos Central (Production) - Special Target", "asset_type": "website", "location": "https://central.sophos.com/", "group": "Sophos Central Special Target" }, { "name": "Sophos Firewall (XG/XGS, SFOS) - Pre-auth RCE", "asset_type": "iot", "location": null, "group": "Sophos Firewall Special Target" }, { "name": "Sophos Central (Production)", "asset_type": "website", "location": "https://central.sophos.com", "group": "Premium Bounty Eligible Targets" }, { "name": "Sophos Firewall (XG/XGS, SFOS)", "asset_type": "iot", "location": "https://www.sophos.com/en-us/products/next-gen-firewall", "group": "Premium Bounty Eligible Targets" }, { "name": "Intercept X Endpoint (Windows)", "asset_type": "other", "location": "https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial", "group": "Premium Bounty Eligible Targets" }, { "name": "Intercept X Endpoint (MacOS)", "asset_type": "other", "location": "https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial", "group": "Premium Bounty Eligible Targets" }, { "name": "Intercept X Endpoint (Linux)", "asset_type": "other", "location": "https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial", "group": "Premium Bounty Eligible Targets" }, { "name": "Intercept X Mobile (iOS)", "asset_type": "ios", "location": "https://www.sophos.com/en-us/products/mobile-control/free-trial", "group": "Premium Bounty Eligible Targets" }, { "name": "Intercept X Mobile (Android)", "asset_type": "android", "location": "https://www.sophos.com/en-us/products/mobile-control/free-trial", "group": "Premium Bounty Eligible Targets" }, { "name": "Sophos NDR Appliances (NDR, Investigation Console)", "asset_type": "iot", "location": "https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/ThreatAnalysisCenter/Integrations/Sophos/NDR/index.html", "group": "Premium Bounty Eligible Targets" }, { "name": "Other Sophos Appliances (RED, Switch, Access Points, ...)", "asset_type": "iot", "location": "https://www.sophos.com/en-us/products", "group": "Premium Bounty Eligible Targets" }, { "name": "Sophos-owned IT infrastructure (*.sophos.com)", "asset_type": "network", "location": "https://www.sophos.com/", "group": "Premium Bounty Eligible Targets" }, { "name": "SOPHOS/Secureworks : Taegis", "asset_type": "other", "location": null, "group": "Premium Bounty Eligible Targets" }, { "name": "SOPHOS/Secureworks : Redcloak", "asset_type": "other", "location": null, "group": "Premium Bounty Eligible Targets" }, { "name": "3rd party services hosted at *.sophos.com", "asset_type": "website", "location": null, "group": "Bounty Eligible Targets" }, { "name": "Sophos IT Infrastructure (all other Sophos domains)", "asset_type": "other", "location": null, "group": "Bounty Eligible Targets" }, { "name": "Any Other Sophos Product or Service", "asset_type": "other", "location": null, "group": "Bounty Eligible Targets" } ], "out_of_scope": [ { "name": "community.sophos.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "Any Cyberoam Product or Service", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "sophos.atlassian.net (Public service desk)", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "SPF/DKIM/DMARC issues", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "Sophos Firewall (Early Access Program (EAP) versions)", "asset_type": "iot", "location": null, "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-eb62f872e2df2201.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-6e1a96cd94993d4f", "name": "Soteri Marketplace Bug Bounty", "program_url": "https://bugcrowd.com/engagements/soteri", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$500 - $4,500", "reward_min": "$500", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:49Z", "scope_published_at": "2026-05-05T14:16:58.152Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/soteri/changelog/0dff46a7-7de9-42b0-998e-6818732b52c5.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1224167/security-for-confluence-enhanced-secret-scanner-by-soteri?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224167/security-for-confluence-enhanced-secret-scanner-by-soteri?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1224167/security-for-confluence-enhanced-secret-scanner-by-soteri?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224167/security-for-confluence-enhanced-secret-scanner-by-soteri?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1229376/security-for-jira-enhanced-secret-scanner-by-soteri?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229376/security-for-jira-enhanced-secret-scanner-by-soteri?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1229376/security-for-jira-enhanced-secret-scanner-by-soteri?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229376/security-for-jira-enhanced-secret-scanner-by-soteri?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1221399/security-for-bitbucket-enhanced-secret-scanner-by-soteri?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221399/security-for-bitbucket-enhanced-secret-scanner-by-soteri?hosting=datacenter&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-6e1a96cd94993d4f.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-9d9f8f6730052dfa", "name": "SoundCloud", "program_url": "https://bugcrowd.com/engagements/soundcloud", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $4,500", "reward_min": "$200", "reward_max": "$4,500", "scope_rank": 4, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:50Z", "scope_published_at": "2026-01-29T14:30:30.666Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/soundcloud/changelog/1450ec8b-3581-4da6-9025-960d20d7b4c9.json" ], "in_scope": [ { "name": "SoundCloud Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.soundcloud.android&hl=en&gl=US", "group": "In-scope targets" }, { "name": "soundcloud.com", "asset_type": "website", "location": "https://soundcloud.com", "group": "In-scope targets" }, { "name": "*.soundcloud.org", "asset_type": "website", "location": null, "group": "In-scope targets" }, { "name": "*.s-cloud.net", "asset_type": "website", "location": null, "group": "In-scope targets" }, { "name": "SoundCloud iOS app", "asset_type": "ios", "location": "https://apps.apple.com/us/app/soundcloud-music-audio/id336353151", "group": "In-scope targets" }, { "name": "*.soundcloud.com", "asset_type": "api", "location": "https://connect.soundcloud.com", "group": "In-scope targets" }, { "name": "*.services.repostnetwork.com", "asset_type": "api", "location": null, "group": "In-scope targets" }, { "name": "api-*.soundcloud.com", "asset_type": "api", "location": null, "group": "In-scope targets" }, { "name": "artists.soundcloud.com", "asset_type": "website", "location": "http://artists.soundcloud.com/", "group": "In-scope targets" }, { "name": "soundcloud.org", "asset_type": "website", "location": "https://soundcloud.org", "group": "In-scope targets" } ], "out_of_scope": [ { "name": "blog.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "status.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "help.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "community.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "copyright.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "advertising.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "soundcloudmail.com", "asset_type": "other", "location": "https://soundcloudmail.com", "group": "Out-Of-Scope" }, { "name": "press.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "scdrops.soundcloud.com", "asset_type": "website", "location": "https://scdrops.soundcloud.com", "group": "Out-Of-Scope" }, { "name": "promote.soundcloud.com", "asset_type": "website", "location": "https://promote.soundcloud.com", "group": "Out-Of-Scope" }, { "name": "contest.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "playback.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "jobs.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "playerone.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "support.soundcloud.org", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "secdomaintest.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "firston.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-9d9f8f6730052dfa.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-93db9847dd214c6d", "name": "SpaceX/Starlink", "program_url": "https://bugcrowd.com/engagements/spacex", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $100,000", "reward_min": "Points", "reward_max": "$100,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Self-managed", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:51Z", "scope_published_at": "2026-08-31T23:58:39.380Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/spacex/changelog/74048ca1-6181-43d8-a863-8238914c8ba1.json" ], "in_scope": [ { "name": "SpaceX and Starlink assets (target information and rewards detailed above on the brief)", "asset_type": "website", "location": null, "group": "In Scope targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-93db9847dd214c6d.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-5dbe680990001fd6", "name": "Square", "program_url": "https://bugcrowd.com/engagements/square", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $18,000", "reward_min": "Points", "reward_max": "$18,000", "scope_rank": 3, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:52Z", "scope_published_at": "2026-10-01T05:59:28.142Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 1, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/square/changelog/dcb212c3-8370-492c-803f-81a364c230df.json" ], "in_scope": [ { "name": "████████████", "asset_type": "website", "location": null, "group": "██████" }, { "name": "██████████████", "asset_type": "website", "location": null, "group": "██████" }, { "name": "█████████████", "asset_type": "website", "location": null, "group": "██████" }, { "name": "███████████████████████████████████████████████████", "asset_type": "android", "location": null, "group": "██████" }, { "name": "███████████████████████████████████████████████", "asset_type": "ios", "location": null, "group": "██████" }, { "name": "███████████████", "asset_type": "hardware", "location": null, "group": "██████" }, { "name": "██████████", "asset_type": "website", "location": null, "group": "██████" } ], "out_of_scope": [ { "name": "██████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████████████████████████████████████████████", "asset_type": "other", "location": null, "group": "████████████" }, { "name": "███████████████████████", "asset_type": "other", "location": null, "group": "████████████" }, { "name": "███████████████████████████████████████", "asset_type": "android", "location": null, "group": "████████████" }, { "name": "███████████████████████████████████", "asset_type": "ios", "location": null, "group": "████████████" }, { "name": "█████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-5dbe680990001fd6.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "1 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-88b7710849a7e851", "name": "STAGIL Marketplace Bug Bounty", "program_url": "https://bugcrowd.com/engagements/stagil", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:53Z", "scope_published_at": "2026-07-14T01:10:27.939Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/stagil/changelog/204802ae-a1e0-4d0b-919a-41308ac3ba3e.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1215311/stagil-assets-advanced-links-data-model-matrix-structure?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215311/stagil-assets-advanced-links-data-model-matrix-structure?tab=overview&hosting=cloud", "group": "In Scope Target" }, { "name": "https://marketplace.atlassian.com/apps/1219099/stagil-tables-todo-checklists-reports-statistics?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219099/stagil-tables-todo-checklists-reports-statistics?hosting=cloud&tab=overview", "group": "In Scope Target" }, { "name": "https://marketplace.atlassian.com/apps/1211243/timetracker-time-tracking-timesheet-reporting-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211243/timetracker-time-tracking-timesheet-reporting-for-jira?hosting=cloud&tab=overview", "group": "In Scope Target" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-88b7710849a7e851.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-e84d27dd9e44e18b", "name": "Statuspage", "program_url": "https://bugcrowd.com/engagements/statuspage", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,000", "reward_min": "$100", "reward_max": "$4,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:54Z", "scope_published_at": "2026-04-07T21:21:10.467Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/statuspage/changelog/67774d34-82ea-4d04-bfdf-89141a724bbb.json" ], "in_scope": [ { "name": "manage.statuspage.io", "asset_type": "website", "location": "https://manage.statuspage.io", "group": "In Scope" }, { "name": "*.statuspage.io", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-e84d27dd9e44e18b.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-d4b607788ef63337", "name": "Stiltsoft", "program_url": "https://bugcrowd.com/engagements/stiltsoft", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $3,000", "reward_min": "$100", "reward_max": "$3,000", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:55Z", "scope_published_at": "2026-09-26T12:23:26.932Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/stiltsoft/changelog/a463c8f2-1492-4087-8d68-ecf85e3d05ae.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/27447/table-filter-and-charts-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/27447/table-filter-and-charts-for-confluence?hosting=cloud", "group": "High-Priority | In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1210934/awesome-graphs-for-bitbucket?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1210934/awesome-graphs-for-bitbucket?hosting=cloud", "group": "High-Priority | In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1210934/awesome-graphs-for-bitbucket?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1210934/awesome-graphs-for-bitbucket?hosting=datacenter", "group": "High-Priority | In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/27447/table-filter-and-charts-for-confluence?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/27447/table-filter-and-charts-for-confluence?hosting=datacenter", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1212507/smart-attachments-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1212507/smart-attachments-for-jira?hosting=cloud", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1222084/spreadsheet-issue-field-editor?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222084/spreadsheet-issue-field-editor?hosting=cloud", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1210766/teamcity-integration-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1210766/teamcity-integration-for-jira?hosting=cloud", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1222102/webhook-manager-for-confluence-cloud?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222102/webhook-manager-for-confluence-cloud?hosting=cloud", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1237512/latex-math-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237512/latex-math-for-confluence?hosting=cloud", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1237729/checklist-for-jira-cloud-smart-todo-lists?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237729/checklist-for-jira-cloud-smart-todo-lists?hosting=cloud", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1214971/handy-macros-for-confluence-status-dropdown-formatting?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214971/handy-macros-for-confluence-status-dropdown-formatting?hosting=datacenter", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1214971/handy-macros-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214971/handy-macros-for-confluence?hosting=cloud", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1214110/courses-and-quizzes-lms-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214110/courses-and-quizzes-lms-for-confluence?hosting=cloud", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1899492230/live-tables-from-csv-json-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1899492230/live-tables-from-csv-json-for-confluence?hosting=cloud&tab=overview", "group": "Other - In Scope Targets" } ], "out_of_scope": [ { "name": "*.atlassian.com", "asset_type": "website", "location": "https://*.atlassian.com", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-d4b607788ef63337.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-340c854715d1afd4", "name": "StonikByte", "program_url": "https://bugcrowd.com/engagements/stonikbyte", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:56Z", "scope_published_at": "2026-10-01T19:49:53.185Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/stonikbyte/changelog/4be6048f-9d65-4761-9655-7915ec388dac.json" ], "in_scope": [ { "name": "Documents for Jira - Cloud - https://marketplace.atlassian.com/apps/1211062/documents-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211062/documents-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Great Gadgets for Confluence Cloud | https://marketplace.atlassian.com/apps/1226592/great-gadgets-for-confluence-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226592/great-gadgets-for-confluence-cloud?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Project Team for Jira Cloud | https://marketplace.atlassian.com/apps/1217117/project-team-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217117/project-team-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Great Gadgets for Jira Cloud - https://marketplace.atlassian.com/apps/1216564/great-gadgets-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216564/great-gadgets-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Velocity & Throughput Charts for Agile, Scrum, Kanban - https://marketplace.atlassian.com/apps/607387265/velocity-throughput-charts-for-agile-scrum-kanban?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/607387265/velocity-throughput-charts-for-agile-scrum-kanban?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "DevOps Gadgets for Jira (Insights from GitHub & BB) - https://marketplace.atlassian.com/apps/1237211/devops-gadgets-for-jira-insights-from-github-bb?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237211/devops-gadgets-for-jira-insights-from-github-bb?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/2077076462/wip-run-wip-aging-charts-for-scrum-kanban-scaled-agile?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/2077076462/wip-run-wip-aging-charts-for-scrum-kanban-scaled-agile?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/375826955/burndown-burnup-charts-with-forecast-for-agile-teams?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/375826955/burndown-burnup-charts-with-forecast-for-agile-teams?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Cumulative Flow Diagram - https://marketplace.atlassian.com/apps/1752044660/cumulative-flow-diagram-cfd-charts-for-agile-scrum-kanban?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1752044660/cumulative-flow-diagram-cfd-charts-for-agile-scrum-kanban?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [ { "name": "Non- Atlassian Marketplace Apps", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-340c854715d1afd4.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-3491c9c46dc0dab2", "name": "Sykora IT Marketplace Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/sykora-it-market", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:57Z", "scope_published_at": "2026-08-13T03:56:46.720Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/sykora-it-market/changelog/d31a8730-219e-4e4f-9d66-1c60c8755390.json" ], "in_scope": [ { "name": "Azure Sync for Jira Assets - https://marketplace.atlassian.com/apps/1234296/azure-sync-for-jira-assets?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1234296/azure-sync-for-jira-assets?hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-3491c9c46dc0dab2.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-9052f631389a67cb", "name": "T-Mobile", "program_url": "https://bugcrowd.com/engagements/t-mobile", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $133,700", "reward_min": "Points", "reward_max": "$133,700", "scope_rank": 4, "access_status": "open", "industry": "Telecommunications", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:58Z", "scope_published_at": "2026-09-23T21:45:11.265Z", "scope_group_count": 7, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/t-mobile/changelog/7978066a-0855-409b-9333-cfb95766b31e.json" ], "in_scope": [ { "name": "Self-Register Account on T-Mobile Microsoft Entra ID", "asset_type": "other", "location": null, "group": "Special Target" }, { "name": "Cellular Network Auth Bypass via Web App/T-Life (404-200-7239)", "asset_type": "network", "location": null, "group": "Special Target" }, { "name": "T&P Servers (Temporarily Out of Scope)", "asset_type": "network", "location": null, "group": "Special Target" }, { "name": "t-mobile.com", "asset_type": "website", "location": "https://t-mobile.com", "group": "Core Assets" }, { "name": "account.t-mobile.com", "asset_type": "website", "location": "https://account.t-mobile.com", "group": "Core Assets" }, { "name": "*.api.t-mobile.com", "asset_type": "api", "location": "https://api.t-mobile.com", "group": "Core Assets" }, { "name": "metrobyt-mobile.com", "asset_type": "website", "location": "https://metrobyt-mobile.com", "group": "Core Assets" }, { "name": "sprint.com", "asset_type": "website", "location": "https://sprint.com", "group": "Core Assets" }, { "name": "tfb.t-mobile.com", "asset_type": "website", "location": "https://tfb.t-mobile.com", "group": "Core Assets" }, { "name": "devedge.t-mobile.com", "asset_type": "website", "location": "https://devedge.t-mobile.com", "group": "Core Assets" }, { "name": "tess.service-now.com", "asset_type": "website", "location": "https://tess.service-now.com", "group": "Core Assets" }, { "name": "DIGITS - Web, Desktop, Mobile", "asset_type": "website", "location": "https://digits.t-mobile.com", "group": "Core Assets" }, { "name": "account.business.t-mobile.com", "asset_type": "website", "location": "https://account.business.t-mobile.com", "group": "Core Assets" }, { "name": "*.t-mobile.com", "asset_type": "website", "location": "https://t-mobile.com", "group": "Supplemental Assets" }, { "name": "*.metrobyt-mobile.com", "asset_type": "website", "location": "https://metrobyt-mobile.com", "group": "Supplemental Assets" }, { "name": "*.sprint.com", "asset_type": "website", "location": "https://sprint.com", "group": "Supplemental Assets" }, { "name": "api.vistarmedia.com", "asset_type": "website", "location": "https://api.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "packages.cortexpowered.com", "asset_type": "website", "location": "https://packages.cortexpowered.com", "group": "Supplemental Assets" }, { "name": "api.vistarmedia.eu", "asset_type": "website", "location": "https://api.vistarmedia.eu", "group": "Supplemental Assets" }, { "name": "production-dynam-creative.vistarmedia.com", "asset_type": "website", "location": "https://production-dynam-creative.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "storybook.vistarmedia.com", "asset_type": "website", "location": "https://storybook.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "creatives.vistarmedia.com", "asset_type": "website", "location": "https://creatives.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "sflower.cortexpowered.com", "asset_type": "website", "location": "https://sflower.cortexpowered.com", "group": "Supplemental Assets" }, { "name": "production-delivery-metrics-svc.vistarmedia.com", "asset_type": "website", "location": "https://production-delivery-metrics-svc.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "maps.vistarmedia.com", "asset_type": "website", "location": "https://maps.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "transcodes-cdn.vistarmedia.com", "asset_type": "website", "location": "https://transcodes-cdn.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "assets-cdn.vistarmedia.com", "asset_type": "website", "location": "https://assets-cdn.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "docker-staging.adstruc.com", "asset_type": "website", "location": "https://docker-staging.adstruc.com", "group": "Supplemental Assets" }, { "name": "staging-trafficking.vistarmedia.com", "asset_type": "website", "location": "https://staging-trafficking.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "job-svc-b.vistarmedia.com", "asset_type": "website", "location": "https://job-svc-b.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "docsite.vistarmedia.com", "asset_type": "website", "location": "https://docsite.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "sfleet.cortexpowered.com", "asset_type": "website", "location": "https://sfleet.cortexpowered.com", "group": "Supplemental Assets" }, { "name": "audience-builder.vistarmedia.com", "asset_type": "website", "location": "https://audience-builder.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "staging-login.vistarmedia.com", "asset_type": "website", "location": "https://staging-login.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "clients.adstruc.com", "asset_type": "website", "location": "https://clients.adstruc.com", "group": "Supplemental Assets" }, { "name": "demo.adstruc.com", "asset_type": "website", "location": "https://demo.adstruc.com", "group": "Supplemental Assets" }, { "name": "*.uscc.net", "asset_type": "website", "location": "https://*.uscc.net", "group": "Supplemental Assets" }, { "name": "*.uscc.com", "asset_type": "website", "location": "https://*.uscc.com", "group": "Supplemental Assets" }, { "name": "*.uscellular.com", "asset_type": "website", "location": "https://*.uscellular.com", "group": "Supplemental Assets" }, { "name": "dashboard-101.moengage.com", "asset_type": "website", "location": "https://dashboard-101.moengage.com", "group": "Supplemental Assets" }, { "name": "assurancewireless.com", "asset_type": "website", "location": "https://www.assurancewireless.com", "group": "Supplemental Assets" }, { "name": "*.assurancewireless.com", "asset_type": "website", "location": "https://*.assurancewireless.com", "group": "Supplemental Assets" }, { "name": "assets.platform.blis.com", "asset_type": "website", "location": "https://assets.platform.blis.com", "group": "Supplemental Assets" }, { "name": "assets.development.amazon-tacticalplanner.com", "asset_type": "website", "location": "https://assets.development.amazon-tacticalplanner.com", "group": "Supplemental Assets" }, { "name": "assets.platform.development.blis.com", "asset_type": "website", "location": "https://assets.platform.development.blis.com", "group": "Supplemental Assets" }, { "name": "assets.platform.rc.blis.com", "asset_type": "website", "location": "https://assets.platform.rc.blis.com", "group": "Supplemental Assets" }, { "name": "audiencelogos.blis.com", "asset_type": "website", "location": "https://audiencelogos.blis.com", "group": "Supplemental Assets" }, { "name": "blis.com", "asset_type": "website", "location": "https://blis.com", "group": "Supplemental Assets" }, { "name": "creative.infinity.blismedia.com", "asset_type": "website", "location": "https://creative.infinity.blismedia.com", "group": "Supplemental Assets" }, { "name": "development.wmaudience.com", "asset_type": "website", "location": "https://development.wmaudience.com", "group": "Supplemental Assets" }, { "name": "imply-pivot.blis.com", "asset_type": "website", "location": "https://imply-pivot.blis.com", "group": "Supplemental Assets" }, { "name": "imply-pivot.test.blis.com", "asset_type": "website", "location": "https://imply-pivot.test.blis.com", "group": "Supplemental Assets" }, { "name": "imply.blis.com", "asset_type": "website", "location": "https://imply.blis.com", "group": "Supplemental Assets" }, { "name": "imply.internal.platform.blis.com", "asset_type": "website", "location": "https://imply.internal.platform.blis.com", "group": "Supplemental Assets" }, { "name": "imply.platform.blis.com", "asset_type": "website", "location": "https://imply.platform.blis.com", "group": "Supplemental Assets" }, { "name": "imply.platform.development.blis.com", "asset_type": "website", "location": "https://imply.platform.development.blis.com", "group": "Supplemental Assets" }, { "name": "imply.platform.rc.blis.com", "asset_type": "website", "location": "https://imply.platform.rc.blis.com", "group": "Supplemental Assets" }, { "name": "imply.test.blis.com", "asset_type": "website", "location": "https://imply.test.blis.com", "group": "Supplemental Assets" }, { "name": "imply.wmaudience.com", "asset_type": "website", "location": "https://imply.wmaudience.com", "group": "Supplemental Assets" }, { "name": "internal.platform.blis.com", "asset_type": "website", "location": "https://internal.platform.blis.com", "group": "Supplemental Assets" }, { "name": "jenkins-github.gcp.blis.com", "asset_type": "website", "location": "https://jenkins-github.gcp.blis.com", "group": "Supplemental Assets" }, { "name": "platform.blis.com", "asset_type": "website", "location": "https://platform.blis.com", "group": "Supplemental Assets" }, { "name": "platform.blismedia.com", "asset_type": "website", "location": "https://platform.blismedia.com", "group": "Supplemental Assets" }, { "name": "platform.development.blis.com", "asset_type": "website", "location": "https://platform.development.blis.com", "group": "Supplemental Assets" }, { "name": "platform.development2.blis.com", "asset_type": "website", "location": "https://platform.development2.blis.com", "group": "Supplemental Assets" }, { "name": "platform.rc.blis.com", "asset_type": "website", "location": "https://platform.rc.blis.com", "group": "Supplemental Assets" }, { "name": "privacy.blismedia.com", "asset_type": "website", "location": "https://privacy.blismedia.com", "group": "Supplemental Assets" }, { "name": "rc.wmaudience.com", "asset_type": "website", "location": "https://rc.wmaudience.com", "group": "Supplemental Assets" }, { "name": "signature.blis.com", "asset_type": "website", "location": "https://signature.blis.com", "group": "Supplemental Assets" }, { "name": "sitepixel.blis.com", "asset_type": "website", "location": "https://sitepixel.blis.com", "group": "Supplemental Assets" }, { "name": "sitepixel.dev.blis.com", "asset_type": "website", "location": "https://sitepixel.dev.blis.com", "group": "Supplemental Assets" }, { "name": "wiki.atom-lens.com", "asset_type": "website", "location": "https://wiki.atom-lens.com", "group": "Supplemental Assets" }, { "name": "wmaudience.com", "asset_type": "website", "location": "https://wmaudience.com", "group": "Supplemental Assets" }, { "name": "Subdomain Takeover", "asset_type": "other", "location": null, "group": "Static Bug-Class Rewards" }, { "name": "T-Life - iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/t-life/id1111876388", "group": "Mobile Targets" }, { "name": "T-Life - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.tmobile.tuesdays&hl=en_US&gl=US", "group": "Mobile Targets" } ], "out_of_scope": [ { "name": "/self-service-*", "asset_type": "website", "location": null, "group": "Restricted Targets" }, { "name": "http://10.72.218.66/flag.txt", "asset_type": "network", "location": null, "group": "Restricted Targets" }, { "name": "http://10.62.252.214/flag.txt", "asset_type": "network", "location": null, "group": "Restricted Targets" }, { "name": "*.sprint.net", "asset_type": "website", "location": null, "group": "Restricted Targets" }, { "name": "*.mobile.uscc.net", "asset_type": "website", "location": null, "group": "Restricted Targets" }, { "name": "*.mobile.uscc.com", "asset_type": "website", "location": null, "group": "Restricted Targets" }, { "name": "*.moengage.com", "asset_type": "website", "location": "https://*.moengage.com", "group": "Restricted Targets" }, { "name": "appointments.uscellular.com", "asset_type": "website", "location": "https://appointments.uscellular.com", "group": "Restricted Targets" }, { "name": "Any domain, property, product, protocol, or service of the app/hardware/software version not explicitly listed in the In-Scope section is out of scope; submissions are welcome but not guaranteed for the bounty/bonus.", "asset_type": "other", "location": null, "group": "Categorical Exclusions" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-9052f631389a67cb.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-216b27245e80c7f3", "name": "Tamedia", "program_url": "https://bugcrowd.com/engagements/tamedia", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,500", "reward_min": "$150", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:59Z", "scope_published_at": "2025-08-18T07:05:30.607Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/tamedia/changelog/fe08c7af-8157-4dd9-a9e9-35f7df17507c.json" ], "in_scope": [ { "name": "https://www.tagesanzeiger.ch", "asset_type": "website", "location": "https://www.tagesanzeiger.ch", "group": "Paid-Media Frontends " }, { "name": "API calls going to disco-api from https://www.tagesanzeiger.ch", "asset_type": "api", "location": null, "group": "Paid-Media Frontends " } ], "out_of_scope": [ { "name": "https://abo.inscopedomain.ch", "asset_type": "website", "location": "https://abo.inscopedomain.ch", "group": "Out of scope targets" }, { "name": "https://login.inscopedomain.ch/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://auth.inscopedomain.ch/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://tgt.inscopedomain.ch/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://shop.inscopedomain.ch/", "asset_type": "website", "location": null, "group": "Out of scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-216b27245e80c7f3.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-e9282a84c7c8bfb5", "name": "Tesla", "program_url": "https://bugcrowd.com/engagements/tesla", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $100,000", "reward_min": "$100", "reward_max": "$100,000", "scope_rank": 4, "access_status": "open", "industry": "Automotive", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:01Z", "scope_published_at": "2025-10-30T20:56:26.010Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/tesla/changelog/fd49b343-a058-4718-9b7b-dbb3199dc555.json" ], "in_scope": [ { "name": "*.tesla.cn", "asset_type": "website", "location": null, "group": "Non-vehicle vulnerabilities" }, { "name": "*.tesla.services", "asset_type": "website", "location": null, "group": "Non-vehicle vulnerabilities" }, { "name": "Official Tesla iOS apps", "asset_type": "ios", "location": "https://apps.apple.com/us/app/tesla/id582007913", "group": "Non-vehicle vulnerabilities" }, { "name": "*.tesla.com", "asset_type": "website", "location": null, "group": "Non-vehicle vulnerabilities" }, { "name": "*.teslamotors.com", "asset_type": "website", "location": null, "group": "Non-vehicle vulnerabilities" }, { "name": "Any host verified to be owned by Tesla Motors Inc. (domains/IP space/etc.)", "asset_type": "website", "location": null, "group": "Non-vehicle vulnerabilities" }, { "name": "*.solarcity.com", "asset_type": "website", "location": null, "group": "Non-vehicle vulnerabilities" }, { "name": "*.teslainsuranceservices.com", "asset_type": "website", "location": null, "group": "Non-vehicle vulnerabilities" }, { "name": "Official Tesla Android apps", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.teslamotors.tesla&hl=en_US&gl=US", "group": "Non-vehicle vulnerabilities" }, { "name": "Tesla Energy hardware you own", "asset_type": "hardware", "location": null, "group": "Non-vehicle vulnerabilities" }, { "name": "Tesla vehicle hardware that you own", "asset_type": "hardware", "location": null, "group": "Vehicle Targets" } ], "out_of_scope": [ { "name": "employeefeedback.tesla.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "energysupport.tesla.com (you can report vulnerabilities to bugbounty.zoho.com)", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "engage.tesla.com", "asset_type": "website", "location": "https://engage.tesla.com/", "group": "OUT OF SCOPE" }, { "name": "*.engage.tesla.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "feedback.tesla.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "feedback.teslamotors.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "ir.tesla.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "ir.teslamotors.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "mkto.teslamotors.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "shop.eu.teslamotors.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "service.tesla.com/docs/*", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "service.tesla.cn/docs/*", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "Any domains from acquisitions, such as maxwell.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "Any other third-party websites hosted by non-Tesla entities", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-e9282a84c7c8bfb5.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-bc44de486a361c0f", "name": "The Hut Group: Public Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/hutgroup-public", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $2,500", "reward_min": "$100", "reward_max": "$2,500", "scope_rank": 3, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:02Z", "scope_published_at": "2026-01-06T11:44:00.554Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/hutgroup-public/changelog/c321ca42-ab54-4b40-8f62-939fa6cc82dc.json" ], "in_scope": [ { "name": "https://*.cultbeauty.co.uk/", "asset_type": "website", "location": "https://www.cultbeauty.co.uk/", "group": "Ingenuity E-Commerce" }, { "name": "https://*.lookfantastic.com/", "asset_type": "website", "location": "https://www.lookfantastic.com/", "group": "Ingenuity E-Commerce" }, { "name": "https://*.myprotein.com/", "asset_type": "website", "location": "https://www.myprotein.com/", "group": "Ingenuity E-Commerce" }, { "name": "https://*.myvitamins.com/", "asset_type": "website", "location": "https://www.myvitamins.com/", "group": "Ingenuity E-Commerce" }, { "name": "https://*.arrowfilms.com", "asset_type": "website", "location": "https://www.arrowfilms.com", "group": "Ingenuity E-Commerce" }, { "name": "https://*.mankind.co.uk/", "asset_type": "website", "location": "https://www.mankind.co.uk/", "group": "Ingenuity E-Commerce" }, { "name": "https://*.illamasqua.com/", "asset_type": "website", "location": "https://www.illamasqua.com/", "group": "Ingenuity E-Commerce" }, { "name": "https://www.matalan.co.uk", "asset_type": "website", "location": "https://www.matalan.co.uk", "group": "Ingenuity E-Commerce" }, { "name": "https://*.enjoyselfish.com", "asset_type": "website", "location": "https://www.enjoyselfish.com", "group": "Ingenuity E-Commerce" } ], "out_of_scope": [ { "name": "https://www.myprotein.com.tr/", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-bc44de486a361c0f.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-0f5512b619865d49", "name": "The Plugin People", "program_url": "https://bugcrowd.com/engagements/plugin-people", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:03Z", "scope_published_at": "2026-06-15T10:58:20.652Z", "scope_group_count": 7, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/plugin-people/changelog/eb788c78-44ad-4db0-84ed-d3696d765324.json" ], "in_scope": [ { "name": "[Cloud] Enterprise Mail Handler (JEMHC) for Jira Cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/4832/enterprise-mail-handler-for-jira-jemh?hosting=cloud&tab=overview", "group": "[Cloud] Enterprise Mail Handler (JEMHC) for Jira Cloud" }, { "name": "[DC] Enterprise Mail Handler (JEMH) for Jira", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/4832/enterprise-mail-handler-for-jira-cloud-jemhc-and-dc?hosting=datacenter&tab=overview", "group": "[DC] Enterprise Mail Handler (JEMH) for Jira DataCenter" }, { "name": "[Cloud] Custom Space User Management (CSUM) for Confluence Cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/133/custom-space-user-management-csum-for-dc-and-cloud?hosting=cloud&tab=overview", "group": "[Cloud] Custom Space User Management (CSUM) for Confluence Cloud" }, { "name": "[DC] Custom Space User Management (CSUM)", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/133/custom-space-user-management-csum-for-dc-and-cloud?hosting=datacenter&tab=overview", "group": "[DC] Custom Space User Management (CSUM) for Confluence DataCenter" }, { "name": "[DC] Latex for Confluence", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/207/latex-and-mathjax?hosting=datacenter&tab=overview", "group": "[DC] Latex for Confluence DataCenter" }, { "name": "[DC] Switch User (SU) for Jira", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/5043/switch-user-su-for-jira?hosting=datacenter&tab=overview", "group": "[DC] Switch User (SU) for Jira DataCenter" }, { "name": "[DC] Switch User (SU) for Confluence", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/9475/switch-user-su-for-confluence?hosting=datacenter&tab=overview", "group": "[DC] Switch User (SU) for Confluence DataCenter" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-0f5512b619865d49.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-be6f5e6db3043f04", "name": "The Trade Desk", "program_url": "https://bugcrowd.com/engagements/thetradedesk-mbb", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $5,000", "reward_min": "$175", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:04Z", "scope_published_at": "2026-01-13T21:19:57.046Z", "scope_group_count": 5, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/thetradedesk-mbb/changelog/a5e48d28-ece7-463c-b333-e6b613af0298.json" ], "in_scope": [ { "name": "open.sincera.io", "asset_type": "website", "location": "https://open.sincera.io", "group": "Special Target" }, { "name": "desk.thetradedesk.com", "asset_type": "website", "location": "https://desk.thetradedesk.com", "group": "Tier 1 Targets" }, { "name": "api.thetradedesk.com", "asset_type": "api", "location": "https://api.thetradedesk.com", "group": "Tier 1 Targets" }, { "name": "auth.thetradedesk.com", "asset_type": "website", "location": "https://auth.thetradedesk.com", "group": "Tier 1 Targets" }, { "name": "partner.thetradedesk.com", "asset_type": "website", "location": "https://partner.thetradedesk.com", "group": "Tier 1 Targets" }, { "name": "www.thetradedesk.com", "asset_type": "website", "location": "https://www.thetradedesk.com", "group": "Tier 1 Targets" }, { "name": "ops-sso.adsrvr.org", "asset_type": "website", "location": "https://ops-sso.adsrvr.org/", "group": "Tier 1 Targets" }, { "name": "myopenpass.com", "asset_type": "website", "location": "https://myopenpass.com", "group": "Tier 1 Targets" }, { "name": "auth.myopenpass.com", "asset_type": "api", "location": "https://auth.myopenpass.com", "group": "Tier 1 Targets" }, { "name": "partner.myopenpass.com", "asset_type": "website", "location": "https://partner.myopenpass.com", "group": "Tier 1 Targets" }, { "name": "atlantis-ext.myopenpass.com", "asset_type": "api", "location": "https://atlantis-ext.myopenpass.com", "group": "Tier 1 Targets" }, { "name": "*.prod.uidapi.com", "asset_type": "api", "location": "https://prod.uidapi.com", "group": "Tier 1 Targets" }, { "name": "prod.euid.eu", "asset_type": "api", "location": "https://prod.euid.eu", "group": "Tier 1 Targets" }, { "name": "core-prod.uidapi.com", "asset_type": "api", "location": "https://core-prod.uidapi.com", "group": "Tier 1 Targets" }, { "name": "optout-prod.uidapi.com", "asset_type": "api", "location": "https://optout-prod.uidapi.com", "group": "Tier 1 Targets" }, { "name": "optout.prod.euid.eu", "asset_type": "api", "location": "https://optout.prod.euid.eu", "group": "Tier 1 Targets" }, { "name": "transparentadvertising.com", "asset_type": "website", "location": "https://transparentadvertising.com", "group": "Tier 1 Targets" }, { "name": "transparentadvertising.eu", "asset_type": "website", "location": "https://transparentadvertising.eu", "group": "Tier 1 Targets" }, { "name": "portal.unifiedid.com", "asset_type": "website", "location": "https://portal.unifiedid.com", "group": "Tier 1 Targets" }, { "name": "*.thetradedesk.com", "asset_type": "website", "location": null, "group": "Tier 2 Targets" }, { "name": "*.adsrvr.org", "asset_type": "website", "location": null, "group": "Tier 2 Targets" }, { "name": "www.thecurrent.com", "asset_type": "website", "location": "https://www.thecurrent.com", "group": "Tier 2 Targets" }, { "name": "cdn.myopenpass.com", "asset_type": "api", "location": "https://cdn.myopenpass.com", "group": "Tier 2 Targets" }, { "name": "cstg-integ.uidapi.com", "asset_type": "website", "location": "https://cstg-integ.uidapi.com", "group": "Tier 2 Targets" }, { "name": "esp-jssdk-integ.uidapi.com", "asset_type": "website", "location": "https://esp-jssdk-integ.uidapi.com", "group": "Tier 2 Targets" }, { "name": "esp-srvonly-integ.uidapi.com", "asset_type": "website", "location": "https://esp-srvonly-integ.uidapi.com", "group": "Tier 2 Targets" }, { "name": "example-jssdk-integ.uidapi.com", "asset_type": "website", "location": "https://example-jssdk-integ.uidapi.com", "group": "Tier 2 Targets" }, { "name": "example-srvonly-integ.uidapi.com", "asset_type": "website", "location": "https://example-srvonly-integ.uidapi.com", "group": "Tier 2 Targets" }, { "name": "secure-signals-jssdk-integ.uidapi.com", "asset_type": "website", "location": "https://secure-signals-jssdk-integ.uidapi.com", "group": "Tier 2 Targets" }, { "name": "secure-signals-srvonly-integ.uidapi.com", "asset_type": "website", "location": "https://secure-signals-srvonly-integ.uidapi.com", "group": "Tier 2 Targets" }, { "name": "secure-signals-client-side-integ.uidapi.com", "asset_type": "website", "location": "https://secure-signals-client-side-integ.uidapi.com/", "group": "Tier 2 Targets" }, { "name": "secure-signals-react-integ.uidapi.com", "asset_type": "website", "location": "https://secure-signals-react-integ.uidapi.com", "group": "Tier 2 Targets" }, { "name": "www.adsrvr.org", "asset_type": "website", "location": "https://www.adsrvr.org", "group": "Tier 3 Targets" }, { "name": "myopenpassdemo.com", "asset_type": "website", "location": "https://myopenpassdemo.com/", "group": "Tier 3 Targets" }, { "name": "careers.thetradedesk.com", "asset_type": "website", "location": "https://careers.thetradedesk.com", "group": "Tier 3 Targets" }, { "name": "venturatvos.com", "asset_type": "website", "location": "https://www.venturatvos.com", "group": "Tier 3 Targets" }, { "name": "opensincera.com", "asset_type": "website", "location": "https://www.opensincera.com", "group": "Tier 3 Targets" }, { "name": "edgeacademy.thetradedesk.com", "asset_type": "website", "location": "https://edgeacademy.thetradedesk.com", "group": "Tier 3 Targets" } ], "out_of_scope": [ { "name": "investors.thetradedesk.com", "asset_type": "website", "location": "https://investors.thetradedesk.com", "group": "Out of Scope" }, { "name": "ask.thetradedesk.com", "asset_type": "website", "location": "https://ask.thetradedesk.com", "group": "Out of Scope" }, { "name": "www.thetradedeskedgeacademy.com", "asset_type": "website", "location": "https://www.thetradedeskedgeacademy.com", "group": "Out of Scope" }, { "name": "openpass.thetradedesk.com", "asset_type": "website", "location": "https://openpass.thetradedesk.com", "group": "Out of Scope" }, { "name": "unifiedid.com", "asset_type": "website", "location": "https://unifiedid.com", "group": "Out of Scope" }, { "name": "euid.eu", "asset_type": "website", "location": "https://euid.eu", "group": "Out of Scope" }, { "name": "argocd.*.uidapi.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "All client websites that have integrated with OpenPass", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "stationery.thetradedesk.com", "asset_type": "website", "location": "https://stationery.thetradedesk.com", "group": "Out of Scope" }, { "name": "bynder.thetradedesk.com", "asset_type": "website", "location": "https://bynder.thetradedesk.com", "group": "Out of Scope" }, { "name": "Applications that resolve to *.skilljarapp.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "Applications that resolve to *.smartling.com (ex: id.thetradedesk.com)", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "Applications that resolve to *.quilvem.com (ex: update.adsrvr.org)", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "Applications that resolve to *.okta.com (ex: openpath-login.thetradedesk.com)", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "Anything not explicitly listed as Tier 1, Tier 2, or Tier 3", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-be6f5e6db3043f04.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-d377eb320facc933", "name": "TheFork Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/thefork-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $3,500", "reward_min": "$50", "reward_max": "$3,500", "scope_rank": 4, "access_status": "open", "industry": "Hospitality", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:05Z", "scope_published_at": "2026-07-08T11:51:29.717Z", "scope_group_count": 6, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/thefork-mbb-og/changelog/03044428-9524-46e6-8fb4-7b16a7a9032f.json" ], "in_scope": [ { "name": "manager.thefork.com", "asset_type": "website", "location": "https://manager.thefork.com", "group": "B2B" }, { "name": "TheFork Manager iOS App", "asset_type": "ios", "location": "https://apps.apple.com/app/thefork-manager-neo/id1295795281", "group": "B2B" }, { "name": "TheFork Manager Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.lafourchette.tfm3", "group": "B2B" }, { "name": "widget.thefork.com", "asset_type": "website", "location": "https://widget.thefork.com", "group": "B2B" }, { "name": "api.thefork.io", "asset_type": "api", "location": "https://api.thefork.io", "group": "B2B" }, { "name": "secure.thefork.com", "asset_type": "website", "location": "https://secure.thefork.com", "group": "B2B" }, { "name": "payment.lafourchette.com", "asset_type": "website", "location": "https://payment.lafourchette.com", "group": "B2B" }, { "name": "TheFork Manager Blog", "asset_type": "website", "location": "https://www.theforkmanager.com", "group": "B2B Low reward" }, { "name": "https://www.thefork.com", "asset_type": "website", "location": null, "group": "B2C" }, { "name": "TheFork iOS App", "asset_type": "ios", "location": "https://apps.apple.com/app/thefork-restaurants-bookings/id424850908", "group": "B2C" }, { "name": "TheFork Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.lafourchette.lafourchette", "group": "B2C" }, { "name": "https://api.thefork.com", "asset_type": "api", "location": "https://api.thefork.com", "group": "B2C" }, { "name": "https://api-ws.thefork.com", "asset_type": "api", "location": "https://api-ws.thefork.com", "group": "B2C" }, { "name": "https://m.thefork.com", "asset_type": "website", "location": "https://m.thefork.com", "group": "B2C" }, { "name": "https://blog.thefork.com/", "asset_type": "website", "location": "https://blog.thefork.com/", "group": "B2C" }, { "name": "*.tools.thefork.tech", "asset_type": "website", "location": "https://*.tools.thefork.tech", "group": "B2C Low reward" }, { "name": "www.restaurant-information.com", "asset_type": "website", "location": "https://www.restaurant-information.com", "group": "B2C Low reward" } ], "out_of_scope": [ { "name": "*.myfourchette.com", "asset_type": "api", "location": null, "group": "B2B Out of scope" }, { "name": "www.myfourchette.com", "asset_type": "website", "location": null, "group": "B2B Out of scope" }, { "name": "website.theforkmanager.com", "asset_type": "website", "location": null, "group": "B2B Out of scope" }, { "name": "*.lafourchette.rest", "asset_type": "website", "location": null, "group": "B2B Out of scope" }, { "name": "login.theforkmanager.com", "asset_type": "website", "location": null, "group": "B2B Out of scope" }, { "name": "developer.thefork.io", "asset_type": "other", "location": null, "group": "B2B Out of scope" }, { "name": "https://*.eltenedor.*", "asset_type": "website", "location": null, "group": "B2C Out of scope" }, { "name": "https://www.thefork.*", "asset_type": "website", "location": null, "group": "B2C Out of scope" }, { "name": "module.thefork.com", "asset_type": "website", "location": null, "group": "B2C Out of scope" }, { "name": "https://www.lafourchette.com", "asset_type": "website", "location": null, "group": "B2C Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-d377eb320facc933.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-91c855cfe9a79c85", "name": "TIDAL", "program_url": "https://bugcrowd.com/engagements/tidal-bugbounty", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $5,000", "reward_min": "$100", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:06Z", "scope_published_at": "2026-10-01T05:59:50.942Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 2, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/tidal-bugbounty/changelog/93be9e4d-159a-4ea9-a2b9-c77f1efd62f7.json" ], "in_scope": [ { "name": "███████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "███████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "█████████████", "asset_type": "api", "location": null, "group": "████████████████" }, { "name": "████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "████████████████████", "asset_type": "ios", "location": null, "group": "████████████████" }, { "name": "████████████████████████", "asset_type": "android", "location": null, "group": "████████████████" }, { "name": "████████████████████", "asset_type": "other", "location": null, "group": "████████████████" }, { "name": "████████████████████████████████████████████████████████████████████████", "asset_type": "other", "location": null, "group": "████████████████" } ], "out_of_scope": [ { "name": "███████████████████", "asset_type": "other", "location": null, "group": "████████████████████" }, { "name": "███████████████", "asset_type": "other", "location": null, "group": "████████████████████" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-91c855cfe9a79c85.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "2 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-2224351fa688572d", "name": "ToolsPlus", "program_url": "https://bugcrowd.com/engagements/toolsplus", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:07Z", "scope_published_at": "2026-08-19T23:46:12.381Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/toolsplus/changelog/2517f0c1-3ae0-4fb2-9f26-f910d8197176.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1217371/intercom-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217371/intercom-for-jira?hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-2224351fa688572d.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-541d2903477c1432", "name": "Trello", "program_url": "https://bugcrowd.com/engagements/trello", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $12,000", "reward_min": "$250", "reward_max": "$12,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:08Z", "scope_published_at": "2026-04-07T21:21:13.219Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/trello/changelog/799c3f25-0d05-4448-bef5-3585bd979103.json" ], "in_scope": [ { "name": "trello.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "api.trello.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.trello.services", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "Trello Desktop Client", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Trello Mobile App for Android", "asset_type": "android", "location": null, "group": "In Scope" }, { "name": "Trello Mobile App for iOS", "asset_type": "ios", "location": null, "group": "In Scope" }, { "name": "Butler for Trello", "asset_type": "website", "location": "https://butlerfortrello.com/", "group": "In Scope" }, { "name": "Calendar Power-Up", "asset_type": "website", "location": "https://trello.com/power-ups/55a5d917446f517774210011/calendar-power-up", "group": "In Scope" }, { "name": "Card Aging Power-Up", "asset_type": "website", "location": "https://trello.com/power-ups/55a5d917446f517774210012/card-aging", "group": "In Scope" }, { "name": "List Limits Power-Up", "asset_type": "website", "location": "https://trello.com/power-ups/5c2462c384ab8949b1724a20/list-limits", "group": "In Scope" }, { "name": "Voting Power-Up", "asset_type": "website", "location": "https://trello.com/power-ups/55a5d917446f517774210013/voting", "group": "In Scope" }, { "name": "Microsoft Teams Integration", "asset_type": "website", "location": "https://trello.com/power-ups/6052d130068a8c0de7b022b4", "group": "In Scope" }, { "name": "Trello Third Party Powerups", "asset_type": "website", "location": null, "group": "Trello Third Party Powerups" } ], "out_of_scope": [ { "name": "First party (made-by-trello) power-ups other than those inscope are excluded from this program but can be reported to http://bugcrowd.com/atlassianapps", "asset_type": "website", "location": "http://bugcrowd.com/atlassianapps", "group": "Out of Scope" }, { "name": "e.trello.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "help.trello.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "trello-attachments.s3.amazonaws.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-541d2903477c1432.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-de65e70dca5aed5d", "name": "Tripadvisor", "program_url": "https://bugcrowd.com/engagements/tripadvisor-bb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $5,000", "reward_min": "$50", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:09Z", "scope_published_at": "2026-03-06T15:17:09.231Z", "scope_group_count": 7, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/tripadvisor-bb-og/changelog/cfe0ee72-f35a-498c-aefc-997075164376.json" ], "in_scope": [ { "name": "api.production.cde.tamg.cloud", "asset_type": "api", "location": "https://api.production.cde.tamg.cloud", "group": "Tier 1 Targets" }, { "name": "partnerapi.tapayments.com", "asset_type": "api", "location": "https://partnerapi.tapayments.com", "group": "Tier 1 Targets" }, { "name": "partnerapi1.tapayments.com", "asset_type": "api", "location": "https://partnerapi1.tapayments.com", "group": "Tier 1 Targets" }, { "name": "partnerapi2.tapayments.com", "asset_type": "api", "location": "https://partnerapi2.tapayments.com", "group": "Tier 1 Targets" }, { "name": "walletproxy.tapayments.com", "asset_type": "api", "location": "https://walletproxy.tapayments.com", "group": "Tier 1 Targets" }, { "name": "walletproxy1.tapayments.com", "asset_type": "api", "location": "https://walletproxy1.tapayments.com", "group": "Tier 1 Targets" }, { "name": "walletproxy2.tapayments.com", "asset_type": "api", "location": "https://walletproxy2.tapayments.com", "group": "Tier 1 Targets" }, { "name": "www.tripadvisor.com", "asset_type": "website", "location": "https://www.tripadvisor.com", "group": "Tier 2 Targets" }, { "name": "Localized versions of www.tripadvisor.com available from the site's header or footer", "asset_type": "website", "location": null, "group": "Tier 2 Targets" }, { "name": "api.tripadvisor.com", "asset_type": "api", "location": "https://api.tripadvisor.com", "group": "Tier 2 Targets" }, { "name": "service.platform.tripadvisor.com", "asset_type": "api", "location": "https://service.platform.tripadvisor.com", "group": "Tier 2 Targets" }, { "name": "gwapi.tripadvisor.com", "asset_type": "api", "location": "https://gwapi.tripadvisor.com", "group": "Tier 2 Targets" }, { "name": "gwapi1.tripadvisor.com", "asset_type": "api", "location": "https://gwapi1.tripadvisor.com", "group": "Tier 2 Targets" }, { "name": "gwapi2.tripadvisor.com", "asset_type": "api", "location": "https://gwapi2.tripadvisor.com", "group": "Tier 2 Targets" }, { "name": "Any publicly accessible Tripadvisor web asset or host (domains, ip space, etc) - except for assets listed as Out-of-Scope below.", "asset_type": "website", "location": null, "group": "Tier 3 Targets" }, { "name": "Tripadvisor Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.tripadvisor.tripadvisor&hl=en", "group": "Tripadvisor Mobile" }, { "name": "Tripadvisor iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/tripadvisor-plan-book-trips/id284876795", "group": "Tripadvisor Mobile" }, { "name": "rentals.tripadvisor.com", "asset_type": "website", "location": "https://rentals.tripadvisor.com", "group": "Vacation Rentals" }, { "name": "*.vacationhomerentals.com", "asset_type": "website", "location": "https://*.vacationhomerentals.com", "group": "Vacation Rentals" }, { "name": "*.holidaylettings.com", "asset_type": "website", "location": "https://*.holidaylettings.com", "group": "Vacation Rentals" }, { "name": "*.flipkey.com", "asset_type": "website", "location": "https://*.flipkey.com", "group": "Vacation Rentals" }, { "name": "*.niumba.com", "asset_type": "website", "location": "https://*.niumba.com", "group": "Vacation Rentals" }, { "name": "*.housetrip.com", "asset_type": "website", "location": "https://*.housetrip.com", "group": "Vacation Rentals" }, { "name": "Tripadvisor Owner APP (https://itunes.apple.com/us/app/vacation-rentals-owner-app-by-tripadvisor/id1045663228?mt=8)", "asset_type": "ios", "location": "https://itunes.apple.com/us/app/vacation-rentals-owner-app-by-tripadvisor/id1045663228?mt=8", "group": "Vacation Rentals" }, { "name": "marlo.ext.tripadvisor.com", "asset_type": "website", "location": "http://marlo.ext.tripadvisor.com", "group": "Vacation Rentals" }, { "name": "*.bokundemo.com", "asset_type": "website", "location": "https://*.bokundemo.com", "group": "Bokun" }, { "name": "*.bokuntest.com", "asset_type": "website", "location": "https://*.bokuntest.com", "group": "Bokun" } ], "out_of_scope": [ { "name": "*.bokun.eu", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.bokun.website", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.bokun.tools", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.bokun.team", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "ir.tripadvisor.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.tripadviser.at", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.tripadvisor.cn", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.tripadvisor.*/Trips", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.tripadvisor.*/Mobile*", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.tripadvisor.*/engineering", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.tripadvisor.*/WidgetEmbed-*", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "spotlight-dev.tripadvisor.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "spotlight.tripadvisor.*", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "careers.tripadvisor.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.tripadvisoradexpress.*", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.tripadvisorwifi.*", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.bokun.io", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.bokun.is", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.bokun.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.bokun.app", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "taplus.*", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "tripadvisor-plus.*", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "tripadvisorplus.*", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.experiences.zone", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "travelermail.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.bokunmobile.website", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-de65e70dca5aed5d.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-4e9845a67170dae3", "name": "TRM Labs Public Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/trm-labs-public-mbb", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $1,000", "reward_min": "Points", "reward_max": "$1,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:10Z", "scope_published_at": "2026-08-28T22:24:00.113Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/trm-labs-public-mbb/changelog/91eebd30-272a-4444-9479-381ea5e8b2ba.json" ], "in_scope": [ { "name": "chainabuse-staging.com", "asset_type": "website", "location": null, "group": "Chainabuse" }, { "name": "api.chainabuse-staging.com", "asset_type": "api", "location": null, "group": "Chainabuse" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-4e9845a67170dae3.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-a02702a2a9a9b7db", "name": "Tyler Technologies Data & Insights – Tyler Data Platform, powered by Socrata", "program_url": "https://bugcrowd.com/engagements/tyler-tech-data-insights", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,500", "reward_min": "$150", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:11Z", "scope_published_at": "2026-08-26T18:41:33.999Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/tyler-tech-data-insights/changelog/3cb4c110-060e-46e4-a7f0-bb26ea3507c1.json" ], "in_scope": [ { "name": "https://opendata-demo.test-socrata.com", "asset_type": "other", "location": "https://opendata-demo.test-socrata.com", "group": "In Scope " }, { "name": "https://opendata.test-socrata.com", "asset_type": "other", "location": "https://opendata.test-socrata.com", "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-a02702a2a9a9b7db.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-df387b7ac7e56286", "name": "Ultra Mobile Mobile Apps Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/ultramobile-mobile-apps", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:12Z", "scope_published_at": "2025-09-01T13:39:45.892Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ultramobile-mobile-apps/changelog/549b0737-78c8-470e-82b3-e340512a83ab.json" ], "in_scope": [ { "name": "Mint Mobile Android Phone App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.uvnv.mintsim", "group": "Primary Targets" }, { "name": "Mint Mobile IOS Phone App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/mint-mobile/id1295303441", "group": "Primary Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-df387b7ac7e56286.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-4045a6f8f10c2659", "name": "Ultra Mobile Public Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/ultramobile-public", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Telecommunications", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:13Z", "scope_published_at": "2025-07-31T12:32:55.108Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ultramobile-public/changelog/fb23e336-d029-4fde-961b-16ed461e201f.json" ], "in_scope": [ { "name": "https://www.mintmobile.com", "asset_type": "website", "location": "https://mintmobile.com", "group": "In Scope Targets" }, { "name": "https://www.ultramobile.com", "asset_type": "website", "location": "https://ultramobile.com", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-4045a6f8f10c2659.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-a27aebab67a5e8c6", "name": "Ultra Mobile Public ECOMM 2025 Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/ultramobile-ecomm", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Telecommunications", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:14Z", "scope_published_at": "2025-06-30T12:14:33.558Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ultramobile-ecomm/changelog/9bfef0e4-38e5-45cc-83c4-e48916c426dd.json" ], "in_scope": [ { "name": "http://my.mintmobile.com/", "asset_type": "website", "location": "http://my.mintmobile.com/", "group": "In Scope Targets" }, { "name": "http://my.ultramobile.com", "asset_type": "website", "location": "http://my.ultramobile.com", "group": "In Scope Targets" }, { "name": "https://my.mintmobile.com", "asset_type": "website", "location": "https://my.mintmobile.com", "group": "In Scope Targets" }, { "name": "https://my.ultramobile.com", "asset_type": "website", "location": "https://my.ultramobile.com", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-a27aebab67a5e8c6.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-7185bb5d539d66ab", "name": "Ultra Mobile Retailer Portal Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/ultramobile-retailer-portal", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $3,500", "reward_min": "$100", "reward_max": "$3,500", "scope_rank": 1, "access_status": "open", "industry": "Telecommunications", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:15Z", "scope_published_at": "2025-09-30T12:45:14.709Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ultramobile-retailer-portal/changelog/8b94e17f-eb94-48bb-9fdf-41bad293bc76.json" ], "in_scope": [ { "name": "Web Retailer Portal", "asset_type": "website", "location": "https://web-retailer-portal.ultramobile.com", "group": "Ultra Mobile's Retailer Portal" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-7185bb5d539d66ab.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-25180725f22e69f4", "name": "Under Armour Corporate", "program_url": "https://bugcrowd.com/engagements/underarmour-corp", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$125 - $2,500", "reward_min": "$125", "reward_max": "$2,500", "scope_rank": 3, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:17Z", "scope_published_at": "2026-03-30T14:21:26.639Z", "scope_group_count": 7, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/underarmour-corp/changelog/26ab911f-3858-4f16-9def-7f2d0691c8da.json" ], "in_scope": [ { "name": "apphouse.underarmour.com", "asset_type": "website", "location": "https://apphouse.underarmour.com/", "group": "Group 1" }, { "name": "ourhouse.underarmour.com", "asset_type": "other", "location": "http://ourhouse.underarmour.com/", "group": "Group 1" }, { "name": "transfer.underarmour.com", "asset_type": "website", "location": "https://transfer.underarmour.com/", "group": "Group 1" }, { "name": "vpe-us.underarmour.com", "asset_type": "website", "location": "https://vpe-us.underarmour.com/", "group": "Group 1" }, { "name": "snc.underarmour.com", "asset_type": "website", "location": "https://snc.underarmour.com/", "group": "Group 2" }, { "name": "snctest-s.underarmour.com", "asset_type": "website", "location": "https://snctest-s.underarmour.com/", "group": "Group 2" }, { "name": "snctest-c.underarmour.com", "asset_type": "website", "location": "https://snctest-c.underarmour.com/", "group": "Group 2" }, { "name": "supplier.underarmour.com", "asset_type": "website", "location": "https://supplier.underarmour.com/", "group": "Group 2" }, { "name": "vtxapp9p.underarmour.com", "asset_type": "website", "location": "https://vtxapp9p.underarmour.com/", "group": "Group 3" }, { "name": "vtxapp9q.underarmour.com", "asset_type": "website", "location": "https://vtxapp9q.underarmour.com/", "group": "Group 3" }, { "name": "vtxapp9d.underarmour.com", "asset_type": "website", "location": "https://vtxapp9d.underarmour.com/", "group": "Group 3" }, { "name": "vtxappd.underarmour.com", "asset_type": "website", "location": "https://vtxappd.underarmour.com/", "group": "Group 3" }, { "name": "204.29.196.0/23", "asset_type": "other", "location": null, "group": "Group 4" }, { "name": "3.223.149.182", "asset_type": "other", "location": null, "group": "Group 4" }, { "name": "34.237.130.2", "asset_type": "other", "location": null, "group": "Group 4" }, { "name": "52.220.158.49", "asset_type": "other", "location": null, "group": "Group 4" }, { "name": "52.76.174.107", "asset_type": "other", "location": null, "group": "Group 4" }, { "name": "52.67.69.35", "asset_type": "other", "location": null, "group": "Group 4" }, { "name": "52.44.176.187", "asset_type": "website", "location": null, "group": "Group 5" }, { "name": "52.86.17.52", "asset_type": "other", "location": null, "group": "Group 5" }, { "name": "54.83.32.16", "asset_type": "other", "location": null, "group": "Group 5" }, { "name": "3.133.230.28", "asset_type": "other", "location": null, "group": "Group 6" }, { "name": "3.19.172.158", "asset_type": "other", "location": null, "group": "Group 6" } ], "out_of_scope": [ { "name": "investor.underarmour.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "careers.underarmour.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "www.underarmour.", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.underarmour.com/en-us/affiliate-home", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.uabiz.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "productsafety.underarmour.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "uabusiness.force.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.underarmour.jobs", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "blog.underarmour.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.uateamcatalogs.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.uaretail.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "uaallaccess.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.plankindustries.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-25180725f22e69f4.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-2772e7c4de62ebf1", "name": "Under Armour Product Security", "program_url": "https://bugcrowd.com/engagements/underarmour", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$125 - $2,500", "reward_min": "$125", "reward_max": "$2,500", "scope_rank": 4, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:18Z", "scope_published_at": "2025-12-01T17:11:34.405Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/underarmour/changelog/dc419cd1-6ab0-4cbe-9877-a3cc794f72f3.json" ], "in_scope": [ { "name": "www.underarmour.com", "asset_type": "website", "location": "https://www.underarmour.com", "group": "Paid Targets " }, { "name": "www.underarmour.co.uk", "asset_type": "website", "location": "https://www.underarmour.co.uk", "group": "Paid Targets " }, { "name": "UA Shop iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/under-armour/id1092704571", "group": "Paid Targets " }, { "name": "UA Shop Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.ua.shop&hl=en", "group": "Paid Targets " }, { "name": "https://api.shop.ua.com/graphql", "asset_type": "api", "location": "https://api.shop.ua.com/graphql", "group": "Paid Targets " }, { "name": "https://www.underarmournext.co.uk/", "asset_type": "website", "location": "https://www.underarmournext.co.uk/", "group": "Paid Targets " }, { "name": "https://underarmournext.com/", "asset_type": "website", "location": "https://underarmournext.com/", "group": "Paid Targets " }, { "name": "*.api.ua.com", "asset_type": "other", "location": "https://*.api.ua.com/", "group": "Paid Targets " }, { "name": "https://consumer-sustainability.underarmour.com/en", "asset_type": "website", "location": "https://consumer-sustainability.underarmour.com/en", "group": "Paid Targets " }, { "name": "vpe-us.underarmour.com", "asset_type": "website", "location": "https://vpe-us.underarmour.com/", "group": "Paid Targets " }, { "name": "*.underarmour.cn", "asset_type": "website", "location": "https://www.underarmour.cn", "group": "Paid Targets " }, { "name": "www.underarmour.com.sg", "asset_type": "website", "location": "http://www.underarmour.com.sg", "group": "Paid Targets " }, { "name": "underarmour.co.kr", "asset_type": "website", "location": "https://underarmour.co.kr", "group": "Paid Targets " }, { "name": "https://armourhouse.underarmour.com", "asset_type": "website", "location": "https://armourhouse.underarmour.com", "group": "Paid Targets " } ], "out_of_scope": [ { "name": "www.underarmour.com/en-us/affiliate-home", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.uabiz.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "investor.underarmour.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "productsafety.underarmour.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "uabusiness.force.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.underarmour.jobs", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "blog.underarmour.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.uateamcatalogs.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.uaretail.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.plankindustries.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-2772e7c4de62ebf1.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-a4eca08bfce2bc74", "name": "Unisys Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/unisys-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $4,500", "reward_min": "$50", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:19Z", "scope_published_at": "2026-09-21T15:46:55.429Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/unisys-mbb-og/changelog/a633b6d5-78fd-4c45-bd45-7f2466803723.json" ], "in_scope": [ { "name": "*.unisys.com", "asset_type": "website", "location": "http://unisys.com/", "group": "In Scope" }, { "name": "*.unifysquare.com", "asset_type": "website", "location": "http://unifysquare.com/", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-a4eca08bfce2bc74.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-da4fb2e1c94e1e9f", "name": "Unity Technologies", "program_url": "https://bugcrowd.com/engagements/unity", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $3,000", "reward_min": "$100", "reward_max": "$3,000", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:21Z", "scope_published_at": "2026-06-29T09:34:55.969Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/unity/changelog/959f01e3-eae4-46a9-8ef0-14bab9dd686e.json" ], "in_scope": [ { "name": "id.unity.com", "asset_type": "website", "location": "https://id.unity.com", "group": "In Scope targets" }, { "name": "api.unity.com", "asset_type": "api", "location": "https://api.unity.com", "group": "In Scope targets" }, { "name": "cloud.unity.com", "asset_type": "website", "location": "https://cloud.unity.com", "group": "In Scope targets" }, { "name": "store.unity.com", "asset_type": "website", "location": "https://store.unity.com", "group": "In Scope targets" }, { "name": "pay.unity.com", "asset_type": "website", "location": "https://pay.unity.com", "group": "In Scope targets" }, { "name": "player-login.unity.com", "asset_type": "other", "location": null, "group": "In Scope targets" }, { "name": "Latest Supported LTS Versions of the Unity Editor - Unity 6.x.x Standard LTS, Unity 2022.3.x / 2021.3.x xLTS (enterprise license)", "asset_type": "other", "location": "https://unity3d.com/get-unity/download/archive", "group": "In Scope targets" }, { "name": "services.unity.com", "asset_type": "api", "location": "https://services.unity.com", "group": "In Scope targets" }, { "name": "Latest Version of the Unity Hub", "asset_type": "other", "location": "https://unity.com/download", "group": "In Scope targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-da4fb2e1c94e1e9f.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-05e98d3d885c454c", "name": "Upwork", "program_url": "https://bugcrowd.com/engagements/upwork", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$120 - $5,000", "reward_min": "$120", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "Corporate Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:22Z", "scope_published_at": "2025-07-31T19:48:19.946Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/upwork/changelog/15e0c0da-a79e-40b3-8835-2feee7ec99be.json" ], "in_scope": [ { "name": "www.upwork.com", "asset_type": "website", "location": "https://www.upwork.com", "group": "In scope" }, { "name": "Upwork - Android Application", "asset_type": "android", "location": null, "group": "In scope" }, { "name": "Upwork - iOS Application", "asset_type": "ios", "location": null, "group": "In scope" }, { "name": "Upwork Dash Messenger Desktop Version (www.upwork.com/downloads)", "asset_type": "hardware", "location": null, "group": "In scope" }, { "name": "www.upwork.com/api", "asset_type": "api", "location": null, "group": "In scope" }, { "name": "Direct Contracts", "asset_type": "website", "location": null, "group": "In scope" }, { "name": "api.upwork.com/graphql", "asset_type": "api", "location": null, "group": "In scope" }, { "name": "Upwork - Marketplace Portal", "asset_type": "website", "location": null, "group": "Non-Circumvention Controls Targets" }, { "name": "Upwork - Messages", "asset_type": "website", "location": null, "group": "Non-Circumvention Controls Targets" }, { "name": "Upwork - Mobile Application IOS", "asset_type": "ios", "location": null, "group": "Non-Circumvention Controls Targets" }, { "name": "Upwork - Mobile Application Android", "asset_type": "android", "location": null, "group": "Non-Circumvention Controls Targets" }, { "name": "Upwork - api.upwork.com/graphql", "asset_type": "api", "location": null, "group": "Non-Circumvention Controls Targets" } ], "out_of_scope": [ { "name": "Social media hijacking", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "Any subdomain/domain/property not listed in the 'in scope' section, is out of scope.", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "Any Third-party Services", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "support.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "community.stage.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "community.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "stage.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "e.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "status.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "signature.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "careers.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "tip.upwork.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "tip.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "pardot.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-05e98d3d885c454c.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-e770bd62950ed3a8", "name": "USAA", "program_url": "https://bugcrowd.com/engagements/usaa", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $6,000", "reward_min": "$100", "reward_max": "$6,000", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:23Z", "scope_published_at": "2026-03-05T20:12:45.742Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/usaa/changelog/6e2b5e03-644a-4127-9a22-24d539aa9622.json" ], "in_scope": [ { "name": "api.usaa.com", "asset_type": "api", "location": "https://api.usaa.com/", "group": "API In-Scope Targets" }, { "name": "api-a.usaa.com", "asset_type": "api", "location": "https://api-a.usaa.com", "group": "API In-Scope Targets" }, { "name": "b2bapi-a.usaa.com", "asset_type": "api", "location": "https://b2bapi-a.usaa.com", "group": "API In-Scope Targets" }, { "name": "b2bapi.usaa.com", "asset_type": "api", "location": "https://b2bapi.usaa.com", "group": "API In-Scope Targets" }, { "name": "b2blsapi-a.usaa.com", "asset_type": "api", "location": "https://b2blsapi-a.usaa.com", "group": "API In-Scope Targets" }, { "name": "b2blsapi.usaa.com", "asset_type": "api", "location": "https://b2blsapi.usaa.com", "group": "API In-Scope Targets" }, { "name": "vlapi.usaa.com", "asset_type": "api", "location": "https://vlapi.usaa.com", "group": "API In-Scope Targets" }, { "name": "mapi.usaa.com", "asset_type": "api", "location": "https://mapi.usaa.com/", "group": "API In-Scope Targets" }, { "name": "mapi-a.usaa.com", "asset_type": "api", "location": "https://mapi-a.usaa.com", "group": "API In-Scope Targets" }, { "name": "wsmbr.usaa.com", "asset_type": "api", "location": "https://wsmbr.usaa.com/", "group": "API In-Scope Targets" }, { "name": "ws.usaa.com", "asset_type": "api", "location": "https://ws.usaa.com", "group": "API In-Scope Targets" }, { "name": "usaa.com", "asset_type": "website", "location": "https://www.usaa.com", "group": "High Priority Targets " }, { "name": "mobile.usaa.com", "asset_type": "website", "location": "https://mobile.usaa.com", "group": "High Priority Targets " }, { "name": "partners.usaa.com", "asset_type": "other", "location": "https://partners.usaa.com", "group": "High Priority Targets " }, { "name": "USAA Mobile Application for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.usaa.mobile.android.usaa&hl=en", "group": "High Priority Targets " }, { "name": "USAA Mobile Application for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/usaa-mobile/id312325565", "group": "High Priority Targets " }, { "name": "aemdam.usaa360.com", "asset_type": "website", "location": "https://aemdam.usaa360.com/", "group": "In Scope Targets" }, { "name": "authn.usaa.com", "asset_type": "website", "location": "https://authn.usaa.com/", "group": "In Scope Targets" }, { "name": "content.usaa.com", "asset_type": "website", "location": "https://content.usaa.com", "group": "In Scope Targets" }, { "name": "d1.utv.usaa.com", "asset_type": "website", "location": "https://d1.utv.usaa.com", "group": "In Scope Targets" }, { "name": "d2.utv.usaa.com", "asset_type": "website", "location": "https://d2.utv.usaa.com", "group": "In Scope Targets" }, { "name": "externalconnect.usaa.com", "asset_type": "website", "location": "https://externalconnect.usaa.com/", "group": "In Scope Targets" }, { "name": "guest.usaa.com", "asset_type": "website", "location": "https://guest.usaa.com/", "group": "In Scope Targets" }, { "name": "l.usaa.com", "asset_type": "other", "location": "https://l.usaa.com/", "group": "In Scope Targets" }, { "name": "liveassist.usaa.com", "asset_type": "other", "location": "https://liveassist.usaa.com/", "group": "In Scope Targets" }, { "name": "liveassist11.usaa.com", "asset_type": "other", "location": "https://liveassist11.usaa.com/", "group": "In Scope Targets" }, { "name": "liveassist12.usaa.com", "asset_type": "other", "location": "https://liveassist12.usaa.com/", "group": "In Scope Targets" }, { "name": "liveassist21.usaa.com", "asset_type": "other", "location": "https://liveassist21.usaa.com/", "group": "In Scope Targets" }, { "name": "liveassist22.usaa.com", "asset_type": "other", "location": "https://liveassist22.usaa.com/", "group": "In Scope Targets" }, { "name": "liveassist23.usaa.com", "asset_type": "website", "location": "https://liveassist23.usaa.com", "group": "In Scope Targets" }, { "name": "liveassist24.usaa.com", "asset_type": "website", "location": "https://liveassist24.usaa.com", "group": "In Scope Targets" }, { "name": "mguest.usaa.com", "asset_type": "website", "location": "https://mguest.usaa.com/", "group": "In Scope Targets" }, { "name": "mobileapps.usaa.com", "asset_type": "other", "location": "https://mobileapps.usaa.com/", "group": "In Scope Targets" }, { "name": "mstatic.usaa.com", "asset_type": "website", "location": "https://mstatic.usaa.com", "group": "In Scope Targets" }, { "name": "mydesktop.usaa.com", "asset_type": "website", "location": "https://mydesktop.usaa.com", "group": "In Scope Targets" }, { "name": "myvpn.usaa.com", "asset_type": "website", "location": "https://myvpn.usaa.com", "group": "In Scope Targets" }, { "name": "nice.wfmusaa.com", "asset_type": "website", "location": "https://nice.wfmusaa.com", "group": "In Scope Targets" }, { "name": "nvoice.usaa.com", "asset_type": "other", "location": "https://nvoice.usaa.com/", "group": "In Scope Targets" }, { "name": "s.usaa.com", "asset_type": "other", "location": "https://s.usaa.com/", "group": "In Scope Targets" }, { "name": "s1.utv.usaa.com", "asset_type": "website", "location": "https://s1.utv.usaa.com", "group": "In Scope Targets" }, { "name": "s2.utv.usaa.com", "asset_type": "website", "location": "https://s2.utv.usaa.com", "group": "In Scope Targets" }, { "name": "securemail.usaa.com", "asset_type": "website", "location": "https://securemail.usaa.com", "group": "In Scope Targets" }, { "name": "static.usaa.com", "asset_type": "website", "location": "https://static.usaa.com", "group": "In Scope Targets" }, { "name": "usaainsurance.com", "asset_type": "website", "location": "https://www.usaainsurance.com/", "group": "In Scope Targets" }, { "name": "utv.usaa.com", "asset_type": "website", "location": "https://utv.usaa.com", "group": "In Scope Targets" }, { "name": "v.utv.usaa.com", "asset_type": "website", "location": "https://v.utv.usaa.com", "group": "In Scope Targets" }, { "name": "vendorss.usaa.com", "asset_type": "website", "location": "https://vendorss.usaa.com", "group": "In Scope Targets" }, { "name": "vlagg.usaa.com", "asset_type": "website", "location": "https://vlagg.usaa.com", "group": "In Scope Targets" }, { "name": "webmail.usaa.com", "asset_type": "other", "location": "https://webmail.usaa.com", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-e770bd62950ed3a8.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-0fdfbcf609dbd643", "name": "Vectors Bug Bounty", "program_url": "https://bugcrowd.com/engagements/vectors-marketplace", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:24Z", "scope_published_at": "2026-09-10T17:14:21.048Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/vectors-marketplace/changelog/f130a1f4-f675-46d7-9a5c-23c92ce988b8.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1212124/spectrum-formatting-macros?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1212124/spectrum-formatting-macros?hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1211894/ideation?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211894/ideation?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1211855/faq-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211855/faq-for-confluence?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1212012/discussion-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1212012/discussion-for-confluence?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1217652/content-status-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217652/content-status-for-confluence?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1235238/morph-ai-powered-content-formatting-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235238/morph-ai-powered-content-formatting-for-confluence?tab=overview&hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1211800/glossary?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211800/glossary?hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1235579/comment-toolkit-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235579/comment-toolkit-for-jira?hosting=cloud&tab=overview", "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-0fdfbcf609dbd643.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-50a24f7fc340bda2", "name": "Verisign Bug Bounty", "program_url": "https://bugcrowd.com/engagements/verisign", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $10,000", "reward_min": "$100", "reward_max": "$10,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:25Z", "scope_published_at": "2026-05-27T13:33:00.969Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/verisign/changelog/cab773d9-01e1-40cb-932b-7c5a4f2829fd.json" ], "in_scope": [ { "name": "epptool-ctld.verisign-grs.com (EPP service; DNS related)", "asset_type": "other", "location": null, "group": "In Scope Targets - Tier 1 Rewards" }, { "name": "a.root-servers.net (DNS service; DNS related)", "asset_type": "other", "location": null, "group": "In Scope Targets - Tier 1 Rewards" }, { "name": "j.root-servers.net (DNS service; DNS related)", "asset_type": "other", "location": null, "group": "In Scope Targets - Tier 1 Rewards" }, { "name": "*.gtld-servers.net (DNS service; DNS related)", "asset_type": "other", "location": null, "group": "In Scope Targets - Tier 1 Rewards" }, { "name": "www.verisign.com (Website; non-DNS related)", "asset_type": "website", "location": "https://www.verisign.com", "group": "In Scope Targets - Tier 2 Rewards" }, { "name": "*.youcouldbe.com", "asset_type": "website", "location": "https://youcouldbe.com", "group": "In Scope Targets - Tier 2 Rewards" }, { "name": "blog.verisign.com (Website; non-DNS related)", "asset_type": "website", "location": "https://blog.verisign.com", "group": "In Scope Targets - Tier 2 Rewards" }, { "name": "*.namestudioforsocial.com", "asset_type": "website", "location": "https://namestudioforsocial.com/", "group": "In Scope Targets - Tier 2 Rewards" }, { "name": "*.namestudio.com", "asset_type": "website", "location": "https://namestudio.com", "group": "In Scope Targets - Tier 2 Rewards" }, { "name": "*.verisign.com", "asset_type": "other", "location": "https://www.verisign.com", "group": "In Scope Targets - Tier 2 Rewards" }, { "name": "*.verisign-grs.com (DNS service; DNS related)", "asset_type": "other", "location": null, "group": "In Scope Targets - Tier 2 Rewards" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-50a24f7fc340bda2.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-d9e0b06dc68f5a80", "name": "Viator", "program_url": "https://bugcrowd.com/engagements/viator", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $4,500", "reward_min": "$200", "reward_max": "$4,500", "scope_rank": 4, "access_status": "open", "industry": "Consumer Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:26Z", "scope_published_at": "2026-07-15T09:17:37.978Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/viator/changelog/3d692266-89d0-42d6-a49b-1430f275ec8f.json" ], "in_scope": [ { "name": "iOS Viator Tours & Activities App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/viator-tours-activities/id434832826", "group": "Viator In Scope Targets " }, { "name": "Android Viator Tours & Activities App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.viator.mobile.android&hl=en_US&gl=US", "group": "Viator In Scope Targets " }, { "name": "https://supplier.viator.com/", "asset_type": "website", "location": "https://supplier.viator.com/", "group": "Viator In Scope Targets " }, { "name": "https://www.toursgds.com/", "asset_type": "api", "location": "https://www.toursgds.com/", "group": "Viator In Scope Targets " }, { "name": "https://www.toursgds.com/ToursGdsService?wsdl", "asset_type": "api", "location": "https://www.toursgds.com/ToursGdsService?wsdl", "group": "Viator In Scope Targets " }, { "name": "https://www.toursgds.com/SupplierService?wsdl", "asset_type": "api", "location": "https://www.toursgds.com/SupplierService?wsdl", "group": "Viator In Scope Targets " }, { "name": "https://partners.viator.com", "asset_type": "website", "location": "https://partners.viator.com", "group": "Viator In Scope Targets " }, { "name": "travelagents.viator.com", "asset_type": "website", "location": "https://travelagents.viator.com", "group": "Viator In Scope Targets " }, { "name": "https://help.supplier.viator.com/en", "asset_type": "website", "location": "https://help.supplier.viator.com/en", "group": "Viator In Scope Targets " }, { "name": "kiwi.partner.viator.com", "asset_type": "website", "location": "https://kiwi.partner.viator.com", "group": "Viator In Scope Targets " }, { "name": "*.viatorinc.com", "asset_type": "website", "location": "https://*.viatorinc.com", "group": "Viator In Scope Targets " }, { "name": "selector.viator.com", "asset_type": "website", "location": "https://selector.viator.com", "group": "Viator In Scope Targets " }, { "name": "partnerhelp.viator.com/", "asset_type": "website", "location": "https://partnerhelp.viator.com/", "group": "Viator In Scope Targets " }, { "name": "*.viator.com", "asset_type": "website", "location": "https://*.viator.com", "group": "Viator In Scope Targets " } ], "out_of_scope": [ { "name": "*.rc.viator.com", "asset_type": "other", "location": null, "group": "Viator Out of Scope Targets" }, { "name": "*.sandbox.viator.com", "asset_type": "website", "location": null, "group": "Viator Out of Scope Targets" }, { "name": "*.partner.viator.com", "asset_type": "website", "location": null, "group": "Viator Out of Scope Targets" }, { "name": "agentcenter.viator.com", "asset_type": "website", "location": null, "group": "Viator Out of Scope Targets" }, { "name": "operatorresources.viator.com", "asset_type": "website", "location": null, "group": "Viator Out of Scope Targets" }, { "name": "partnerresources.viator.com", "asset_type": "website", "location": null, "group": "Viator Out of Scope Targets" }, { "name": "api.tapayments.com", "asset_type": "other", "location": null, "group": "Viator Out of Scope Targets" }, { "name": "*.rc.viatorinc.com", "asset_type": "other", "location": null, "group": "Viator Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-d9e0b06dc68f5a80.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-4707e743dbc38b1f", "name": "Vico Marketplace Bug Bounty", "program_url": "https://bugcrowd.com/engagements/vicosoft", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:28Z", "scope_published_at": "2026-09-23T18:10:19.254Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/vicosoft/changelog/85768bd8-7687-4cd1-8423-1d6b21511c7a.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1221161/uml-for-confluence-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221161/uml-for-confluence-cloud?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-4707e743dbc38b1f.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-8a7562d7d64064d9", "name": "Vinted Bug Bounty", "program_url": "https://bugcrowd.com/engagements/vinted-uab-mbb", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$75 - $4,000", "reward_min": "$75", "reward_max": "$4,000", "scope_rank": 3, "access_status": "open", "industry": "eCommerce", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:27Z", "scope_published_at": null, "scope_group_count": null, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/vinted-uab-mbb/changelog/762b2474-e004-41d0-b720-c050b4e16705.json" ], "in_scope": [ { "name": "www.vinted.com", "asset_type": "website", "location": "https://www.vinted.com", "group": "Primary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "www.vinted.net", "asset_type": "website", "location": "https://www.vinted.net", "group": "Primary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "www.vintedgo.com", "asset_type": "website", "location": "https://www.vintedgo.com", "group": "Primary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Vinted iOS application", "asset_type": "ios", "location": "https://apps.apple.com/us/app/vinted-pre-loved-marketplace/id632064380", "group": "Primary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Vinted Android application", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=fr.vinted", "group": "Primary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Vinted Go Sandbox", "asset_type": "website", "location": "https://sandbox.vintedgo.com", "group": "Secondary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Vinted Sandbox", "asset_type": "website", "location": "https://sandbox.vinted.com", "group": "Secondary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Vinted Go Escalations test", "asset_type": "website", "location": "https://test-escalations.vintedgo.com", "group": "Secondary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Encryption Service", "asset_type": "website", "location": "https://badger.it.vinted.com", "group": "Secondary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Vinted Careers", "asset_type": "website", "location": "https://careers.vinted.com", "group": "Secondary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Company Vinted", "asset_type": "website", "location": "https://company.vinted.com", "group": "Secondary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "News Vinted", "asset_type": "website", "location": "https://news.vinted.com", "group": "Secondary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [], "policy_review_state": "verified_policy_record", "verified_policy_id": "vinted-bug-bounty", "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-8a7562d7d64064d9.md", "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ] }, { "id": "bugcrowd-3bc2b522f2f83e10", "name": "Volkswagen", "program_url": "https://bugcrowd.com/engagements/volkswagen-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,500", "reward_min": "$150", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Automotive", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:29Z", "scope_published_at": "2026-01-06T11:25:32.145Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/volkswagen-og/changelog/6bc3d4da-d19f-4458-8135-ad3a020ac71e.json" ], "in_scope": [ { "name": "*.volkswagen.de", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "erwin.volkswagen.de", "asset_type": "website", "location": "https://erwin.volkswagen.de", "group": "Out of scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-3bc2b522f2f83e10.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-609231d43d6a8e7a", "name": "VR Public Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/vr-group-mbb-og1", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $5,000", "reward_min": "$100", "reward_max": "$5,000", "scope_rank": 1, "access_status": "open", "industry": "Transportation", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:30Z", "scope_published_at": "2026-09-23T09:47:05.388Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/vr-group-mbb-og1/changelog/e1932318-5130-4a41-9a7e-35cbd77e5015.json" ], "in_scope": [ { "name": "www.vr.fi", "asset_type": "website", "location": "https://www.vr.fi/", "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-609231d43d6a8e7a.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-72f2cd2dfaa18ddb", "name": "Web.com Bug Bounty", "program_url": "https://bugcrowd.com/engagements/webdotcom", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $3,000", "reward_min": "Points", "reward_max": "$3,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:28Z", "scope_published_at": null, "scope_group_count": null, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/webdotcom/changelog/cdf0a5a7-3e14-4bd2-8997-a9567e0bb63e.json" ], "in_scope": [ { "name": "app.web.com", "asset_type": "website", "location": "https://app.web.com", "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "www.networksolutions.com", "asset_type": "website", "location": "https://www.networksolutions.com", "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://www.bluehost.com/", "asset_type": "website", "location": "https://www.bluehost.com/", "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://www.hostgator.com/", "asset_type": "website", "location": "https://www.hostgator.com/", "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "*.web.com", "asset_type": "website", "location": "https://*.web.com", "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.register.com", "asset_type": "website", "location": "https://*.register.com", "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.networksolutions.com", "asset_type": "website", "location": "https://*.networksolutions.com", "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://app.gator.com/", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.bluehost.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.hostgator.com", "asset_type": "website", "location": "https://*.hostgator.com", "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] } ], "policy_review_state": "verified_policy_record", "verified_policy_id": "web-com-bug-bounty", "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-72f2cd2dfaa18ddb.md", "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ] }, { "id": "bugcrowd-443621b4bcaff6c1", "name": "weweave UG Marketplace Bug Bounty", "program_url": "https://bugcrowd.com/engagements/we-weave", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:31Z", "scope_published_at": "2026-09-08T15:09:13.846Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/we-weave/changelog/c9784081-2fb5-40df-a91b-9cf9fa63caf2.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1226741/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226741/?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1222572/mermaid-charts-diagrams-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222572/mermaid-charts-diagrams-for-confluence?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1220302/data-tables-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220302/data-tables-for-confluence?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1222532/prism-syntax-highlighter-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222532/prism-syntax-highlighter-for-confluence?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1221789/youtube-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221789/youtube-for-confluence?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1222612/chart-js-diagrams-for-confluence-cloud&hosting=cloud?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222612/chart-js-diagrams-for-confluence-cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1224009/content-mirror-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224009/content-mirror-for-confluence?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1223493/custom-css-code-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223493/custom-css-code-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1221973/content-tools-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221973/content-tools-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1228296/rapidoc-openapi-swagger-specification-ui-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228296/rapidoc-openapi-swagger-specification-ui-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1222562/flowchart-processes-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222562/flowchart-processes-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1223533/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223533/?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1224537/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224537/?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1222737/jsbarcode-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222737/jsbarcode-for-confluence?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1221832/jsfiddle-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221832/jsfiddle-for-confluence?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1224394/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224394/?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1229317/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229317/?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1222572/mermaid-charts-diagrams-for-confluence?tab=overview&hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222572/mermaid-charts-diagrams-for-confluence?tab=overview&hosting=datacenter", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1222572/mermaid-charts-diagrams-for-confluence?tab=overview&hosting=server", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222572/mermaid-charts-diagrams-for-confluence?tab=overview&hosting=server", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1226668/dynamic-status-labels-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226668/dynamic-status-labels-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1227226/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227226/?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1225264/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225264/?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1235463/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235463/?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1236260/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236260/?tab=overview&hosting=cloud", "group": "In Scope Targets " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-443621b4bcaff6c1.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-a85ce135751be9ce", "name": "Wise (ex-TransferWise)", "program_url": "https://bugcrowd.com/engagements/wise", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,000", "reward_min": "$100", "reward_max": "$4,000", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:32Z", "scope_published_at": "2026-05-19T09:35:32.812Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/wise/changelog/b406940a-3bf6-4b05-ac3b-a8110ab53e81.json" ], "in_scope": [ { "name": "transferwise.com", "asset_type": "website", "location": "https://transferwise.com", "group": "In scope targets" }, { "name": "*.transferwise.com", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "wise.com", "asset_type": "website", "location": "https://wise.com", "group": "In scope targets" }, { "name": "*.wise.com", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "Latest version of Wise iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/wise-ex-transferwise/id612261027", "group": "In scope targets" }, { "name": "Latest version of Wise Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.transferwise.android&hl=en_US&gl=US", "group": "In scope targets" }, { "name": "AWS infrastructure and services in use by Wise (eg: S3 buckets)", "asset_type": "other", "location": null, "group": "In scope targets" }, { "name": "github.com/transferwise/*", "asset_type": "other", "location": "https://github.com/transferwise/*", "group": "In scope targets" }, { "name": "*.wise-sandbox.com", "asset_type": "website", "location": "https://wise-sandbox.com/", "group": "Sandbox environment" } ], "out_of_scope": [ { "name": "Wise Affiliate Program", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Third party services not hosted by Wise", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Any Github asset not under the “transferwise” organization", "asset_type": "other", "location": null, "group": "Out of scope targets" }, { "name": "Third party authentication services (eg: Facebook and Google)", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://transferwise.com/help/contact", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://wise.com/help/contact", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.tw.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.tw.ee", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Non-current version of the Android app", "asset_type": "android", "location": null, "group": "Out of scope targets" }, { "name": "Non-current version of the iOS app", "asset_type": "ios", "location": null, "group": "Out of scope targets" }, { "name": "*.transferwise.tech", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "brand.wise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "links.wise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "widgets.transferwise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "brand.transferwise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "bootstrap.transferwise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "links.transferwise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "status.wise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "status.transferwise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "tech.transferwise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "docs.wise.com", "asset_type": "other", "location": null, "group": "Out of scope targets" }, { "name": "github.com/transferwise/pipelinewise", "asset_type": "other", "location": "https://github.com/transferwise/pipelinewise", "group": "Out of scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-a85ce135751be9ce.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-ef99b236755f5621", "name": "Wyze Bug Bounty", "program_url": "https://bugcrowd.com/engagements/wyze", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $5,000", "reward_min": "$50", "reward_max": "$5,000", "scope_rank": 1, "access_status": "open", "industry": "Electronics", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:33Z", "scope_published_at": "2026-09-24T16:46:53.166Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/wyze/changelog/edde608a-a322-431d-8908-025b05972edb.json" ], "in_scope": [ { "name": "https://auth.wyze.com", "asset_type": "website", "location": "https://auth.wyze.com", "group": "In Scope Targets" }, { "name": "https://my.wyze.com", "asset_type": "website", "location": "https://my.wyze.com", "group": "In Scope Targets" }, { "name": "https://api.wyzecam.com", "asset_type": "api", "location": "https://api.wyzecam.com", "group": "In Scope Targets" }, { "name": "Wyze Cam V3", "asset_type": "hardware", "location": null, "group": "In Scope Targets 2" }, { "name": "Wyze Cam v4", "asset_type": "hardware", "location": "https://www.wyze.com/products/wyze-cam", "group": "In Scope Targets 2" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-ef99b236755f5621.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-34ee7f01629a6e29", "name": "Xfinity Home & xFi", "program_url": "https://bugcrowd.com/engagements/xfinity-home", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $5,500", "reward_min": "Points", "reward_max": "$5,500", "scope_rank": 4, "access_status": "open", "industry": "Telecommunications", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:34Z", "scope_published_at": "2026-07-13T17:53:34.229Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 15, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/xfinity-home/changelog/2a28998a-a3f5-4251-a7d6-cf3f735bb705.json" ], "in_scope": [ { "name": "████████████████████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "████████████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "███████████████████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "██████████████████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "██████████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "███████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "█████████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "███████████████████████████", "asset_type": "ios", "location": null, "group": "███████████████" }, { "name": "██████████████████████", "asset_type": "ios", "location": null, "group": "███████████████" }, { "name": "███████████████████████████████", "asset_type": "android", "location": null, "group": "███████████████" }, { "name": "██████████████████████████", "asset_type": "android", "location": null, "group": "███████████████" }, { "name": "███████████████████████", "asset_type": "api", "location": null, "group": "███████████████" }, { "name": "████████████████████████████", "asset_type": "api", "location": null, "group": "███████████████" }, { "name": "███████████████████████████████████████████████████", "asset_type": "hardware", "location": null, "group": "███████████████" }, { "name": "████████████████████", "asset_type": "iot", "location": null, "group": "███████████████" }, { "name": "█████████████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "█████████████████", "asset_type": "api", "location": null, "group": "███████████████" }, { "name": "█████████████████████", "asset_type": "api", "location": null, "group": "███████████████" }, { "name": "██████████████████████████████████", "asset_type": "hardware", "location": null, "group": "███████████████" }, { "name": "████████", "asset_type": "hardware", "location": null, "group": "███████████████" }, { "name": "█████████████████████████████", "asset_type": "api", "location": null, "group": "███████████████" }, { "name": "█████████████████████████", "asset_type": "api", "location": null, "group": "███████████████" } ], "out_of_scope": [ { "name": "███████████████████████████████████████████████", "asset_type": "iot", "location": null, "group": "████████████" }, { "name": "█████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "██████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "██████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "██████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "██████████", "asset_type": "network", "location": null, "group": "████████████" }, { "name": "█████████████", "asset_type": "network", "location": null, "group": "████████████" }, { "name": "███████████████", "asset_type": "network", "location": null, "group": "████████████" }, { "name": "██████████████", "asset_type": "network", "location": null, "group": "████████████" }, { "name": "████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-34ee7f01629a6e29.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "15 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-dd8f6d08a25c77a0", "name": "Xopero Software S.A. Marketplace Managed Bug Bounty Engagement", "program_url": "https://bugcrowd.com/engagements/xopero-software-marketplace", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:35Z", "scope_published_at": "2026-09-03T00:30:39.322Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/xopero-software-marketplace/changelog/4ba6bfbf-9aa5-4e67-aa74-1269020d0b30.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1228719/gitprotect-io-for-jira-backup-restore-dr-data-management?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228719/gitprotect-io-for-jira-backup-restore-dr-data-management?hosting=cloud", "group": "In Scope Target" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-dd8f6d08a25c77a0.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-17548c34cd66c465", "name": "YNAB", "program_url": "https://bugcrowd.com/engagements/ynab", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $3,000", "reward_min": "$150", "reward_max": "$3,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:36Z", "scope_published_at": "2026-03-05T21:41:59.525Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ynab/changelog/a11269ee-8680-42ef-b93e-92d82d5ca555.json" ], "in_scope": [ { "name": "staging-app.bany.dev", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "staging-api.bany.dev", "asset_type": "api", "location": "https://staging-api.bany.dev/", "group": "In Scope" }, { "name": "www.ynab.com", "asset_type": "website", "location": "https://www.ynab.com/", "group": "In Scope" } ], "out_of_scope": [ { "name": "https://app.ynab.com/", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "Any previous version of the desktop apps: YNAB 4, YNAB 3, YNAB Pro, YNAB Basic (Spreadsheet)", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "https://support.ynab.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "https://develop-app.ynab.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "https://learn.ynab.com/", "asset_type": "website", "location": null, "group": "Out of Scope " } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-17548c34cd66c465.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ] }, { "id": "bugcrowd-c6e7a4e989508d26", "name": "Zola Managed Bug Bounty", "program_url": "https://bugcrowd.com/engagements/zola-mbb-og", "program_type": "paid_bounty", "directory_category": "bug_bounty", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,000", "reward_min": "$150", "reward_max": "$2,000", "scope_rank": 1, "access_status": "open", "industry": "eCommerce", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:38Z", "scope_published_at": "2026-02-10T15:06:01.623Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/zola-mbb-og/changelog/6c840b8d-89e7-4cdb-a809-2c5a7f243164.json" ], "in_scope": [ { "name": "██████████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "██████████████████████████", "asset_type": "ios", "location": null, "group": "████████████████" } ], "out_of_scope": [ { "name": "████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "██████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████████████████", "asset_type": "ios", "location": null, "group": "████████████" }, { "name": "███████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/public-bounties/bugcrowd/bugcrowd-c6e7a4e989508d26.md", "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ] }, { "id": "bugcrowd-cf8bf42e36610b0e", "name": "AB InBev Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/abinbev-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:00Z", "scope_published_at": "2025-12-12T12:43:30.599Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/abinbev-vdp/changelog/d43acc32-046b-44b4-9fe3-7e0cc8818ab5.json" ], "in_scope": [ { "name": "*.ab-inbev.com", "asset_type": "website", "location": "https://www.ab-inbev.com/", "group": "In scope" }, { "name": "*.somosmaz.com", "asset_type": "website", "location": "https://*.somosmaz.com", "group": "In scope" }, { "name": "*.tapit.com.co", "asset_type": "website", "location": "https://tapit.com.co", "group": "In scope" }, { "name": "*.modelorama.com.mx", "asset_type": "website", "location": "https://www.modelorama.com.mx/", "group": "In scope" }, { "name": "*.membeers.com/", "asset_type": "website", "location": "https://membeers.com/", "group": "In scope" }, { "name": "*.brewtech-abi.com/", "asset_type": "website", "location": "https://www.brewtech-abi.com/", "group": "In scope" }, { "name": "*.mazpeople.com", "asset_type": "website", "location": "https://mazpeople.com", "group": "In scope" }, { "name": "*.cervezavictoria.com.mx/", "asset_type": "website", "location": "https://www.cervezavictoria.com.mx/", "group": "In scope" }, { "name": "*.embajadores.com.co", "asset_type": "website", "location": "https://www.embajadores.com.co", "group": "In scope" }, { "name": "*.firmasacuerdos.com", "asset_type": "website", "location": "https://www.firmasacuerdos.com", "group": "In scope" }, { "name": "*.gmodelo.com.mx", "asset_type": "website", "location": "https://gmodelo.com.mx", "group": "In scope" }, { "name": "*.abinbevfoundation.org/", "asset_type": "website", "location": "https://abinbevfoundation.org/", "group": "In scope" }, { "name": "*.abinbev-israel.com", "asset_type": "website", "location": "https://www.abinbev-israel.com/", "group": "In scope" }, { "name": "*.aguasfirmesgrupomodelo.com", "asset_type": "website", "location": "https://www.aguasfirmesgrupomodelo.com/", "group": "In scope" }, { "name": "*.amigosmodelo.com", "asset_type": "website", "location": "http://amigosmodelo.com/", "group": "In scope" }, { "name": "*.cerveceriaambev.gt", "asset_type": "website", "location": "https://www.cerveceriaambev.gt/", "group": "In scope" }, { "name": "*.gmodelo.com", "asset_type": "website", "location": "https://gmodelo.com", "group": "In scope" }, { "name": "*.grupomodelo.com", "asset_type": "website", "location": "https://www.grupomodelo.com/", "group": "In scope" }, { "name": "*.mimodelo.com.mx", "asset_type": "website", "location": "https://www.mimodelo.com.mx/", "group": "In scope" }, { "name": "*.modeloguatemala.com", "asset_type": "website", "location": "https://www.modeloguatemala.com/", "group": "In scope" }, { "name": "*.qr-abinbev.com", "asset_type": "website", "location": "https://qr-abinbev.com/", "group": "In scope" }, { "name": "*.sociosmodelo.com", "asset_type": "website", "location": "https://www.sociosmodelo.com/", "group": "In scope" }, { "name": "*.voluntariosmodelo.com.mx", "asset_type": "website", "location": "https://www.voluntariosmodelo.com.mx/", "group": "In scope" }, { "name": "*.ambev.com.br", "asset_type": "website", "location": "https://ambev.com.br", "group": "In scope" }, { "name": "*.abinbev-las.com", "asset_type": "website", "location": "https://abinbev-las.com", "group": "In scope" }, { "name": "*.ambevdevs.com.br", "asset_type": "website", "location": "https://ambevdevs.com.br/", "group": "In scope" }, { "name": "*.ambevtech.com.br", "asset_type": "website", "location": "https://ambevtech.com.br", "group": "In scope" }, { "name": "*.ontimeambev.com.br", "asset_type": "website", "location": "https://ontimeambev.com.br", "group": "In scope" }, { "name": "*.abinbev.cl/", "asset_type": "website", "location": "https://abinbev.cl/", "group": "In scope" }, { "name": "*.abinbev-saz.com", "asset_type": "website", "location": "https://abinbev-saz.com", "group": "In scope" }, { "name": "*.acervoambev.com.br/", "asset_type": "website", "location": "https://www.acervoambev.com.br/", "group": "In scope" }, { "name": "*.ambevon.com.br", "asset_type": "website", "location": "https://ambevon.com.br", "group": "In scope" }, { "name": "*.ambevquersaber.com.br", "asset_type": "website", "location": "https://ambevquersaber.com.br", "group": "In scope" }, { "name": "*.innoambev.com.br", "asset_type": "website", "location": "https://innoambev.com.br", "group": "In scope" }, { "name": "*.ouvidoriaambev.com.br/", "asset_type": "website", "location": "https://www.ouvidoriaambev.com.br/", "group": "In scope" }, { "name": "*.visitaambev.com.br", "asset_type": "website", "location": "https://visitaambev.com.br", "group": "In scope" }, { "name": "*.coronastore.com.br", "asset_type": "website", "location": "https://coronastore.com.br", "group": "In scope" }, { "name": "*.cervezacorona.com.ec", "asset_type": "website", "location": "https://cervezacorona.com.ec", "group": "In scope" }, { "name": "*.michelobultra.com", "asset_type": "website", "location": "https://michelobultra.com", "group": "In scope" }, { "name": "*.michelobultra.ar", "asset_type": "website", "location": "https://michelobultra.ar", "group": "In scope" }, { "name": "*.michelobultra.ca", "asset_type": "website", "location": "https://michelobultra.ca", "group": "In scope" }, { "name": "*.michelobultra.co.kr", "asset_type": "website", "location": "https://michelobultra.co.kr", "group": "In scope" }, { "name": "*.michelobultra.co.uk", "asset_type": "website", "location": "https://michelobultra.co.uk", "group": "In scope" }, { "name": "*.cervezacorona.com.do", "asset_type": "website", "location": "https://cervezacorona.com.do", "group": "In scope" }, { "name": "*.cervezacorona.com.py", "asset_type": "website", "location": "https://cervezacorona.com.py", "group": "In scope" }, { "name": "*.coronaextra.co.uk", "asset_type": "website", "location": "https://coronaextra.co.uk", "group": "In scope" }, { "name": "*.livecoronaisland.com", "asset_type": "website", "location": "https://livecoronaisland.com", "group": "In scope" }, { "name": "*.michelobultra.com.br", "asset_type": "website", "location": "https://michelobultra.com.br", "group": "In scope" }, { "name": "*.michelobultra.com.co", "asset_type": "website", "location": "https://michelobultra.com.co", "group": "In scope" }, { "name": "*.michelobultra.mx", "asset_type": "website", "location": "https://michelobultra.mx", "group": "In scope" }, { "name": "*.beertech.com", "asset_type": "website", "location": "https://beertech.com", "group": "In scope" }, { "name": "*.michelobultrasv.com", "asset_type": "website", "location": "https://michelobultrasv.com", "group": "In scope" }, { "name": "*.michelobultrahn.com", "asset_type": "website", "location": "https://michelobultrahn.com", "group": "In scope" }, { "name": "*.michelobultraseltzer.mx", "asset_type": "website", "location": "https://michelobultraseltzer.mx", "group": "In scope" }, { "name": "*.michelobultragt.com", "asset_type": "website", "location": "https://michelobultragt.com", "group": "In scope" }, { "name": "*.michelobultrasuperioraccess.com", "asset_type": "website", "location": "https://michelobultrasuperioraccess.com", "group": "In scope" }, { "name": "*.corona.com", "asset_type": "website", "location": "https://corona.com", "group": "In scope" }, { "name": "*.cervezacorona.com.ar", "asset_type": "website", "location": "https://cervezacorona.com.ar", "group": "In scope" }, { "name": "*.cervezacorona.mx", "asset_type": "website", "location": "https://cervezacorona.mx", "group": "In scope" }, { "name": "*.coronaguate.com", "asset_type": "website", "location": "https://coronaguate.com", "group": "In scope" }, { "name": "*.cervezacorona.cl", "asset_type": "website", "location": "https://cervezacorona.cl/", "group": "In scope" }, { "name": "*.cervezacorona.co", "asset_type": "website", "location": "https://cervezacorona.co", "group": "In scope" }, { "name": "*.coronaisland.com", "asset_type": "website", "location": "https://coronaisland.com", "group": "In scope" }, { "name": "*.corona-extra.it", "asset_type": "website", "location": "https://corona-extra.it", "group": "In scope" }, { "name": "*.coronaextra.ca", "asset_type": "website", "location": "https://coronaextra.ca", "group": "In scope" }, { "name": "*.coronacerveja.com.br", "asset_type": "website", "location": "https://coronacerveja.com.br", "group": "In scope" }, { "name": "*.cervezacorona.pa", "asset_type": "website", "location": "https://cervezacorona.pa", "group": "In scope" }, { "name": "*.cervezacorona.com.pe", "asset_type": "website", "location": "https://cervezacorona.com.pe", "group": "In scope" }, { "name": "*.coronaaguarifada.com.mx", "asset_type": "website", "location": "https://coronaaguarifada.com.mx", "group": "In scope" }, { "name": "*.coronasv.com", "asset_type": "website", "location": "https://coronasv.com", "group": "In scope" }, { "name": "*.coronahn.com", "asset_type": "website", "location": "https://coronahn.com", "group": "In scope" }, { "name": "*.cervezacorona.es", "asset_type": "website", "location": "https://cervezacorona.es", "group": "In scope" }, { "name": "*.corona.de", "asset_type": "website", "location": "https://corona.de", "group": "In scope" }, { "name": "*.budweiser.com", "asset_type": "website", "location": "https://budweiser.com", "group": "In scope" }, { "name": "*.budweiser.com.br", "asset_type": "website", "location": "https://budweiser.com.br", "group": "In scope" }, { "name": "*.budweiser.ca", "asset_type": "website", "location": "https://budweiser.ca", "group": "In scope" }, { "name": "*.budweiser.co", "asset_type": "website", "location": "https://budweiser.co", "group": "In scope" }, { "name": "*.budweiser.cl", "asset_type": "website", "location": "https://budweiser.cl", "group": "In scope" }, { "name": "*.budweiser.com.ar", "asset_type": "website", "location": "https://budweiser.com.ar", "group": "In scope" }, { "name": "*.budweiser.com.mx", "asset_type": "website", "location": "https://budweiser.com.mx", "group": "In scope" }, { "name": "*.budweiser.co.uk", "asset_type": "website", "location": "https://budweiser.co.uk", "group": "In scope" }, { "name": "*.budweiser.com.ng", "asset_type": "website", "location": "https://budweiser.com.ng", "group": "In scope" }, { "name": "*.budweiser.ie", "asset_type": "website", "location": "https://budweiser.ie", "group": "In scope" }, { "name": "*.budweiser.es", "asset_type": "website", "location": "https://budweiser.es", "group": "In scope" }, { "name": "*.budweiser.kr", "asset_type": "website", "location": "https://budweiser.kr", "group": "In scope" }, { "name": "*.budweiserapac.com", "asset_type": "website", "location": "https://budweiserapac.com", "group": "In scope" }, { "name": "*.budweisertours.com", "asset_type": "website", "location": "https://budweisertours.com", "group": "In scope" }, { "name": "*.budweiserpl.com", "asset_type": "website", "location": "https://budweiserpl.com", "group": "In scope" }, { "name": "*.budweiserbrewinggroup.co.uk", "asset_type": "website", "location": "https://budweiserbrewinggroup.co.uk", "group": "In scope" }, { "name": "*.stellaartois.com.br", "asset_type": "website", "location": "https://stellaartois.com.br", "group": "In scope" }, { "name": "*.stellaartois.com", "asset_type": "website", "location": "https://stellaartois.com", "group": "In scope" }, { "name": "*.stellaartois.co", "asset_type": "website", "location": "https://stellaartois.co", "group": "In scope" }, { "name": "*.stellaartois.ca", "asset_type": "website", "location": "https://stellaartois.ca", "group": "In scope" }, { "name": "*.stellaartois.com.ar", "asset_type": "website", "location": "https://stellaartois.com.ar", "group": "In scope" }, { "name": "*.stellaartois.com.mx", "asset_type": "website", "location": "https://stellaartois.com.mx", "group": "In scope" }, { "name": "*.stellaartois.com.pe", "asset_type": "website", "location": "https://stellaartois.com.pe", "group": "In scope" }, { "name": "*.stellaartois.cl", "asset_type": "website", "location": "https://stellaartois.cl", "group": "In scope" }, { "name": "*.stellaartoisperfectserve.com", "asset_type": "website", "location": "https://stellaartoisperfectserve.com", "group": "In scope" }, { "name": "*.stellaperfectpour.com", "asset_type": "website", "location": "https://stellaperfectpour.com", "group": "In scope" }, { "name": "*.stellaartoisletsdodinner.com", "asset_type": "website", "location": "https://stellaartoisletsdodinner.com", "group": "In scope" }, { "name": "*.stellatransformertable.ca", "asset_type": "website", "location": "https://stellatransformertable.ca", "group": "In scope" }, { "name": "*.brahma.com.br", "asset_type": "website", "location": "https://brahma.com.br", "group": "In scope" }, { "name": "*.clientesab-inbev.com", "asset_type": "website", "location": "https://clientesab-inbev.com", "group": "In scope" }, { "name": "*.choppbrahmaexpress.com.br", "asset_type": "website", "location": "https://choppbrahmaexpress.com.br", "group": "In scope" }, { "name": "*.techmaz.mx", "asset_type": "website", "location": "https://techmaz.mx", "group": "In scope" }, { "name": "*.bavaria.co", "asset_type": "website", "location": "https://bavaria.co", "group": "In scope" }, { "name": "*.ab-inbev.se", "asset_type": "website", "location": "https://ab-inbev.se", "group": "In scope" }, { "name": "*.ab-inbev.no", "asset_type": "website", "location": "https://ab-inbev.no", "group": "In scope" }, { "name": "*.ab-inbev.fi", "asset_type": "website", "location": "https://ab-inbev.fi", "group": "In scope" }, { "name": "*.ab-inbev.dk", "asset_type": "website", "location": "https://ab-inbev.dk", "group": "In scope" }, { "name": "*.biercommuno.com", "asset_type": "website", "location": "https://biercommuno.com", "group": "In scope" }, { "name": "*.tapintoyourbeer.com", "asset_type": "website", "location": "https://tapintoyourbeer.com", "group": "In scope" }, { "name": "*.fritesartois.com", "asset_type": "website", "location": "https://fritesartois.com", "group": "In scope" }, { "name": "*.biobrew.com", "asset_type": "website", "location": "https://biobrew.com", "group": "In scope" }, { "name": "*.abiboardvideoportal.com", "asset_type": "website", "location": "https://abiboardvideoportal.com", "group": "In scope" }, { "name": "*.labatt.com", "asset_type": "website", "location": "https://labatt.com", "group": "In scope" }, { "name": "*.labattmobility.com", "asset_type": "website", "location": "https://labattmobility.com", "group": "In scope" }, { "name": "*.labattmobilityqa.com", "asset_type": "website", "location": "https://labattmobilityqa.com", "group": "In scope" }, { "name": "*.labattbrands.com", "asset_type": "website", "location": "https://labattbrands.com", "group": "In scope" }, { "name": "*.labattpub.com", "asset_type": "website", "location": "https://labattpub.com", "group": "In scope" }, { "name": "*.getstartedwithlabatt.com", "asset_type": "website", "location": "https://getstartedwithlabatt.com", "group": "In scope" }, { "name": "*.getstartedwithlabatt.ca", "asset_type": "website", "location": "https://getstartedwithlabatt.ca", "group": "In scope" }, { "name": "*.labattmeilleursensemble.ca", "asset_type": "website", "location": "https://labattmeilleursensemble.ca", "group": "In scope" }, { "name": "*.labattbettertogether.ca", "asset_type": "website", "location": "https://labattbettertogether.ca", "group": "In scope" }, { "name": "*.budlight.com", "asset_type": "website", "location": "https://budlight.com", "group": "In scope" }, { "name": "*.budlight.ca", "asset_type": "website", "location": "https://budlight.ca", "group": "In scope" }, { "name": "*.budlightbackyard.com", "asset_type": "website", "location": "https://budlightbackyard.com", "group": "In scope" }, { "name": "*.quilmes.com.ar", "asset_type": "website", "location": "https://quilmes.com.ar", "group": "In scope" }, { "name": "*.quilmes.cl", "asset_type": "website", "location": "https://quilmes.cl", "group": "In scope" }, { "name": "*.cerveceriaymalteriaquilmes.com", "asset_type": "website", "location": "https://cerveceriaymalteriaquilmes.com", "group": "In scope" }, { "name": "*.brahma.com.ar", "asset_type": "website", "location": "https://brahma.com.ar", "group": "In scope" }, { "name": "*.brahma.com.py", "asset_type": "website", "location": "https://brahma.com.py", "group": "In scope" }, { "name": "*.experienciachoppbrahma.com.br", "asset_type": "website", "location": "https://experienciachoppbrahma.com.br", "group": "In scope" }, { "name": "*.busch.com", "asset_type": "website", "location": "https://busch.com", "group": "In scope" }, { "name": "*.cervezamodelo.com.mx", "asset_type": "website", "location": "https://cervezamodelo.com.mx", "group": "In scope" }, { "name": "*.cervezamodelo.com.do", "asset_type": "website", "location": "https://cervezamodelo.com.do", "group": "In scope" }, { "name": "*.skol.com.br", "asset_type": "website", "location": "https://skol.com.br", "group": "In scope" }, { "name": "*.guaranaantarctica.com.br", "asset_type": "website", "location": "https://guaranaantarctica.com.br", "group": "In scope" }, { "name": "*.sab.co.za", "asset_type": "website", "location": "https://sab.co.za", "group": "In scope" }, { "name": "*.cervejaspaten.com.br", "asset_type": "website", "location": "https://cervejaspaten.com.br", "group": "In scope" }, { "name": "*.bud.cn", "asset_type": "website", "location": "https://bud.cn", "group": "In scope" }, { "name": "*.gooseisland.com.ar", "asset_type": "website", "location": "https://gooseisland.com.ar", "group": "In scope" }, { "name": "*.beesmart.co.kr", "asset_type": "website", "location": "https://beesmart.co.kr", "group": "In scope" }, { "name": "*.beatsoficial.pe", "asset_type": "website", "location": "https://beatsoficial.pe", "group": "In scope" }, { "name": "*.gooseisland.com.br", "asset_type": "website", "location": "https://gooseisland.com.br", "group": "In scope" }, { "name": "*.gooseisland.com", "asset_type": "website", "location": "https://gooseisland.com", "group": "In scope" }, { "name": "*.cervezapatagonia.com.br", "asset_type": "website", "location": "https://cervezapatagonia.com.br", "group": "In scope" }, { "name": "*.beessmart.co.kr", "asset_type": "website", "location": "https://devadmin.beessmart.co.kr", "group": "In scope" }, { "name": "*.sabalumni.co.za", "asset_type": "website", "location": "https://sabalumni.co.za", "group": "In scope" }, { "name": "*.perfectdraft.com", "asset_type": "website", "location": "https://perfectdraft.com", "group": "In scope" }, { "name": "*.becks.de", "asset_type": "website", "location": "https://becks.de", "group": "In scope" }, { "name": "*.bohemia.com.br", "asset_type": "website", "location": "https://bohemia.com.br", "group": "In scope" }, { "name": "*.beatsoficial.com.br", "asset_type": "website", "location": "https://beatsoficial.com.br", "group": "In scope" }, { "name": "*.cervezapatagonia.com.ar", "asset_type": "website", "location": "https://cervezapatagonia.com.ar", "group": "In scope" }, { "name": "*.cervezapatagonia.com.py", "asset_type": "website", "location": "https://cervezapatagonia.com.py", "group": "In scope" }, { "name": "*.gooseisland.ca", "asset_type": "website", "location": "https://gooseisland.ca", "group": "In scope" }, { "name": "*.skol.com.py", "asset_type": "website", "location": "https://skol.com.py", "group": "In scope" }, { "name": "*.bohemiapuromalte.com.br", "asset_type": "website", "location": "https://bohemiapuromalte.com.br", "group": "In scope" }, { "name": "*.guarana.com.pe", "asset_type": "website", "location": "https://guarana.com.pe", "group": "In scope" }, { "name": "*.beerhunt.com.mx", "asset_type": "website", "location": "https://beerhunt.com.mx", "group": "In scope" }, { "name": "*.abizxh.com", "asset_type": "website", "location": "https://abizxh.com", "group": "In scope" }, { "name": "*.abipocm.com", "asset_type": "website", "location": "https://abipocm.com", "group": "In scope" }, { "name": "*.uwazi.community", "asset_type": "website", "location": "https://uwazi.community", "group": "In scope" }, { "name": "*.tuespacio.com", "asset_type": "website", "location": "https://tuespacio.com", "group": "In scope" }, { "name": "*.toafuturewithmorecheers.com", "asset_type": "website", "location": "https://toafuturewithmorecheers.com", "group": "In scope" }, { "name": "*.mybees.id", "asset_type": "website", "location": "http://mybees.id", "group": "In scope" }, { "name": "*.mybees.com.ph", "asset_type": "website", "location": "https://mybees.com.ph", "group": "In scope" }, { "name": "*.mikeshardglobal.com", "asset_type": "website", "location": "https://mikeshardglobal.com", "group": "In scope" }, { "name": "*.abi.tools", "asset_type": "website", "location": "https://abi.tools", "group": "In scope" }, { "name": "*.werehereforthebeer.beer", "asset_type": "website", "location": "https://werehereforthebeer.beer", "group": "In scope" }, { "name": "*.drinkshop.horecasupport.be", "asset_type": "website", "location": "https://drinkshop.horecasupport.be", "group": "In scope" }, { "name": "*.validation.lab.bees-platform.dev", "asset_type": "website", "location": "https://validation.lab.bees-platform.dev", "group": "In scope" }, { "name": "*.ab1nbev.com", "asset_type": "website", "location": "https://ab1nbev.com", "group": "In scope" }, { "name": "*.2m4.at", "asset_type": "website", "location": "http://2m4.at", "group": "In scope" }, { "name": "*.mybeerrebate.com", "asset_type": "website", "location": "https://mybeerrebate.com", "group": "In scope" }, { "name": "*.cervezadelpacifico.com", "asset_type": "website", "location": "https://cervezadelpacifico.com", "group": "In scope" }, { "name": "*.cervezapacifico.pe", "asset_type": "website", "location": "https://cervezapacifico.pe", "group": "In scope" }, { "name": "*.hoegaarden.co.kr", "asset_type": "website", "location": "https://hoegaarden.co.kr", "group": "In scope" }, { "name": "*.cervezagolden.com.bo", "asset_type": "website", "location": "https://cervezagolden.com.bo", "group": "In scope" }, { "name": "*.cervezapoker.com", "asset_type": "website", "location": "https://cervezapoker.com", "group": "In scope" }, { "name": "*.cervezacostenabacana.co", "asset_type": "website", "location": "https://cervezacostenabacana.co", "group": "In scope" }, { "name": "*.larutadelacerveza.mx", "asset_type": "website", "location": "https://larutadelacerveza.mx", "group": "In scope" }, { "name": "*.cerveza-pacena.com", "asset_type": "website", "location": "https://cerveza-pacena.com", "group": "In scope" }, { "name": "*.cervezatheone.com.do", "asset_type": "website", "location": "https://cervezatheone.com.do", "group": "In scope" }, { "name": "*.cervezanativa.com.co", "asset_type": "website", "location": "https://cervezanativa.com.co", "group": "In scope" }, { "name": "*.cerveza27.com", "asset_type": "website", "location": "https://cerveza27.com", "group": "In scope" }, { "name": "*.miscervezas.mx", "asset_type": "website", "location": "https://miscervezas.mx", "group": "In scope" }, { "name": "*.lacopaaguila.co", "asset_type": "website", "location": "https://lacopaaguila.co", "group": "In scope" }, { "name": "*.brewtech-abi.com", "asset_type": "website", "location": "https://brewtech-abi.com", "group": "In scope" }, { "name": "*.clubtada.com", "asset_type": "website", "location": "https://clubtada.com", "group": "In scope" }, { "name": "*.eltorneoaguila.co", "asset_type": "website", "location": "https://eltorneoaguila.co", "group": "In scope" }, { "name": "*.clubpremium.com.ec", "asset_type": "website", "location": "https://clubpremium.com.ec", "group": "In scope" }, { "name": "*.cervecerianacional.ec", "asset_type": "website", "location": "https://cervecerianacional.ec", "group": "In scope" }, { "name": "*.superligaguila.co", "asset_type": "website", "location": "https://superligaguila.co", "group": "In scope" }, { "name": "*.torneoaguila.co", "asset_type": "website", "location": "https://torneoaguila.co", "group": "In scope" }, { "name": "*.maestriacervecera.com", "asset_type": "website", "location": "https://maestriacervecera.com", "group": "In scope" }, { "name": "*.bavariatank.com", "asset_type": "website", "location": "https://bavariatank.com", "group": "In scope" }, { "name": "*.cerveceria-nacional.com", "asset_type": "website", "location": "https://cerveceria-nacional.com", "group": "In scope" }, { "name": "*.bbccerveceria.com", "asset_type": "website", "location": "https://bbccerveceria.com", "group": "In scope" }, { "name": "*.redemprendedoresbavaria.net", "asset_type": "website", "location": "https://redemprendedoresbavaria.net", "group": "In scope" }, { "name": "*.eventos.tadadelivery.com.co", "asset_type": "website", "location": "https://eventos.tadadelivery.com.co", "group": "In scope" }, { "name": "*.spotlightabi.com", "asset_type": "website", "location": "https://spotlightabi.com", "group": "In scope" }, { "name": "*.tadapreventa.com", "asset_type": "website", "location": "https://tadapreventa.com", "group": "In scope" }, { "name": "*.musictada.com", "asset_type": "website", "location": "https://musictada.com", "group": "In scope" }, { "name": "*.budxtour.com", "asset_type": "website", "location": "https://budxtour.com", "group": "In scope" }, { "name": "*.100accelerator.com", "asset_type": "website", "location": "https://100accelerator.com", "group": "In scope" }, { "name": "*.appbar.com.ar", "asset_type": "website", "location": "https://appbar.com.ar", "group": "In scope" }, { "name": "*.catalogoabichile.cl", "asset_type": "website", "location": "https://catalogoabichile.cl", "group": "In scope" }, { "name": "*.mundotech.com.br", "asset_type": "website", "location": "https://mundotech.com.br", "group": "In scope" }, { "name": "*.ponymalta.com.ec", "asset_type": "website", "location": "https://ponymalta.com.ec", "group": "In scope" }, { "name": "*.academiadacerveja.com", "asset_type": "website", "location": "https://academiadacerveja.com", "group": "In scope" }, { "name": "*.ponymalta.com.co", "asset_type": "website", "location": "https://ponymalta.com.co", "group": "In scope" }, { "name": "*.cervepar.com.py", "asset_type": "website", "location": "https://cervepar.com.py", "group": "In scope" }, { "name": "*.promocionate.com.do", "asset_type": "website", "location": "https://promocionate.com.do", "group": "In scope" }, { "name": "*.promocionate.com.co", "asset_type": "website", "location": "https://promocionate.com.co", "group": "In scope" }, { "name": "*.fnc.com.uy", "asset_type": "website", "location": "https://fnc.com.uy", "group": "In scope" }, { "name": "*.promocionate.com.ec", "asset_type": "website", "location": "https://promocionate.com.ec", "group": "In scope" }, { "name": "*.colaypola.com.co", "asset_type": "website", "location": "https://colaypola.com.co", "group": "In scope" }, { "name": "*.digitalproducts.com.co", "asset_type": "website", "location": "https://digitalproducts.com.co", "group": "In scope" }, { "name": "*.mikeshard.com.br", "asset_type": "website", "location": "https://mikeshard.com.br", "group": "In scope" }, { "name": "*.maltaleona.com.co", "asset_type": "website", "location": "https://maltaleona.com.co", "group": "In scope" }, { "name": "*.maltamorena.com.do", "asset_type": "website", "location": "https://maltamorena.com.do", "group": "In scope" }, { "name": "*.cnd.com.do", "asset_type": "website", "location": "https://cnd.com.do", "group": "In scope" }, { "name": "*.pilsencallao.com.pe", "asset_type": "website", "location": "https://pilsencallao.com.pe", "group": "In scope" }, { "name": "*.maz-bsd.com", "asset_type": "website", "location": "https://maz-bsd.com", "group": "In scope" }, { "name": "*.pilsen.com.co", "asset_type": "website", "location": "https://pilsen.com.co", "group": "In scope" }, { "name": "*.salvavidahn.com", "asset_type": "website", "location": "https://salvavidahn.com", "group": "In scope" }, { "name": "*.pilsenersv.com", "asset_type": "website", "location": "https://pilsenersv.com", "group": "In scope" }, { "name": "*.lasgolden.pa", "asset_type": "website", "location": "https://lasgolden.pa", "group": "In scope" }, { "name": "*.pilsener.com.ec", "asset_type": "website", "location": "https://pilsener.com.ec", "group": "In scope" }, { "name": "*.cristal.com.pe", "asset_type": "website", "location": "https://cristal.com.pe", "group": "In scope" }, { "name": "*.pilsentrujillo.com.pe", "asset_type": "website", "location": "https://pilsentrujillo.com.pe", "group": "In scope" }, { "name": "*.sanjuan.com.pe", "asset_type": "website", "location": "https://sanjuan.com.pe", "group": "In scope" }, { "name": "*.ruletaganadora.pe", "asset_type": "website", "location": "https://ruletaganadora.pe", "group": "In scope" }, { "name": "*.pilsenerlight.com.ec", "asset_type": "website", "location": "https://pilsenerlight.com.ec", "group": "In scope" }, { "name": "*.cusquena.com", "asset_type": "website", "location": "https://cusquena.com", "group": "In scope" }, { "name": "*.presidente.com.do", "asset_type": "website", "location": "https://presidente.com.do", "group": "In scope" }, { "name": "*.mikescolombia.com", "asset_type": "website", "location": "https://mikescolombia.com", "group": "In scope" }, { "name": "*.nuestrasiembra.ec", "asset_type": "website", "location": "https://nuestrasiembra.ec", "group": "In scope" }, { "name": "*.mikesecuador.com", "asset_type": "website", "location": "https://mikesecuador.com", "group": "In scope" }, { "name": "*.laconstancia.com", "asset_type": "website", "location": "https://laconstancia.com", "group": "In scope" }, { "name": "*.consumoresponsable.com.mx", "asset_type": "website", "location": "https://consumoresponsable.com.mx", "group": "In scope" }, { "name": "*.cadabotellacuenta.com", "asset_type": "website", "location": "https://cadabotellacuenta.com", "group": "In scope" }, { "name": "*.maz-coolers.com", "asset_type": "website", "location": "https://maz-coolers.com", "group": "In scope" }, { "name": "*.campokonecta.com", "asset_type": "website", "location": "https://campokonecta.com", "group": "In scope" }, { "name": "*.millstreetdelivery.com", "asset_type": "website", "location": "https://millstreetdelivery.com", "group": "In scope" }, { "name": "*.arequipena.com.pe", "asset_type": "website", "location": "https://arequipena.com.pe", "group": "In scope" }, { "name": "*.allhumans.com.co", "asset_type": "website", "location": "https://allhumans.com.co", "group": "In scope" }, { "name": "*.shopbeergear.com", "asset_type": "website", "location": "https://shopbeergear.com", "group": "In scope" }, { "name": "*.aguazalva.co", "asset_type": "website", "location": "https://aguazalva.co", "group": "In scope" }, { "name": "*.barbarian.pe", "asset_type": "website", "location": "https://barbarian.pe", "group": "In scope" }, { "name": "*.balboaice.com", "asset_type": "website", "location": "https://balboaice.com", "group": "In scope" }, { "name": "*.aguasanmateo.com.pe", "asset_type": "website", "location": "https://aguasanmateo.com.pe", "group": "In scope" }, { "name": "*.fusiontitans.gg", "asset_type": "website", "location": "https://fusiontitans.gg", "group": "In scope" }, { "name": "*.lasvickys.mx", "asset_type": "website", "location": "https://lasvickys.mx", "group": "In scope" }, { "name": "*.fusionenergy.com.co", "asset_type": "website", "location": "https://fusionenergy.com.co", "group": "In scope" }, { "name": "*.prombck.com", "asset_type": "website", "location": "https://prombck.com", "group": "In scope" }, { "name": "*.911vital.com.do", "asset_type": "website", "location": "https://911vital.com.do", "group": "In scope" }, { "name": "*.andes.com.ar", "asset_type": "website", "location": "https://andes.com.ar", "group": "In scope" }, { "name": "*.andesorigen.com.ar", "asset_type": "website", "location": "https://andesorigen.com.ar", "group": "In scope" }, { "name": "*.tracking2nd.com.br", "asset_type": "website", "location": "https://tracking2nd.com.br", "group": "In scope" }, { "name": "*.pilsen.com.py", "asset_type": "website", "location": "https://pilsen.com.py", "group": "In scope" }, { "name": "*.promaxcloud.com.br", "asset_type": "website", "location": "https://promaxcloud.com.br", "group": "In scope" }, { "name": "*.bodegadanterobino.com", "asset_type": "website", "location": "https://bodegadanterobino.com", "group": "In scope" }, { "name": "*.bodegadanterobino.com.br", "asset_type": "website", "location": "https://bodegadanterobino.com.br", "group": "In scope" }, { "name": "*.wals.com.br", "asset_type": "website", "location": "https://wals.com.br", "group": "In scope" }, { "name": "*.hoegaarden.com.br", "asset_type": "website", "location": "https://hoegaarden.com.br", "group": "In scope" }, { "name": "*.trackandtrace.com.br", "asset_type": "website", "location": "https://trackandtrace.com.br", "group": "In scope" }, { "name": "*.pitstopoficial.com.br", "asset_type": "website", "location": "https://pitstopoficial.com.br", "group": "In scope" }, { "name": "*.pilsendelsur.com", "asset_type": "website", "location": "https://pilsendelsur.com", "group": "In scope" }, { "name": "*.eklos.com.ar", "asset_type": "website", "location": "https://eklos.com.ar", "group": "In scope" }, { "name": "*.videojuegocmq.com.ar", "asset_type": "website", "location": "https://videojuegocmq.com.ar", "group": "In scope" }, { "name": "*.valeporenvases.com.ar", "asset_type": "website", "location": "https://valeporenvases.com.ar", "group": "In scope" }, { "name": "*.sumasnativas.com", "asset_type": "website", "location": "https://sumasnativas.com", "group": "In scope" }, { "name": "*.sommvinhos.com.br", "asset_type": "website", "location": "https://sommvinhos.com.br", "group": "In scope" }, { "name": "*.promoqrcmq.com.ar", "asset_type": "website", "location": "https://promoqrcmq.com.ar", "group": "In scope" }, { "name": "*.leyendasdeorigen.cl", "asset_type": "website", "location": "https://leyendasdeorigen.cl", "group": "In scope" }, { "name": "*.cebadagauchada.com.ar", "asset_type": "website", "location": "https://cebadagauchada.com.ar", "group": "In scope" }, { "name": "*.becker.cl", "asset_type": "website", "location": "https://becker.cl", "group": "In scope" }, { "name": "*.canjeapromo.com.ar", "asset_type": "website", "location": "https://canjeapromo.com.ar", "group": "In scope" }, { "name": "*.canchita.com.py", "asset_type": "website", "location": "https://canchita.com.py", "group": "In scope" }, { "name": "*.tonicaantarctica.com.br", "asset_type": "website", "location": "https://tonicaantarctica.com.br", "group": "In scope" }, { "name": "*.cervejariacolorado.com.br", "asset_type": "website", "location": "https://cervejariacolorado.com.br", "group": "In scope" }, { "name": "*.antarctica.com.br", "asset_type": "website", "location": "https://antarctica.com.br", "group": "In scope" }, { "name": "*.roteirizador.app", "asset_type": "website", "location": "https://roteirizador.app", "group": "In scope" }, { "name": "*.huari.bo", "asset_type": "website", "location": "https://huari.bo", "group": "In scope" }, { "name": "*.gauchada-cmq.com.ar", "asset_type": "website", "location": "https://gauchada-cmq.com.ar", "group": "In scope" }, { "name": "*.iapp.com.br", "asset_type": "website", "location": "https://iapp.com.br", "group": "In scope" }, { "name": "*.ze.express", "asset_type": "website", "location": "https://ze.express", "group": "In scope" }, { "name": "*.zedelivery.in", "asset_type": "website", "location": "https://zedelivery.in", "group": "In scope" }, { "name": "canalcomplianceambev.aliant.com.br", "asset_type": "website", "location": "https://canalcomplianceambev.aliant.com.br", "group": "In scope" }, { "name": "*.bmix.cl", "asset_type": "website", "location": "https://bmix.cl", "group": "In scope" }, { "name": "*.ab-inbev.cn", "asset_type": "website", "location": "https://ab-inbev.cn", "group": "In scope" }, { "name": "*.menucervecero.com.mx", "asset_type": "website", "location": "https://menucervecero.com.mx", "group": "In scope" }, { "name": "*.pasioncerveceraboliviana.com", "asset_type": "website", "location": "https://pasioncerveceraboliviana.com", "group": "In scope" }, { "name": "*.bud66.com.py", "asset_type": "website", "location": "https://bud66.com.py", "group": "In scope" }, { "name": "*.ab-inbev.in", "asset_type": "website", "location": "https://ab-inbev.in", "group": "In scope" }, { "name": "*.ob.co.kr", "asset_type": "website", "location": "https://ob.co.kr", "group": "In scope" }, { "name": "*.obbeerevent.co.kr", "asset_type": "website", "location": "https://obbeerevent.co.kr", "group": "In scope" }, { "name": "*.obsmart.co.kr", "asset_type": "website", "location": "https://obsmart.co.kr", "group": "In scope" }, { "name": "*.kor-qms-console.co.kr", "asset_type": "website", "location": "https://kor-qms-console.co.kr", "group": "In scope" }, { "name": "*.hoegaarden.jp", "asset_type": "website", "location": "https://hoegaarden.jp", "group": "In scope" }, { "name": "*.gooseisland.jp", "asset_type": "website", "location": "https://gooseisland.jp", "group": "In scope" }, { "name": "*.cass.co.kr", "asset_type": "website", "location": "https://cass.co.kr", "group": "In scope" }, { "name": "*.budweiser.jp", "asset_type": "website", "location": "https://budweiser.jp", "group": "In scope" }, { "name": "*.gooseisland.kr", "asset_type": "website", "location": "https://gooseisland.kr", "group": "In scope" }, { "name": "*.harvestcider.co.nz", "asset_type": "website", "location": "https://harvestcider.co.nz", "group": "In scope" }, { "name": "*.stellaartois.co.kr", "asset_type": "website", "location": "https://stellaartois.co.kr", "group": "In scope" }, { "name": "*.corona.co.nz", "asset_type": "website", "location": "https://corona.co.nz", "group": "In scope" }, { "name": "*.obcpeople.com", "asset_type": "website", "location": "https://obcpeople.com", "group": "In scope" }, { "name": "*.oblager.kr", "asset_type": "website", "location": "https://oblager.kr", "group": "In scope" }, { "name": "*.beeremporium.cn", "asset_type": "website", "location": "https://beeremporium.cn", "group": "In scope" }, { "name": "*.filgoodofficial.com", "asset_type": "website", "location": "https://filgoodofficial.com", "group": "In scope" }, { "name": "*.corona-extra.jp", "asset_type": "website", "location": "https://corona-extra.jp", "group": "In scope" }, { "name": "*.puredraught.jp", "asset_type": "website", "location": "https://puredraught.jp", "group": "In scope" }, { "name": "*.ab-inbev-japan.com", "asset_type": "website", "location": "https://ab-inbev-japan.com", "group": "In scope" }, { "name": "*.wsmap.com", "asset_type": "website", "location": "https://wsmap.com", "group": "In scope" }, { "name": "*.obpocs.com", "asset_type": "website", "location": "https://obpocs.com", "group": "In scope" }, { "name": "*.nutrl.jp", "asset_type": "website", "location": "https://nutrl.jp", "group": "In scope" }, { "name": "*.redds.co.za", "asset_type": "website", "location": "https://redds.co.za", "group": "In scope" }, { "name": "*.castlemilkstout.co.za", "asset_type": "website", "location": "https://castlemilkstout.co.za", "group": "In scope" }, { "name": "*.castlelite.co.za", "asset_type": "website", "location": "https://castlelite.co.za", "group": "In scope" }, { "name": "*.castlelager.co.za", "asset_type": "website", "location": "https://castlelager.co.za", "group": "In scope" }, { "name": "*.carlingblacklabel.co.za", "asset_type": "website", "location": "https://carlingblacklabel.co.za", "group": "In scope" }, { "name": "*.budweiser.co.za", "asset_type": "website", "location": "https://budweiser.co.za", "group": "In scope" }, { "name": "*.brutalfruit.co.za", "asset_type": "website", "location": "https://brutalfruit.co.za", "group": "In scope" }, { "name": "*.africafives.com", "asset_type": "website", "location": "https://africafives.com", "group": "In scope" }, { "name": "*.stlouislager.co.bw", "asset_type": "website", "location": "https://stlouislager.co.bw", "group": "In scope" }, { "name": "*.stellaartoisafrica.com", "asset_type": "website", "location": "https://stellaartoisafrica.com", "group": "In scope" }, { "name": "*.sabfoundation.co.za", "asset_type": "website", "location": "https://sabfoundation.co.za", "group": "In scope" }, { "name": "*.nilespecial.co.ug", "asset_type": "website", "location": "https://nilespecial.co.ug", "group": "In scope" }, { "name": "*.nilebreweries.com", "asset_type": "website", "location": "https://nilebreweries.com", "group": "In scope" }, { "name": "*.flyingfishsa.co.za", "asset_type": "website", "location": "https://flyingfishsa.co.za", "group": "In scope" }, { "name": "*.coronaafrica.com", "asset_type": "website", "location": "https://coronaafrica.com", "group": "In scope" }, { "name": "*.clublager.com", "asset_type": "website", "location": "https://clublager.com", "group": "In scope" }, { "name": "*.club.co.ug", "asset_type": "website", "location": "https://club.co.ug", "group": "In scope" }, { "name": "*.castlecorner.co.za", "asset_type": "website", "location": "https://castlecorner.co.za", "group": "In scope" }, { "name": "*.noexcusesa.com", "asset_type": "website", "location": "https://noexcusesa.com", "group": "In scope" }, { "name": "*.cerveja2m.co.mz", "asset_type": "website", "location": "https://cerveja2m.co.mz", "group": "In scope" }, { "name": "*.accrabrewery.com.gh", "asset_type": "website", "location": "https://accrabrewery.com.gh", "group": "In scope" }, { "name": "*.lionlagersa.co.za", "asset_type": "website", "location": "https://lionlagersa.co.za", "group": "In scope" }, { "name": "*.tanzaniabreweries.co.tz", "asset_type": "website", "location": "https://tanzaniabreweries.co.tz", "group": "In scope" }, { "name": "*.flyingfishseltzer.co.za", "asset_type": "website", "location": "https://flyingfishseltzer.co.za", "group": "In scope" }, { "name": "*.carlingblacklabelcup.co.za", "asset_type": "website", "location": "https://carlingblacklabelcup.co.za", "group": "In scope" }, { "name": "*.thesuite.co.za", "asset_type": "website", "location": "https://thesuite.co.za", "group": "In scope" }, { "name": "*.castledoublemalt.co.za", "asset_type": "website", "location": "https://castledoublemalt.co.za", "group": "In scope" }, { "name": "*.flyingfishafrica.com", "asset_type": "website", "location": "https://flyingfishafrica.com", "group": "In scope" }, { "name": "*.brewitbetter.co.za", "asset_type": "website", "location": "https://brewitbetter.co.za", "group": "In scope" }, { "name": "*.sabconnect.co.za", "asset_type": "website", "location": "https://sabconnect.co.za", "group": "In scope" }, { "name": "*.carlingpredictor.com", "asset_type": "website", "location": "https://carlingpredictor.com", "group": "In scope" }, { "name": "*.blackcrown.africa", "asset_type": "website", "location": "https://blackcrown.africa", "group": "In scope" }, { "name": "*.abi-distributorcentral.com", "asset_type": "website", "location": "https://abi-distributorcentral.com", "group": "In scope" }, { "name": "*.budweiserfootballpredictor.com", "asset_type": "website", "location": "https://budweiserfootballpredictor.com", "group": "In scope" }, { "name": "*.coronashop.co.za", "asset_type": "website", "location": "https://coronashop.co.za", "group": "In scope" }, { "name": "*.carlingpredictor.co.zm", "asset_type": "website", "location": "https://carlingpredictor.co.zm", "group": "In scope" }, { "name": "*.beyondawards.co.za", "asset_type": "website", "location": "https://beyondawards.co.za", "group": "In scope" }, { "name": "*.abicreativescoring.com", "asset_type": "website", "location": "https://abicreativescoring.com", "group": "In scope" }, { "name": "*.castlelagerstore.co.za", "asset_type": "website", "location": "https://castlelagerstore.co.za", "group": "In scope" }, { "name": "*.contractscolab.com", "asset_type": "website", "location": "https://contractscolab.com", "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-cf8bf42e36610b0e.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-cfe72f3e5fc2c3ad", "name": "Absolute Software Vulnerability Disclosure Pro Engagement", "program_url": "https://bugcrowd.com/engagements/absolutesoftware-vdp-pro2", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:22Z", "scope_published_at": "2026-07-22T14:37:29.710Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/absolutesoftware-vdp-pro2/changelog/05bf79c8-a745-4071-8685-9425834d9ad2.json" ], "in_scope": [ { "name": "*.fr1.absolutegov.com", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.absolute.com", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.namequery.com", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.dnssearch.org", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "absolute.on.netmotioncloud.com", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.nmwco.com", "asset_type": "other", "location": null, "group": "In Scope " }, { "name": "*.netmotionwireless.com", "asset_type": "other", "location": null, "group": "In Scope " }, { "name": "*.netmotionsoftware.com", "asset_type": "other", "location": null, "group": "In Scope " }, { "name": "*.qanmw.com", "asset_type": "other", "location": null, "group": "In Scope " }, { "name": "*.absopd.com", "asset_type": "other", "location": null, "group": "In Scope " }, { "name": "*.localitycloud.com", "asset_type": "other", "location": null, "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-cfe72f3e5fc2c3ad.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-47f964ad0bd8b299", "name": "Adore Me Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/adoreme-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:04Z", "scope_published_at": "2025-10-07T11:50:34.097Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/adoreme-vdp/changelog/adabd0e6-d949-4c09-b121-e18ed3e6e19d.json" ], "in_scope": [ { "name": "*.adoreme.com", "asset_type": "website", "location": "https://www.adoreme.com/", "group": "In Scope Targets" }, { "name": "Adore Me iOS app", "asset_type": "ios", "location": "https://apps.apple.com/us/app/adore-me-designer-lingerie/id661053119", "group": "In Scope Targets" }, { "name": "Adore Me Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.adoreme.android&hl=en_IN&gl=US&pli=1", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-47f964ad0bd8b299.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-532b23e0d5d74ea2", "name": "Allstate Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/allstate-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:02Z", "scope_published_at": "2024-09-18T18:00:24.626Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/allstate-vdp-pro/changelog/84b7e0a4-cfd3-4718-a398-c61997c63283.json" ], "in_scope": [ { "name": "squaretrade.co.jp", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "Allstatedealerservices.com", "asset_type": "website", "location": "https://allstatedealerservices.com/", "group": "In Scope" }, { "name": "Answerfinancial.com", "asset_type": "website", "location": "https://www.answerfinancial.com/", "group": "In Scope" }, { "name": "Availcarsharing.com", "asset_type": "website", "location": "https://availcarsharing.com/", "group": "In Scope" }, { "name": "Squaretrade.com", "asset_type": "website", "location": "https://www.squaretrade.com/", "group": "In Scope" }, { "name": "Allstateindia.com", "asset_type": "website", "location": "https://www.allstateindia.com/", "group": "In Scope" }, { "name": "Allstateni.com", "asset_type": "website", "location": "https://www.allstateni.com/", "group": "In Scope" }, { "name": "Leadcloud.us", "asset_type": "website", "location": "https://www.leadcloud.us/", "group": "In Scope" }, { "name": "www.allstate.jobs", "asset_type": "website", "location": "https://www.allstate.jobs/", "group": "In Scope" }, { "name": "myallstateflood.com", "asset_type": "website", "location": "https://myallstateflood.com/", "group": "In Scope" }, { "name": "squaretrade.eu", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*allstate.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "Nationalgeneral.com", "asset_type": "website", "location": "https://nationalgeneral.com/", "group": "In Scope" }, { "name": "Allstateidentityprotection.com", "asset_type": "website", "location": "https://www.allstateidentityprotection.com/", "group": "In Scope" }, { "name": "esurance.com", "asset_type": "website", "location": "https://www.esurance.com/", "group": "In Scope" }, { "name": "Ivantageinsurance.ca", "asset_type": "website", "location": "https://www.ivantageinsurance.ca/", "group": "In Scope" }, { "name": "Arity.com", "asset_type": "website", "location": "https://arity.com/", "group": "In Scope" }, { "name": "Encompassinsurance.com", "asset_type": "website", "location": "https://www.encompassinsurance.com/", "group": "In Scope" }, { "name": "Allstateinvestments.com", "asset_type": "website", "location": "https://allstateinvestments.com/", "group": "In Scope" }, { "name": "https://www.allstate.ca/", "asset_type": "website", "location": "https://www.allstate.ca/", "group": "In Scope" }, { "name": "https://apps.allstate.ca/quickquote/common/landing.aspx#b", "asset_type": "website", "location": "https://apps.allstate.ca/quickquote/common/landing.aspx#b", "group": "In Scope" }, { "name": "https://apps.allstate.ca/chinese/", "asset_type": "website", "location": "https://apps.allstate.ca/chinese/", "group": "In Scope" }, { "name": "https://consumer.pafco.ca/paymybill/", "asset_type": "website", "location": "https://consumer.pafco.ca/paymybill/", "group": "In Scope" }, { "name": "https://consumer.pembridge.com/paymybill/", "asset_type": "website", "location": "https://consumer.pembridge.com/paymybill/", "group": "In Scope" }, { "name": "https://apps.allstate.ca/myallstate/login?lang=en", "asset_type": "website", "location": "https://apps.allstate.ca/myallstate/login?lang=en", "group": "In Scope" }, { "name": "http://allstate.smartsimple.biz/", "asset_type": "website", "location": "http://allstate.smartsimple.biz/", "group": "In Scope" }, { "name": "https://broker.pembridge.com/thePath", "asset_type": "website", "location": "https://broker.pembridge.com/thePath", "group": "In Scope" }, { "name": "http://www.pafco.ca/", "asset_type": "website", "location": "http://www.pafco.ca/", "group": "In Scope" }, { "name": "https://www.pembridge.com/", "asset_type": "website", "location": "https://www.pembridge.com/", "group": "In Scope" } ], "out_of_scope": [ { "name": "allstatefoundation.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "allstatefoundation.org", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-532b23e0d5d74ea2.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-8771185d1ea0d2e2", "name": "American Battle Monuments Commission", "program_url": "https://bugcrowd.com/engagements/abmc-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:27Z", "scope_published_at": "2022-03-04T21:30:32.265Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/abmc-vdp/changelog/42692f90-91be-4d64-9a8a-74482dc7a2d3.json" ], "in_scope": [ { "name": "https://abmc.gov", "asset_type": "website", "location": "https://abmc.gov", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-8771185d1ea0d2e2.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-5d2702b7c730d88b", "name": "Anecdotes Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/anecdotes-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:10Z", "scope_published_at": "2026-08-18T22:09:10.317Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/anecdotes-vdp-pro/changelog/f5f4d148-87e6-4ac2-8efb-517a36e18193.json" ], "in_scope": [ { "name": "Anecdotes Trust Center", "asset_type": "website", "location": "https://www.anecdotes.ai/trust-center/dashboard", "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-5d2702b7c730d88b.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-51c2f41345fbfb0f", "name": "ANZ Responsible Disclosure Program", "program_url": "https://bugcrowd.com/engagements/anz-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Banking", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:22Z", "scope_published_at": "2026-05-07T05:33:09.091Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/anz-vdp/changelog/13ed2c66-d910-42d7-a8ea-ec7d8d4145fc.json" ], "in_scope": [ { "name": "*.anz.com.au", "asset_type": "website", "location": "https://*.anz.com.au", "group": "In Scope" }, { "name": "*.anz.com", "asset_type": "website", "location": "https://*.anz.com", "group": "In Scope" }, { "name": "anz.co.nz", "asset_type": "website", "location": "https://www.anz.co.nz", "group": "In Scope" }, { "name": "onlinestore.anz.co.nz", "asset_type": "website", "location": "https://onlinestore.anz.co.nz", "group": "In Scope" }, { "name": "open.anz.co.nz", "asset_type": "api", "location": "https://open.anz.co.nz", "group": "In Scope" }, { "name": "ANZ Plus Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.anz.lotus&referrer=utm_source%3Downed%26utm_campaign%3Dall_sb_des_fy23q2_testing", "group": "In Scope" }, { "name": "ANZ Plus iOS App", "asset_type": "ios", "location": "https://apps.apple.com/au/app/anz-plus/id1495738612", "group": "In Scope" }, { "name": "ANZ Australia iOS App", "asset_type": "ios", "location": "https://apps.apple.com/au/app/anz-australia/id870929663", "group": "In Scope" }, { "name": "ANZ Australia Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.anz.android.gomoney&pcampaignid=web_share", "group": "In Scope" } ], "out_of_scope": [ { "name": "b2b-api.anz.co.nz", "asset_type": "api", "location": "https://b2b-api.anz.co.nz", "group": "Out of Scope" }, { "name": "digital.anz.co.nz", "asset_type": "website", "location": "https://digital.anz.co.nz", "group": "Out of Scope" }, { "name": "secure.anz.co.nz", "asset_type": "website", "location": "https://secure.anz.co.nz", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-51c2f41345fbfb0f.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-68f6a6e49f86ee2f", "name": "APRA Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/apra-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:16Z", "scope_published_at": "2026-08-27T05:41:08.401Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/apra-vdp-pro/changelog/e6f82086-eee0-4c4e-9f05-584c012e725f.json" ], "in_scope": [ { "name": "203.31.52.0/24", "asset_type": "network", "location": null, "group": "In Scope " }, { "name": "203.31.53.0/24", "asset_type": "network", "location": null, "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-68f6a6e49f86ee2f.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-1ee3d56124cf736f", "name": "Arlo Kudos Rewards", "program_url": "https://bugcrowd.com/engagements/arlokudos", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "no_published_assets", "scope_captured_at": "2026-10-03T16:45:48Z", "scope_published_at": "2018-05-08T17:49:18.678Z", "scope_group_count": 0, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://bugcrowd.com/engagements/arlokudos", "http_status": 200, "result": "empty_published_table", "note": "The official engagement page was available, but its public brief published zero scope groups and zero target rows. Policy prose may still define or limit scope; no asset row was inferred." }, "scope_source_urls": [ "https://bugcrowd.com/engagements/arlokudos/changelog/3d6114ec-05df-466f-a3c5-0e06a9bd942d.json" ], "in_scope": [], "out_of_scope": [], "policy_review_state": "directory_listing_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-1ee3d56124cf736f.md", "limitations": [ "Full program policy review remains outstanding.", "No public asset rows were captured; consult the live official program policy for any policy-defined scope.", "The official engagement page was available, but its public brief published zero scope groups and zero target rows. Policy prose may still define or limit scope; no asset row was inferred." ] }, { "id": "bugcrowd-652615b72f46a9d5", "name": "Arrow Electronics VDP", "program_url": "https://bugcrowd.com/engagements/arrow-electronics-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Electronics", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:42Z", "scope_published_at": "2026-04-02T14:25:44.250Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/arrow-electronics-vdp/changelog/52f1edb8-fb90-4c5a-aafc-686c4c783f4b.json" ], "in_scope": [ { "name": "*.xsp.arrow.com", "asset_type": "website", "location": "https://xsp.arrow.com/", "group": "Arrow Electronics Target Group" }, { "name": "*.arrow.cn", "asset_type": "website", "location": "https://*.arrow.cn", "group": "Arrow Electronics Target Group" }, { "name": "*.aspencore.com", "asset_type": "website", "location": "https://*.aspencore.com", "group": "Arrow Electronics Target Group" }, { "name": "*.transim.com", "asset_type": "website", "location": "https://www.transim.com/", "group": "Arrow Electronics Target Group" }, { "name": "*.richardsonrfpd.com", "asset_type": "website", "location": "https://www.richardsonrfpd.com/", "group": "Arrow Electronics Target Group" }, { "name": "*.einfochips.com", "asset_type": "website", "location": "https://einfochips.com/", "group": "Arrow Electronics Target Group" }, { "name": "*.siliconexpert.com", "asset_type": "website", "location": "https://siliconexpert.com/", "group": "Arrow Electronics Target Group" }, { "name": "*.aepetsche.com", "asset_type": "website", "location": "http://aepetsche.com/", "group": "Arrow Electronics Target Group" }, { "name": "*.elektroda.pl", "asset_type": "website", "location": "https://elektroda.pl/", "group": "Arrow Electronics Target Group" }, { "name": "*.eetimes.com", "asset_type": "website", "location": "https://eetimes.com/", "group": "Arrow Electronics Target Group" }, { "name": "*.verical.com", "asset_type": "website", "location": "https://verical.com/", "group": "Arrow Electronics Target Group" }, { "name": "*.powerandsignal.com", "asset_type": "website", "location": "https://powerandsignal.com/", "group": "Arrow Electronics Target Group" }, { "name": "*.arrow.com", "asset_type": "website", "location": "https://arrow.com/", "group": "Arrow Electronics Target Group" }, { "name": "*.immixgroup.com", "asset_type": "website", "location": "https://immixgroup.com/", "group": "Arrow Electronics Target Group" }, { "name": "*.niccomp.com", "asset_type": "website", "location": "https://niccomp.com", "group": "Arrow Electronics Target Group" }, { "name": "*.senecadata.com", "asset_type": "website", "location": "https://senecadata.com", "group": "Arrow Electronics Target Group" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-652615b72f46a9d5.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-adcf7bf752d545e1", "name": "Assa Abloy America's", "program_url": "https://bugcrowd.com/engagements/assaabloy-americas-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Corporate Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:18Z", "scope_published_at": "2026-02-19T19:22:30.583Z", "scope_group_count": 10, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/assaabloy-americas-vdp/changelog/6cdf115a-cd7d-4143-9fd0-c0e092fe6678.json" ], "in_scope": [ { "name": "*.eacconfig.assaabloy.com", "asset_type": "website", "location": "https://eacconfig.assaabloy.com", "group": "Accentra" }, { "name": "*.accentra.assaabloy.com", "asset_type": "website", "location": "https://accentra.assaabloy.com", "group": "Accentra" }, { "name": "*.yale.accentra.assaabloy.com", "asset_type": "website", "location": "https://yale.accentra.assaabloy.com", "group": "Accentra" }, { "name": "Yale Accentra iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/yale-accentra-access/id1523678122", "group": "Accentra" }, { "name": "Accentra Access Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.assaabloy.accentra.access", "group": "Accentra" }, { "name": "Yale Accentra Configuration Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.yale.multifamconftool", "group": "Accentra" }, { "name": "*.centrios.com", "asset_type": "website", "location": "https://centrios.com", "group": "Centrios" }, { "name": "Centrios iOS App", "asset_type": "ios", "location": "https://apps.apple.com/in/app/centrios/id6449100322", "group": "Centrios" }, { "name": "Centrios Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.assaabloy.centrios", "group": "Centrios" }, { "name": "*.idsecure.com.br", "asset_type": "website", "location": "https://idsecure.com.br", "group": "ControlID" }, { "name": "*.controlid.com.br", "asset_type": "website", "location": "https://controlid.com.br", "group": "ControlID" }, { "name": "ControlID iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/rhid/id1493410750", "group": "ControlID" }, { "name": "ControlID Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=br.com.controlid.rhid&hl=en&gl=US", "group": "ControlID" }, { "name": "*.kwiksetunite.com", "asset_type": "website", "location": "https://kwiksetunite.com", "group": "Kwikset / Halo" }, { "name": "*.goconcourse.com", "asset_type": "website", "location": "https://goconcourse.com", "group": "Kwikset / Halo" }, { "name": "Kwikset iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/kwikset/id1465996742?ls=1", "group": "Kwikset / Halo" }, { "name": "Kwikset Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.kwikset.blewifi", "group": "Kwikset / Halo" }, { "name": "*.level.com", "asset_type": "website", "location": "https://level.co", "group": "Level" }, { "name": "Level Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=co.level.app", "group": "Level" }, { "name": "Level iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/level-home/id1490027518", "group": "Level" }, { "name": "*.luxerone.com", "asset_type": "website", "location": "https://luxerone.com", "group": "LuxerOne" }, { "name": "LuxerOne iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/luxer-one/id1440094075", "group": "LuxerOne" }, { "name": "LuxerOne Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.luxerone.mobile.residentapp", "group": "LuxerOne" }, { "name": "*.roa.assaabloy.net", "asset_type": "website", "location": "https://roa.assaabloy.net", "group": "Medeco" }, { "name": "*.roa.medeco.com", "asset_type": "website", "location": "https://roa.medeco.com", "group": "Medeco" }, { "name": "*.bittings.medeco.com", "asset_type": "website", "location": "https://bittings.medeco.com", "group": "Medeco" }, { "name": "*.test-bittings.medeco.com", "asset_type": "website", "location": "https://test-bittings.medeco.com", "group": "Medeco" }, { "name": "*.test-keycontrol.medeco.com", "asset_type": "website", "location": "https://test-keycontrol.medeco.com", "group": "Medeco" }, { "name": "*.ca-roa.medeco.com", "asset_type": "website", "location": "https://ca-roa.medeco.com", "group": "Medeco" }, { "name": "*.test-roa.medeco.com", "asset_type": "website", "location": "https://test-roa.medeco.com", "group": "Medeco" }, { "name": "*.keycontrol.medeco.com", "asset_type": "website", "location": "https://keycontrol.medeco.com", "group": "Medeco" }, { "name": "*.knowledge.openingsstudio.com", "asset_type": "website", "location": "https://knowledge.openingsstudio.com", "group": "Openings Studio" }, { "name": "*.manage.openingsstudio.com", "asset_type": "website", "location": "https://manage.openingsstudio.com", "group": "Openings Studio" }, { "name": "*.yalelatinoamerica.com", "asset_type": "website", "location": "https://yalelatinoamerica.com", "group": "Yale (LATAM)" }, { "name": "*.yaleconnecthub.com", "asset_type": "website", "location": "https://yaleconnecthub.com", "group": "Yale Connect" }, { "name": "Yale Connect Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.assaabloy.yaleconnect", "group": "Yale Connect" }, { "name": "Yale Connect iOS App", "asset_type": "ios", "location": "https://apps.apple.com/cr/app/yale-connect/id1204336886", "group": "Yale Connect" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-adcf7bf752d545e1.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-a09d168334b66eff", "name": "Bath & Body Works Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/bbw-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:09Z", "scope_published_at": "2026-07-13T20:36:08.256Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bbw-vdp-pro/changelog/d35822f8-27fd-45fb-a809-dd938162c247.json" ], "in_scope": [ { "name": "bbwinc.com", "asset_type": "website", "location": "https://bbwinc.com", "group": "In Scope Targets" }, { "name": "Bath & Body Works US", "asset_type": "website", "location": "https://www.bathandbodyworks.com/", "group": "In Scope Targets" }, { "name": "Bath & Body Works Canada", "asset_type": "website", "location": "https://www.bathandbodyworks.ca/", "group": "In Scope Targets" }, { "name": "BBW US iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/bath-body-works-b-bw/id1256027729", "group": "In Scope Targets" }, { "name": "BBW US Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.bathandbody.bbw&hl=en_US", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-a09d168334b66eff.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-5a391402e5454bc8", "name": "Bed Bath and Beyond, Inc. | Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/overstockvdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "eCommerce", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:48Z", "scope_published_at": "2026-07-03T20:46:38.341Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/overstockvdp/changelog/1eb84c9b-169a-4ad9-b1d0-968300dd321d.json" ], "in_scope": [ { "name": "www.bedbathandbeyond.com", "asset_type": "website", "location": null, "group": "Bed Bath and Beyond" }, { "name": "*.bedbathandbeyond.com", "asset_type": "website", "location": "https://*.bedbathandbeyond.com", "group": "Bed Bath and Beyond" }, { "name": "http(s)://api.bedbathandbeyond.com", "asset_type": "api", "location": "https://api.bedbathandbeyond.com", "group": "Bed Bath and Beyond" }, { "name": "Bed Bath & Beyond Mobile App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.overstock&hl=en_US ", "group": "Bed Bath and Beyond" }, { "name": "Bed Bath & Beyond iOS Mobile App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/bed-bath-beyond/id339883869", "group": "Bed Bath and Beyond" }, { "name": "http(s)://edge.supplieroasis.com", "asset_type": "website", "location": "https://edge.supplieroasis.com", "group": "Bed Bath and Beyond" }, { "name": "*.supplieroasis.com", "asset_type": "website", "location": "https://*.supplieroasis.com", "group": "Bed Bath and Beyond" } ], "out_of_scope": [ { "name": "investors.overstock.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "help.overstock.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-5a391402e5454bc8.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-d3efba32a6353f0b", "name": "Belong Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/belong-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:37Z", "scope_published_at": "2025-10-09T22:33:22.641Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/belong-vdp-pro/changelog/64d8b852-10c6-48e4-bdf0-07e739366d30.json" ], "in_scope": [ { "name": "https://www.belong.com.au", "asset_type": "website", "location": "https://www.belong.com.au", "group": "In-Scope Targets" }, { "name": "Belong iOS App", "asset_type": "ios", "location": null, "group": "In-Scope Targets" }, { "name": "Belong Android App", "asset_type": "android", "location": null, "group": "In-Scope Targets" } ], "out_of_scope": [ { "name": "https://www.belong.blue", "asset_type": "website", "location": "https://www.belong.blue", "group": "Out of Scope Targets" }, { "name": "api.belong.blue", "asset_type": "api", "location": "https://api.belong.blue", "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-d3efba32a6353f0b.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-75595334e20289eb", "name": "Bendigo Bank Responsible Disclosure Program", "program_url": "https://bugcrowd.com/engagements/bendigobank-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Banking", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:31Z", "scope_published_at": "2026-09-17T04:27:18.324Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bendigobank-vdp/changelog/4ad9133f-71cb-49fe-af21-7281256de830.json" ], "in_scope": [ { "name": "*.bendigobank.com.au", "asset_type": "website", "location": null, "group": "Bendigo & Adelaide Bank" }, { "name": "*.adelaidebank.com.au", "asset_type": "website", "location": null, "group": "Bendigo & Adelaide Bank" }, { "name": "*.bendigoadelaide.com.au", "asset_type": "website", "location": null, "group": "Bendigo & Adelaide Bank" }, { "name": "*.bendigobank.net.au", "asset_type": "website", "location": null, "group": "Bendigo & Adelaide Bank" }, { "name": "*.benbank.com.au", "asset_type": "website", "location": null, "group": "Bendigo & Adelaide Bank" }, { "name": "Bendigo Bank - iOS App", "asset_type": "ios", "location": "https://apps.apple.com/au/app/bendigo-bank/id482844929?ign-mpt=uo%3D4", "group": "Bendigo & Adelaide Bank" }, { "name": "Bendigo Bank - Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.bendigobank.mobile", "group": "Bendigo & Adelaide Bank" }, { "name": "*.up.com.au", "asset_type": "website", "location": null, "group": "Up Bank" }, { "name": "*.upmoney.com.au", "asset_type": "website", "location": null, "group": "Up Bank" }, { "name": "*.updev.net", "asset_type": "website", "location": null, "group": "Up Bank" }, { "name": "Up - iOS App", "asset_type": "ios", "location": "https://apps.apple.com/au/app/up-easy-money/id1350717115", "group": "Up Bank" }, { "name": "Up - Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=au.com.up.money&hl=en-US", "group": "Up Bank" }, { "name": "*.cbnc.com.au", "asset_type": "website", "location": null, "group": "Additional Web Targets" }, { "name": "*.delphibank.com.au", "asset_type": "website", "location": null, "group": "Additional Web Targets" }, { "name": "*.ferocia.com.au", "asset_type": "website", "location": null, "group": "Additional Web Targets" }, { "name": "*.leveraged.com.au", "asset_type": "website", "location": null, "group": "Additional Web Targets" }, { "name": "*.leverageonline.com.au", "asset_type": "website", "location": null, "group": "Additional Web Targets" }, { "name": "*.marginlending.com.au", "asset_type": "website", "location": null, "group": "Additional Web Targets" }, { "name": "*.marginlending.com", "asset_type": "website", "location": null, "group": "Additional Web Targets" }, { "name": "*.profarmergrain.com.au", "asset_type": "website", "location": null, "group": "Additional Web Targets" }, { "name": "*.ruralfinance.com.au", "asset_type": "website", "location": null, "group": "Additional Web Targets" }, { "name": "*.sandhursttrustees.com.au", "asset_type": "website", "location": null, "group": "Additional Web Targets" }, { "name": "*.profarmer.com.au", "asset_type": "website", "location": null, "group": "Additional Web Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-75595334e20289eb.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-c8208ebdb3ec36a3", "name": "BitDiscovery", "program_url": "https://bugcrowd.com/engagements/bitdiscovery", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:46Z", "scope_published_at": "2021-07-12T20:17:51.153Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bitdiscovery/changelog/6f0287aa-9a15-41b6-865c-1161a0876d21.json" ], "in_scope": [ { "name": "███████████████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "██████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "████████████████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-c8208ebdb3ec36a3.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-112810daad054747", "name": "Blackbaud Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/blackbaud-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:43Z", "scope_published_at": "2025-12-11T17:22:35.859Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/blackbaud-vdp/changelog/cbd0ed85-67d6-40c9-8805-dfe11889abb0.json" ], "in_scope": [ { "name": "https://*.blackbaud.com/*", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "https://*.blackbaudhosting.com/*", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "https://*.justgiving.com/", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "https://*.blackbaud.net/*", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "https://*.blackbaudondemand.com/*", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "https://*.myschoolapp.com/*", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "https://*.mycampus-app.com/*", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "https://*.convio.net/*", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "https://*.convio.com/*", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "https://processingv2.yourcause.com/*", "asset_type": "website", "location": "https://processingv2.yourcause.com/", "group": "In scope targets" }, { "name": "https://bugcrowdninja.yourcauseuat.com/*", "asset_type": "website", "location": "https://bugcrowdninja.yourcauseuat.com/", "group": "In scope targets" }, { "name": "https://blackbaudgivingfund.org/*", "asset_type": "website", "location": "https://blackbaudgivingfund.org/", "group": "In scope targets" }, { "name": "https://www.yourcause.com/*", "asset_type": "website", "location": "https://www.yourcause.com/", "group": "In scope targets" } ], "out_of_scope": [ { "name": "http://community.blackbaud.com/", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://app.blackbaud.com/hostnet", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-112810daad054747.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-e3ce6906961d0763", "name": "BNZ Responsible Disclosure Program", "program_url": "https://bugcrowd.com/engagements/bnz", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Banking", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:42Z", "scope_published_at": "2024-07-27T02:05:27.707Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bnz/changelog/0adbe3f5-58a6-49ca-825c-402d3d836e5b.json" ], "in_scope": [ { "name": "www.bnz.co.nz", "asset_type": "website", "location": "https://www.bnz.co.nz", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-e3ce6906961d0763.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-a9f73492d6ef0af0", "name": "Bord Gais Energy VDP", "program_url": "https://bugcrowd.com/engagements/bordgaisenergy", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Oil & Gas", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:40Z", "scope_published_at": "2024-09-03T14:31:15.263Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bordgaisenergy/changelog/d22997a5-fdd1-4233-a072-be813b753f50.json" ], "in_scope": [ { "name": "bordgaisenergy.ie", "asset_type": "website", "location": "https://www.bordgaisenergy.ie/", "group": "In scope targets" }, { "name": "communications.bordgais.ie", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "whitegatepower.ie", "asset_type": "website", "location": "https://www.whitegatepower.ie", "group": "In scope targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-a9f73492d6ef0af0.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-1c6c7c25f57c6d83", "name": "Bupa Australia Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/bupa-aus-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Healthcare", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:16Z", "scope_published_at": "2026-04-29T02:45:36.711Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bupa-aus-vdp-pro/changelog/c7b5aff2-bce3-4353-8e86-1f86e3892e9c.json" ], "in_scope": [ { "name": "https://partnerlogin.bupa.com.au/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://my.bupa.com.au/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://account.bupa.com.au/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "Bupa - Google Play", "asset_type": "website", "location": "https://play.google.com/store/apps/details?id=au.com.bupa.blua&hl=en", "group": "In Scope " }, { "name": "Bupa - iOS", "asset_type": "website", "location": "https://apps.apple.com/au/app/blua/id1620073582", "group": "In Scope " }, { "name": "myBupa - Google Play", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=bupa.ProviderFinder", "group": "In Scope " }, { "name": "myBupa - iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/mybupa/id475542225", "group": "In Scope " }, { "name": "https://bupaagedcare.com.au/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://bupaoptical.bupa.com.au/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://bupadental.com.au/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://blua.bupa.com.au/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://bupa.com.au/*", "asset_type": "website", "location": null, "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-1c6c7c25f57c6d83.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-0f1026e5dd2b27d6", "name": "Bureau of Indian Affairs", "program_url": "https://bugcrowd.com/engagements/bia-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:14Z", "scope_published_at": "2022-09-21T22:09:38.010Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bia-vdp/changelog/485e341d-cfa8-47e8-9e83-d44898550e13.json" ], "in_scope": [ { "name": "*.bia.gov", "asset_type": "website", "location": null, "group": "In Scope Target" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-0f1026e5dd2b27d6.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-31814cfd557274cc", "name": "Bureau of Land Management", "program_url": "https://bugcrowd.com/engagements/blm-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:31Z", "scope_published_at": "2023-10-04T23:57:48.646Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/blm-vdp/changelog/5d2c5c12-b7af-4c00-af50-4942e9296ed3.json" ], "in_scope": [ { "name": "*.blm.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.nifc.gov", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-31814cfd557274cc.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-344191bfa8641401", "name": "Bureau of Reclamation", "program_url": "https://bugcrowd.com/engagements/usbr-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:29Z", "scope_published_at": "2024-04-22T23:52:41.119Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/usbr-vdp/changelog/6d1cc06c-cae9-4077-b5c1-23ee104d6650.json" ], "in_scope": [ { "name": "*.usbr.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "lcrmscp.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "mitigationcommission.gov", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-344191bfa8641401.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-070bd2d57ac040bf", "name": "Candid VDP Pro Engagement", "program_url": "https://bugcrowd.com/engagements/candid-vdppro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:08Z", "scope_published_at": "2026-09-22T18:00:00.689Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/candid-vdppro/changelog/5ffbe74f-77e2-4589-8a6b-edb4f05112d7.json" ], "in_scope": [ { "name": "https://candid.org", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://api.candid.org", "asset_type": "api", "location": null, "group": "In Scope " }, { "name": "https://app.candid.org", "asset_type": "website", "location": null, "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-070bd2d57ac040bf.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-f369ba0553b514fd", "name": "Cengage VDP", "program_url": "https://bugcrowd.com/engagements/cengage-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:41Z", "scope_published_at": "2026-05-07T19:06:30.145Z", "scope_group_count": 4, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/cengage-vdp/changelog/71785f08-674c-4aeb-9214-9f1e55e800a3.json" ], "in_scope": [ { "name": "https://*.cengage.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "https://*.cengagebrain.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "https://*.cengagework.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "https://*.ed2go.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "https://*.milady.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "https://*.gale.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "https://*.infosec-skills.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "https://*.infosec-iq.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "https://*.infosecinstitute.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "http://starship-emulator.cengage.com/", "asset_type": "website", "location": "http://starship-emulator.cengage.com/", "group": "In Scope Targets" }, { "name": "https://a2s.cengage.com/", "asset_type": "website", "location": "https://a2s.cengage.com/", "group": "In Scope Targets" }, { "name": "https://websuite.visiblebody.com", "asset_type": "website", "location": "https://websuite.visiblebody.com", "group": "In Scope Targets" }, { "name": "https://www.visiblebody.com", "asset_type": "website", "location": "https://www.visiblebody.com", "group": "In Scope Targets" }, { "name": "https://www.pmguidedreading.com", "asset_type": "website", "location": "https://www.pmguidedreading.com", "group": "Australia In Scope Targets" }, { "name": "https://*.cengage.com.au", "asset_type": "website", "location": null, "group": "Australia In Scope Targets" }, { "name": "https://*.cengage.co.nz", "asset_type": "website", "location": null, "group": "Australia In Scope Targets" }, { "name": "https://gotit.net.au/dosage-calculations", "asset_type": "website", "location": "https://gotit.net.au/dosage-calculations", "group": "Australia In Scope Targets" }, { "name": "https://*.nelsonnet.com.au", "asset_type": "website", "location": null, "group": "Australia In Scope Targets" }, { "name": "https://*.pmecollection.com.au", "asset_type": "website", "location": null, "group": "Australia In Scope Targets" }, { "name": "https://*.iqcentral.cengage.com.au", "asset_type": "website", "location": null, "group": "Australia In Scope Targets" }, { "name": "https://pmolcards.com", "asset_type": "website", "location": "https://pmolcards.com", "group": "Australia In Scope Targets" }, { "name": "https://nldcomprehension.com", "asset_type": "website", "location": "https://*.nldcomprehension.com", "group": "Australia In Scope Targets" }, { "name": "https://*.nelsonhub.cengagelearning.com.au", "asset_type": "website", "location": null, "group": "Australia In Scope Targets" }, { "name": "https://*.cengagelearning.com.au", "asset_type": "website", "location": null, "group": "Australia In Scope Targets" }, { "name": "https://*.cengageasia.com", "asset_type": "website", "location": null, "group": "Cengage Asia - In Scope Targets" }, { "name": "https://www.asianglshop.com", "asset_type": "website", "location": "https://www.asianglshop.com", "group": "Cengage Asia - In Scope Targets" }, { "name": "https://www.cengageasiaestore.com", "asset_type": "website", "location": "https://www.cengageasiaestore.com", "group": "Cengage Asia - In Scope Targets" }, { "name": "https://*.cengageresource.com", "asset_type": "website", "location": null, "group": "Cengage Asia - In Scope Targets" } ], "out_of_scope": [ { "name": "https://www.gale.com/public/small-library-support-program/form", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://www.gale.com/primary-sources/digital-humanities-webinar", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://www.gale.com/primary-sources/need-to-know/trial-request", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://www.gale.com/databases/gale-analytics", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://www.cengagework.com/about_us/#contact", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-f369ba0553b514fd.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-af9e1984c38f5f93", "name": "Centers for Medicare & Medicaid Services (CMS) - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/cms-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:48Z", "scope_published_at": "2026-08-17T20:39:26.943Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/cms-vdp/changelog/6bd0166c-58d6-4170-923b-d7eedc947982.json" ], "in_scope": [ { "name": "https://csscoperations.com/", "asset_type": "website", "location": "https://csscoperations.com/", "group": "In Scope " }, { "name": "https://www.cms.gov/", "asset_type": "website", "location": "https://www.cms.gov/", "group": "In Scope " }, { "name": "https://www.insurekidsnow.gov/", "asset_type": "website", "location": "https://www.insurekidsnow.gov/", "group": "In Scope " }, { "name": "https://www.medicaid.gov/", "asset_type": "website", "location": "https://www.medicaid.gov/", "group": "In Scope " }, { "name": "https://www.medicare.gov/", "asset_type": "website", "location": "https://www.medicare.gov/", "group": "In Scope " }, { "name": "https://mymedicare.gov/", "asset_type": "website", "location": "https://mymedicare.gov/", "group": "In Scope " }, { "name": "https://qualitynet.cms.gov/", "asset_type": "website", "location": "https://qualitynet.cms.gov/", "group": "In Scope " } ], "out_of_scope": [ { "name": "https://portal.cms.gov/", "asset_type": "website", "location": "https://portal.cms.gov/", "group": "Out of Scope targets" }, { "name": "https://www.healthcare.gov/", "asset_type": "website", "location": "https://www.healthcare.gov/", "group": "Out of Scope targets" }, { "name": "https://www.cuidadodesalud.gov/es/", "asset_type": "website", "location": "https://www.cuidadodesalud.gov/es/", "group": "Out of Scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-af9e1984c38f5f93.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-d8b5d00b8363e318", "name": "Chemist Warehouse Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/chemistwarehouse-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:30Z", "scope_published_at": "2026-04-06T06:40:56.480Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/chemistwarehouse-vdp-pro/changelog/53291dfd-8e6f-47b3-8fb6-9ac48fd1b8f1.json" ], "in_scope": [ { "name": "www.chemistwarehouse.com.au/", "asset_type": "website", "location": "https://chemistwarehouse.com.au", "group": "In Scope" }, { "name": "api.chemistwarehouse.com.au", "asset_type": "api", "location": "https://api.chemistwarehouse.com.au", "group": "In Scope" }, { "name": "Chemist Warehouse Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=au.com.cwretailservices.cwapp&hl=en_AU", "group": "In Scope" }, { "name": "Chemist Warehouse iOS App", "asset_type": "ios", "location": "https://apps.apple.com/au/app/the-chemist-warehouse-app/id1072026483", "group": "In Scope" }, { "name": "www.epharmacy.com.au", "asset_type": "website", "location": "https://www.epharmacy.com.au", "group": "In Scope" }, { "name": "ecentral.sigmahealthcare.com.au", "asset_type": "website", "location": "https://ecentral.sigmahealthcare.com.au", "group": "In Scope" }, { "name": "gpreach.net.au", "asset_type": "website", "location": "https://gpreach.net.au", "group": "In Scope" }, { "name": "newsamplesplus.com.au", "asset_type": "website", "location": "https://*.newsamplesplus.com.au", "group": "In Scope" }, { "name": "samplesplus.com.au", "asset_type": "website", "location": "https://samplesplus.com.au", "group": "In Scope" }, { "name": "proxi-mate.com.au", "asset_type": "website", "location": "https://proxi-mate.com.au", "group": "In Scope" }, { "name": "proximate.net.au", "asset_type": "website", "location": "https://proximate.net.au", "group": "In Scope" }, { "name": "adf.sigmahealthcare.com.au", "asset_type": "website", "location": "https://adf.sigmahealthcare.com.au", "group": "In Scope" }, { "name": "www.mpsconnect.com.au", "asset_type": "website", "location": "https://www.mpsconnect.com.au", "group": "In Scope" }, { "name": "www.wagnerhealth.com.au/", "asset_type": "website", "location": "https://www.wagnerhealth.com.au/", "group": "In Scope" }, { "name": "rsvp.chemistwarehouse.com.au", "asset_type": "website", "location": "https://rsvp.chemistwarehouse.com.au/", "group": "In Scope" }, { "name": "www.mybeautyspot.com.au", "asset_type": "website", "location": "https://www.mybeautyspot.com.au", "group": "In Scope" } ], "out_of_scope": [ { "name": "*.chemistwarehouse.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-d8b5d00b8363e318.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-e5ca717cf2893bc3", "name": "CIBC VDP", "program_url": "https://bugcrowd.com/engagements/cibc-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Banking", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:19Z", "scope_published_at": "2023-03-14T18:43:02.620Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/cibc-vdp/changelog/0c899c30-200f-4bad-88fb-bfd8ba404618.json" ], "in_scope": [ { "name": "CIBC FirstCaribbean International Bank (FCIB)", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "CIBC Bank USA", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "CIBC Mellon", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "Simplii Financial", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "CIBC", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "Anything not explicitly listed as In Scope", "asset_type": "website", "location": null, "group": "Out of Scope " } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-e5ca717cf2893bc3.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-5705f22cee6d598b", "name": "Cisco AppDynamics Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/appdynamics-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:00Z", "scope_published_at": "2025-03-07T21:27:49.087Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/appdynamics-vdp/changelog/fd8dd0ac-827c-4a39-9ccc-d62c3e7ca130.json" ], "in_scope": [ { "name": "*.appdynamics.com", "asset_type": "website", "location": "https://www.appdynamics.com/", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "*.saas.appdynamics.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.corp.appdynamics.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "community.appdynamics.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "community.splunk.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-5705f22cee6d598b.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-68affce778843956", "name": "Cisco Customer and Partner Experience Cloud", "program_url": "https://bugcrowd.com/engagements/cisco-cpx-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:53Z", "scope_published_at": "2024-03-26T16:37:26.166Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/cisco-cpx-vdp/changelog/a54d5b2e-0bf0-424f-8fcc-29330df332c2.json" ], "in_scope": [ { "name": "CX Cloud", "asset_type": "website", "location": "https://cx.cisco.com/", "group": "In Scope Targets" }, { "name": "PX Cloud", "asset_type": "website", "location": "https://pxcloud.cisco.com/ ", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-68affce778843956.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-a27b3354138d2f05", "name": "Cisco Meraki Responsible Disclosure", "program_url": "https://bugcrowd.com/engagements/cisco-meraki-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Hardware", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:45Z", "scope_published_at": "2024-10-09T12:00:00.403Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/cisco-meraki-vdp-pro/changelog/0e9cb4b5-1385-4ff8-9e29-18611bdf6d58.json" ], "in_scope": [ { "name": "Meraki Owned Web Domains and Products", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "Meraki Owned Cloud Services", "asset_type": "other", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-a27b3354138d2f05.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-78d1fe8fa4d18fe9", "name": "Cisco Responsible Disclosure", "program_url": "https://bugcrowd.com/engagements/ciscosecurity", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Technology", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:51Z", "scope_published_at": "2026-08-31T20:04:36.500Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ciscosecurity/changelog/5f331489-6faa-4327-8e5c-326280dd1032.json" ], "in_scope": [ { "name": "█████████████████████████████████████████", "asset_type": "other", "location": null, "group": "████████" } ], "out_of_scope": [ { "name": "██████████████", "asset_type": "other", "location": null, "group": "████████████" }, { "name": "████████████", "asset_type": "other", "location": null, "group": "████████████" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-78d1fe8fa4d18fe9.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-42e6a84359dc0556", "name": "Cisco ThousandEyes Vulnerability Disclosure Program (VDP)", "program_url": "https://bugcrowd.com/engagements/thousandeyes-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:50Z", "scope_published_at": "2024-11-18T21:32:47.180Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/thousandeyes-vdp/changelog/0ec956e3-5e7d-4f54-9369-1991ba69bfb5.json" ], "in_scope": [ { "name": "https://app.thousandeyes.com/", "asset_type": "website", "location": "https://app.thousandeyes.com/", "group": "ThousandEyes Enterprise Agent" }, { "name": "https://www.thousandeyes.com/", "asset_type": "website", "location": "https://www.thousandeyes.com/", "group": "ThousandEyes Enterprise Agent" }, { "name": "https://api.thousandeyes.com/", "asset_type": "api", "location": null, "group": "ThousandEyes Enterprise Agent" }, { "name": "ThousandEyes Enterprise Agent", "asset_type": "other", "location": null, "group": "ThousandEyes Enterprise Agent" }, { "name": "ThousandEyes Endpoint Agent", "asset_type": "other", "location": null, "group": "ThousandEyes Enterprise Agent" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-42e6a84359dc0556.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-4b30e6365f6ad86f", "name": "Citi's Responsible Disclosure Program", "program_url": "https://bugcrowd.com/engagements/citi", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:45Z", "scope_published_at": "2026-09-15T22:01:15.348Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/citi/changelog/975d97fd-8795-42ca-8d4d-ea588b94027a.json" ], "in_scope": [ { "name": "Any Citigroup owned asset", "asset_type": "website", "location": null, "group": "In-Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-4b30e6365f6ad86f.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-364dac5184d92780", "name": "Coles Group Limited Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/coles-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:02Z", "scope_published_at": "2026-06-23T11:32:46.333Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 1, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/coles-vdp-pro/changelog/51e897d2-43f4-4c73-b356-cea9059a09b3.json" ], "in_scope": [ { "name": "████████████████████████", "asset_type": "website", "location": null, "group": "█████████" }, { "name": "██████████████████████████████", "asset_type": "website", "location": null, "group": "█████████" }, { "name": "██████████████████████████████████", "asset_type": "website", "location": null, "group": "█████████" }, { "name": "█████████████████████████████████████", "asset_type": "website", "location": null, "group": "█████████" }, { "name": "████████████████████████████████████████", "asset_type": "website", "location": null, "group": "█████████" }, { "name": "███████████████████████████████████████████", "asset_type": "website", "location": null, "group": "█████████" }, { "name": "██████████████████████████████████████████", "asset_type": "website", "location": null, "group": "█████████" }, { "name": "██████████████████████████████████████", "asset_type": "api", "location": null, "group": "█████████" }, { "name": "███████████████████████████████████████████████████", "asset_type": "api", "location": null, "group": "█████████" }, { "name": "█████████████████████████████████████████████████████████████████████", "asset_type": "api", "location": null, "group": "█████████" }, { "name": "█████████████████████████████████████████████████", "asset_type": "api", "location": null, "group": "█████████" }, { "name": "████████████████████████████████████", "asset_type": "website", "location": null, "group": "█████████" } ], "out_of_scope": [ { "name": "████████", "asset_type": "other", "location": null, "group": "█████████████" }, { "name": "██████████████████████████████", "asset_type": "website", "location": null, "group": "█████████████" }, { "name": "█████████████████████████████████", "asset_type": "website", "location": null, "group": "█████████████" }, { "name": "███████████████████████████████████", "asset_type": "website", "location": null, "group": "█████████████" }, { "name": "██████████████████████████████████", "asset_type": "website", "location": null, "group": "█████████████" }, { "name": "███████████████████████████", "asset_type": "website", "location": null, "group": "█████████████" }, { "name": "█████████████████████", "asset_type": "ios", "location": null, "group": "█████████████" }, { "name": "█████████████████████████", "asset_type": "android", "location": null, "group": "█████████████" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-364dac5184d92780.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review.", "1 repeated rows in the published table were collapsed in this catalog." ] }, { "id": "bugcrowd-2eb33abfb0688da6", "name": "Connecteam Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/connecteam-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:11Z", "scope_published_at": "2026-08-18T22:06:46.884Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/connecteam-vdp-pro/changelog/a2f91c15-8569-458d-9ee3-67171719fffb.json" ], "in_scope": [ { "name": "Main Web Application", "asset_type": "website", "location": "https://app.connecteam.com", "group": "In Scope " }, { "name": "Main Web Application (AU)", "asset_type": "website", "location": "https://app-au.connecteam.com", "group": "In Scope " }, { "name": "https://app-us-east.connecteam.com", "asset_type": "website", "location": "https://app-us-east.connecteam.com", "group": "In Scope " }, { "name": "Core API (US)", "asset_type": "api", "location": "https://api.connecteam.com", "group": "In Scope " }, { "name": "Core API (AU)", "asset_type": "api", "location": "https://api-au.connecteam.com", "group": "In Scope " }, { "name": "Authentication", "asset_type": "website", "location": "https://auth.connecteam.com", "group": "In Scope " }, { "name": "Developer - External API", "asset_type": "api", "location": "https://developer.connecteam.com", "group": "In Scope " }, { "name": "Mobile OTA Updates", "asset_type": "website", "location": "https://codepush.connecteam.com", "group": "In Scope " }, { "name": "Connecteam iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/connecteam-team-management-app/id1121613912", "group": "In Scope " }, { "name": "Connecteam Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.connecteamco.Connecteam.app&hl=en&gl=US&pli=1", "group": "In Scope " }, { "name": "*.connecteam.com", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.prod.connecteam.com", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.dev.connecteam.com", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.test.connecteam.com", "asset_type": "website", "location": null, "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-2eb33abfb0688da6.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-fbf9bb6ecda2a16a", "name": "Consumer Financial Protection Bureau - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/cfpb-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:42Z", "scope_published_at": "2024-12-12T19:46:56.285Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/cfpb-vdp/changelog/85f70ea0-6589-4f95-96f9-aa8bfe7560a8.json" ], "in_scope": [ { "name": "https://es.consumerfinance.gov/", "asset_type": "website", "location": "https://es.consumerfinance.gov/", "group": "In Scope" }, { "name": "https://webservices.cfpb.gov/", "asset_type": "website", "location": "https://webservices.cfpb.gov/", "group": "In Scope" }, { "name": "https://remote.cfpb.gov/", "asset_type": "website", "location": "https://remote.cfpb.gov/", "group": "In Scope" }, { "name": "https://api.cfpb.gov/", "asset_type": "website", "location": "https://api.cfpb.gov/", "group": "In Scope" }, { "name": "https://info.consumerfinance.gov/", "asset_type": "website", "location": "https://info.consumerfinance.gov/", "group": "In Scope" }, { "name": "https://autodiscover.cfpb.gov/", "asset_type": "website", "location": "https://autodiscover.cfpb.gov/", "group": "In Scope" }, { "name": "https://owa.cfpb.gov/", "asset_type": "website", "location": "https://owa.cfpb.gov/", "group": "In Scope" }, { "name": "https://mobile.cfpb.gov/", "asset_type": "website", "location": "https://mobile.cfpb.gov/", "group": "In Scope" }, { "name": "https://work.cfpb.gov/", "asset_type": "website", "location": "https://work.cfpb.gov/", "group": "In Scope" }, { "name": "https://ffiec.cfpb.gov/", "asset_type": "website", "location": "https://ffiec.cfpb.gov/", "group": "In Scope" }, { "name": "https://api.consumerfinance.gov/", "asset_type": "api", "location": "https://api.consumerfinance.gov/", "group": "In Scope" }, { "name": "https://inclusivity.consumerfinance.gov/", "asset_type": "website", "location": "https://inclusivity.consumerfinance.gov/", "group": "In Scope" }, { "name": "https://surveys.consumerfinance.gov/", "asset_type": "website", "location": "https://surveys.consumerfinance.gov/", "group": "In Scope" }, { "name": "https://story.consumerfinance.gov/", "asset_type": "website", "location": "https://story.consumerfinance.gov/", "group": "In Scope" }, { "name": "https://extranet.cfpb.gov/", "asset_type": "website", "location": "https://extranet.cfpb.gov/", "group": "In Scope" }, { "name": "https://complaint.consumerfinance.gov/", "asset_type": "website", "location": "https://complaint.consumerfinance.gov/", "group": "In Scope" }, { "name": "https://files.consumerfinance.gov/", "asset_type": "website", "location": "https://files.consumerfinance.gov/", "group": "In Scope" }, { "name": "https://www.mimm.gov/", "asset_type": "website", "location": "https://www.mimm.gov/", "group": "In Scope" }, { "name": "https://beta.cfpb.gov/", "asset_type": "website", "location": "https://beta.cfpb.gov/", "group": "In Scope" }, { "name": "https://beta.consumerfinance.gov/", "asset_type": "website", "location": "https://beta.consumerfinance.gov/", "group": "In Scope" }, { "name": "https://search.consumerfinance.gov/", "asset_type": "website", "location": "https://search.consumerfinance.gov/", "group": "In Scope" }, { "name": "http://data.consumerfinance.gov/", "asset_type": "website", "location": "http://data.consumerfinance.gov/", "group": "In Scope" }, { "name": "https://exam.consumerfinance.gov/", "asset_type": "website", "location": "https://exam.consumerfinance.gov/", "group": "In Scope" }, { "name": "https://www.consumerfinancialprotectionbureau.gov/", "asset_type": "website", "location": "https://www.consumerfinancialprotectionbureau.gov/", "group": "In Scope" }, { "name": "https://www.consumerfinance.gov/", "asset_type": "website", "location": "https://www.consumerfinance.gov/", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-fbf9bb6ecda2a16a.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-74b105b955894436", "name": "Consumer Product Safety Commission (CPSC) Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/cpsc-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:25Z", "scope_published_at": "2026-04-16T13:56:47.785Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/cpsc-vdp/changelog/4bb85999-8837-44b0-9300-157e1262bc08.json" ], "in_scope": [ { "name": "www.anchorit.gov", "asset_type": "website", "location": "http://www.anchorit.gov/", "group": "In Scope Targets" }, { "name": "www.cpsc.gov", "asset_type": "website", "location": "https://www.cpsc.gov/", "group": "In Scope Targets" }, { "name": "www.cpsc.gov/cgibin/labregentry/", "asset_type": "website", "location": "https://www.cpsc.gov/cgibin/labregentry/", "group": "In Scope Targets" }, { "name": "https://www.cpsc.gov/cgi-bin/LabSearch/", "asset_type": "website", "location": "https://www.cpsc.gov/cgi-bin/LabSearch/", "group": "In Scope Targets" }, { "name": "https://www.cpsc.gov/cgibin/LighterStart/", "asset_type": "website", "location": "https://www.cpsc.gov/cgibin/LighterStart/", "group": "In Scope Targets" }, { "name": "https://www.cpsc.gov/cgibin/NeissQuery/", "asset_type": "website", "location": "https://www.cpsc.gov/cgibin/NeissQuery/", "group": "In Scope Targets" }, { "name": "https://www.cpsc.gov/shipmenttracking/", "asset_type": "website", "location": "https://www.cpsc.gov/shipmenttracking/", "group": "In Scope Targets" }, { "name": "www.poolsafely.gov", "asset_type": "website", "location": "http://www.poolsafety.gov/", "group": "In Scope Targets" }, { "name": "www.recalls.gov", "asset_type": "website", "location": "http://www.recalls.gov/", "group": "In Scope Targets" }, { "name": "www.saferproducts.gov", "asset_type": "website", "location": "http://www.saferproducts.gov/", "group": "In Scope Targets" }, { "name": "https://apps.saferproducts.gov/", "asset_type": "website", "location": "https://apps.saferproducts.gov/", "group": "In Scope Targets" }, { "name": "apps.saferproducts.gov/cgi-bin/dotnetapps/StateContractor/", "asset_type": "website", "location": "https://apps.saferproducts.gov/cgi-bin/dotnetapps/StateContractor/", "group": "In Scope Targets" }, { "name": "https://efiling.saferproducts.gov/efiling", "asset_type": "website", "location": "https://efiling.saferproducts.gov/efiling", "group": "In Scope Targets" }, { "name": "https://foiapal.cpsc.gov/", "asset_type": "website", "location": "https://foiapal.cpsc.gov/", "group": "In Scope Targets" }, { "name": "https://leadership.cpsc.gov/", "asset_type": "website", "location": "https://leadership.cpsc.gov/", "group": "In Scope Targets" }, { "name": "m-recalls.cpsc.gov", "asset_type": "website", "location": "https://m-recalls.cpsc.gov/", "group": "In Scope Targets" }, { "name": "https://onsafety.cpsc.gov/", "asset_type": "website", "location": "https://onsafety.cpsc.gov/", "group": "In Scope Targets" }, { "name": "https://saferproducts.gov/efiling", "asset_type": "website", "location": "https://saferproducts.gov/efiling", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-74b105b955894436.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-801fed70d571ca5b", "name": "CoStar Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/costar-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Real Estate", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:15Z", "scope_published_at": "2026-07-13T15:34:42.622Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/costar-vdp-pro/changelog/b9f52550-a5a5-41d6-979e-89a663bd9ce7.json" ], "in_scope": [ { "name": "Apartments.com", "asset_type": "website", "location": "https://www.apartments.com", "group": "In Scope" }, { "name": "Apartments.com Authentication", "asset_type": "website", "location": "https://auth.apartments.com/ ", "group": "In Scope" }, { "name": "Apartments.com Payment Service", "asset_type": "website", "location": "https://account.apartments.com/ ", "group": "In Scope" }, { "name": "Loopnet", "asset_type": "website", "location": "https://www.loopnet.com/ ", "group": "In Scope" }, { "name": "Loopnet Authentication", "asset_type": "website", "location": "https://auth.loopnet.com/ ", "group": "In Scope" }, { "name": "Loopnet Payment Services", "asset_type": "website", "location": "https://account.loopnet.com", "group": "In Scope" }, { "name": "CoStar Suite Payment Services", "asset_type": "website", "location": "https://accout.costar.com", "group": "In Scope" }, { "name": "After 55", "asset_type": "website", "location": "https://www.after55.com", "group": "In Scope" }, { "name": "Apartment Finder", "asset_type": "website", "location": "https://www.apartmentfinder.com", "group": "In Scope" }, { "name": "Apartment Homeliving", "asset_type": "website", "location": "https://www.apartmenthomeliving.com", "group": "In Scope" }, { "name": "Corporate Housing", "asset_type": "website", "location": "https://www.corporatehousing.com/", "group": "In Scope" }, { "name": "Apartments ECOM", "asset_type": "website", "location": "https://ecom.apartments.com", "group": "In Scope" }, { "name": "Apartments Leasing", "asset_type": "website", "location": "https://leasing.apartments.com/", "group": "In Scope" }, { "name": "Apartments Admin", "asset_type": "website", "location": "https://networkadmin.prd.apartments.com/", "group": "In Scope" }, { "name": "Westside Rentals", "asset_type": "website", "location": "https://www.westsiderentals.com/", "group": "In Scope" }, { "name": "Listing Manager", "asset_type": "website", "location": "https://listingmanager.costar.com/", "group": "In Scope" }, { "name": "Matterport", "asset_type": "website", "location": "https://dev-app.matterport.com/", "group": "In Scope" }, { "name": "Attachment Handler", "asset_type": "website", "location": "https://attachments-handler-us-east-1.prd.attachments.aws.dshrp.com/", "group": "In Scope" }, { "name": "BizBuySell API", "asset_type": "website", "location": "https://api.prd.bizbuysell.com/", "group": "In Scope" }, { "name": "BizBuySell", "asset_type": "website", "location": "https://www.bizbuysell.com/", "group": "In Scope" }, { "name": "BizQuest", "asset_type": "website", "location": "https://www.bizquest.com/", "group": "In Scope" }, { "name": "Bureaux Locaux", "asset_type": "website", "location": "https://www.bureauxlocaux.com/", "group": "In Scope" }, { "name": "Business Immo", "asset_type": "website", "location": "https://www.businessimmo.com/", "group": "In Scope" }, { "name": "Central Auth", "asset_type": "website", "location": "https://secure.costargroup.com/", "group": "In Scope" }, { "name": "Power Broker", "asset_type": "website", "location": "https://www.costarpowerbrokers.com/", "group": "In Scope" }, { "name": "CoStar Real Estate Manager", "asset_type": "website", "location": "https://*.costarremanager.com/", "group": "In Scope" }, { "name": "CoStar Suite", "asset_type": "website", "location": "https://product.costar.com/lender/", "group": "In Scope" }, { "name": "CoStar APIs", "asset_type": "website", "location": "https://data-us-east-1.prd.dataservices.aws.dshrp.com/", "group": "In Scope" }, { "name": "Field Research", "asset_type": "website", "location": "https://fieldresearch-bff.costargroup.com/", "group": "In Scope" }, { "name": "Find A Franchise", "asset_type": "website", "location": "https://www.findafranchise.com/", "group": "In Scope" }, { "name": "For Rent Messaging", "asset_type": "website", "location": "https://messaging.forrent.com/", "group": "In Scope" }, { "name": "For Rent", "asset_type": "website", "location": "https://www.forrent.com/", "group": "In Scope" }, { "name": "For Rent University", "asset_type": "website", "location": "https://www.forrentuniversity.com/", "group": "In Scope" }, { "name": "City Snap", "asset_type": "website", "location": "https://www.citysnap.com/", "group": "In Scope" }, { "name": "Homes", "asset_type": "website", "location": "https://www.homes.com/", "group": "In Scope" }, { "name": "Homes Admin", "asset_type": "website", "location": "https://networkadmin.homes.com/", "group": "In Scope" }, { "name": "AcreValue", "asset_type": "website", "location": "https://www.acrevalue.com/", "group": "In Scope" }, { "name": "Lands", "asset_type": "website", "location": "https://www.land.com/", "group": "In Scope" }, { "name": "Lands API", "asset_type": "website", "location": "https://api.land.com/", "group": "In Scope" }, { "name": "Land and Farm", "asset_type": "website", "location": "https://www.landandfarm.com/", "group": "In Scope" }, { "name": "Land Watch", "asset_type": "website", "location": "https://www.landwatch.com/", "group": "In Scope" }, { "name": "Marketing Hub", "asset_type": "website", "location": "https://market.land.com/", "group": "In Scope" }, { "name": "Property Control Center", "asset_type": "website", "location": "https://www.propertycontrolcenter.com/", "group": "In Scope" }, { "name": "City Feet", "asset_type": "website", "location": "https://www.cityfeet.com", "group": "In Scope" }, { "name": "Buy Matterport", "asset_type": "website", "location": "https://dev-buy.matterport.com/", "group": "In Scope" }, { "name": "Support Matterport", "asset_type": "website", "location": "https://cs.matterport.com/", "group": "In Scope" }, { "name": "Off Campus Partners", "asset_type": "website", "location": "https://admin.offcampuspartners.com/", "group": "In Scope" }, { "name": "Off Campus Partners Product", "asset_type": "website", "location": "https://product.offcampuspartners.com/", "group": "In Scope" }, { "name": "AM:PM Hotels", "asset_type": "website", "location": "https://www.ampmhotels.com/", "group": "In Scope" }, { "name": "Ten-X Auctioneer", "asset_type": "website", "location": "https://auctiondash.ten-x.com/", "group": "In Scope" }, { "name": "Ten-X", "asset_type": "website", "location": "https://www.ten-x.com/", "group": "In Scope" }, { "name": "Thomas Daily Marketing", "asset_type": "website", "location": "https://www.thomas-daily.de/", "group": "In Scope" }, { "name": "Thomas Daily Web", "asset_type": "website", "location": "https://web.thomas-daily.de/", "group": "In Scope" }, { "name": "Visual Lease", "asset_type": "website", "location": "https://visuallease.com/", "group": "In Scope" }, { "name": "Visual Lease Webhook", "asset_type": "website", "location": "https://webhook.visuallease.com/", "group": "In Scope" }, { "name": "Web Enterprise", "asset_type": "website", "location": "https://we.costar.com/", "group": "In Scope" }, { "name": "Discover Matterport", "asset_type": "website", "location": "https://discover.matterport.com/", "group": "In Scope" }, { "name": "Capture Services QA", "asset_type": "website", "location": "https://qa3-captureservices.matterport.com/", "group": "In Scope" }, { "name": "Capture Services", "asset_type": "website", "location": "https://captureservices.matterport.com", "group": "In Scope" }, { "name": "API Matterport", "asset_type": "website", "location": "https://dev-api.matterport.com/graphiql", "group": "In Scope" } ], "out_of_scope": [ { "name": "OnTheMarket", "asset_type": "website", "location": "https://www.onthemarket.com/", "group": "Out-of-Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-801fed70d571ca5b.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-aa6fb08d87c09188", "name": "Council of the Inspectors General on Integrity and Efficiency Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/cigie-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:20Z", "scope_published_at": "2023-12-22T20:33:01.834Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/cigie-vdp/changelog/49fdfd92-14df-4c3d-bcde-1da5cf628650.json" ], "in_scope": [ { "name": "*.cigie.gov", "asset_type": "website", "location": " ", "group": "In Scope Targets" }, { "name": "*.ignet.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.oversight.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-aa6fb08d87c09188.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-737abd31e9dd2406", "name": "Court Services and Offender Supervision Agency: Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/csosa-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:39Z", "scope_published_at": "2021-08-02T15:08:46.087Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/csosa-vdp/changelog/e58ffa0f-0393-4237-b714-b94825e94162.json" ], "in_scope": [ { "name": "https://www.csosa.gov/", "asset_type": "website", "location": "https://www.csosa.gov/", "group": "In Scope" }, { "name": "*.csosa.gov", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-737abd31e9dd2406.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-5acd80cbc8c0bf75", "name": "Defense Nuclear Facilities Safety Board - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/dnfsb-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:01Z", "scope_published_at": "2024-12-12T17:19:11.551Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/dnfsb-vdp/changelog/5c553a5d-cdb8-40a6-8c15-ef8d22e3f416.json" ], "in_scope": [ { "name": "*.dnfsb.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://www.dnfsb.gov", "asset_type": "website", "location": "https://www.dnfsb.gov", "group": "In Scope" }, { "name": "149.19.38.64", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "149.19.37.67", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "149.19.38.99", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "63.109.81.0/", "asset_type": "other", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-5acd80cbc8c0bf75.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-94a554da0000cd71", "name": "Demo-EU-admin-VDP-1", "program_url": "https://eu.bugcrowd.net/engagements/eu-vdp-1", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Biotech", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": true, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:14Z", "scope_published_at": "2026-07-30T14:46:09.821Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://eu.bugcrowd.net/engagements/eu-vdp-1/changelog/e280b6c3-c609-4d6a-b488-2d2963b78649.json" ], "in_scope": [ { "name": "test-target-updated-1", "asset_type": "api", "location": "https://temp-target.ai", "group": "Test VDP target group" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-94a554da0000cd71.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-49ecb66ca67b8ec8", "name": "Department of Homeland Security: Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/dhs-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:38Z", "scope_published_at": "2025-12-19T20:32:33.783Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/dhs-vdp/changelog/8e83af01-4187-4573-a7ea-339b93ed6bc5.json" ], "in_scope": [ { "name": "*.dhs.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.BIOMETRICS.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.CBP.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.CISA.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.CPNIREPORTING.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.CYBER.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.CYBERSECURITY.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.DISASTERASSISTANCE.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.DOTGOV.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.E-VERIFY.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.EVERIFY.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.EVUS.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.FEMA.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.FIRSTRESPONDERTRAINING.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.FLETA.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.FLETC.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.FLOODSMART.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.GET.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.GLOBALENTRY.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.HOMELANDSECURITY.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.ICE.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.JUNTOS.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.LISTO.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.NIC.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.NIEM.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.NMSC.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.POWER2PREVENT.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.PREVENTIONRESOURCEFINDER.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.READY.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.READYBUSINESS.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.SAFETYACT.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.SCHOOLSAFETY.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.SECRETSERVICE.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.STOPRANSOMWARE.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.TOGETHER.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.TSA.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.US-CERT.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.USCG.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.USCIS.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.USSS.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.TRUMPCARD.GOV", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "trumpcard.gov", "asset_type": "website", "location": "https://trumpcard.gov", "group": "In Scope" } ], "out_of_scope": [ { "name": "All third party sites and endpoints", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-49ecb66ca67b8ec8.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-3bb71a5ebc90a36f", "name": "Department of Interior: Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/doi-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:31Z", "scope_published_at": "2023-10-24T23:10:33.787Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/doi-vdp/changelog/b484cbb3-fd9f-49f7-9e03-c52f59406371.json" ], "in_scope": [ { "name": "*.doi.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "https://www.doioig.gov", "asset_type": "website", "location": "http://doioig.gov/", "group": "In Scope Targets" }, { "name": "BSEE.gov", "asset_type": "website", "location": "https://www.BSEE.gov", "group": "In Scope Targets" }, { "name": "BOEM.gov", "asset_type": "website", "location": "https://www.BOEM.gov", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-3bb71a5ebc90a36f.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-d00055c06e8765d7", "name": "Department of Labor", "program_url": "https://bugcrowd.com/engagements/dol-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:34Z", "scope_published_at": "2026-06-12T15:11:33.457Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/dol-vdp/changelog/6e18ac34-3652-4b16-b36e-a31fcf904004.json" ], "in_scope": [ { "name": "https://*.dol.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.bls.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.apprenticeship.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.apprenticeships.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.employer.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.hirevets.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.trainingproviderresults.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.unionreports.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.veterans.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.DOL-ESA.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.DOLETA.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.labor.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.worker.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.youthrules.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.msha.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.osha.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.whistleblowers.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.jobcorps.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.wrp.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.jobcorps.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.workforcegps.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.UI.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.unemployment.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.goodjobs.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.jcmarketplace.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.joinjobcorps.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.jcsuccess.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.neapmap.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.jctalentworks.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.jcstudentsurveys.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.bonds4jobs.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.careeronestop.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.mynextmove.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.myskillsmyfuture.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.onetcenter.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.onetonline.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.servicelocator.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.askearn.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.askjan.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.leadcenter.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.whatcanyoudocampaign.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.ustedquepuedehacer.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.capeyouth.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.peatworks.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.onetcodeconnector.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.miproximopaso.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.persuader-reports.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.migrantworker.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.mshastanddown.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.workcenter.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.trabajadormigrante.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://*.whatcanyoudocampaign.gov", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-d00055c06e8765d7.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-d780088bd6773da5", "name": "Department of the Treasury: Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/treasury-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:09Z", "scope_published_at": "2025-02-24T18:22:56.958Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/treasury-vdp/changelog/391b3816-114f-4e96-8237-03a92e2a4a8f.json" ], "in_scope": [ { "name": "*treasury.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*treas.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*irs.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*fincen.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*cdfifund.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "complaintreferralexpress.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*eyenote.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*mymoney.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*financialstability.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*fsoc.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*irsauctions.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*irssales.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*sigpr.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*sigtarp.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*tigta.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*ustreas.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*workplace.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*bep.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*ffb.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*msb.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*ttbonline.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*ttb.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*occ.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*helpwithmybank.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*banknet.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*occ.treas.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*eaglecash.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*navycash.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*its.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*eftps.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*bondpro.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*federalinvestments.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*fedinvest.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*savingsbond.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*savingsbonds.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*savingsbondwizard.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*treasurydirect.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*slgs.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*taaps.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*treasuryauctions.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*treasuryhunt.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*asap.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*treasuryscams.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*wizard.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*treaslockbox.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*pay.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*twai.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*tcis.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*myra.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*ama.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*usaspending.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*bfem.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*treasuryauction.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*ccac.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*comptrollerofthecurrency.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*directoasucuenta.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*eta-find.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*federalspending.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*financialresearch.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*godirect.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*helpwithmycheckingaccount.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*helpwithmycreditcard.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*helpwithmycreditcardbank.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*helpwithmymortgage.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*helpwithmymortgagebank.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*ipp.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*irsnet.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*moneyfactory.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*moneyfactorystore.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*myira.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*mytreasury.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*nationalbank.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*nationalbankhelp.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*nationalbanknet.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*ots.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*qatesttwai.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*tax.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*usdebitcard.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*tigtanet.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*transparency.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*treasuryecm.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*ttlplus.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*occhelps.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*occnet.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*tftc-istehdaf.org", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*usmint.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*americathebeautifulquarters.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*ayudaconmibanco.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*bankanswers.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*bankcustomer.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*bankcustomerassistance.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*bankhelp.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*ipac.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*ethicsburg.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*irsvideos.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*mha.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*patriotbonds.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*makinghomeaffordable.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "cfius.high.powerappsportals.us/", "asset_type": "website", "location": "https://cfius.high.powerappsportals.us/", "group": "In Scope Targets" }, { "name": "outbound.high.powerappsportals.us/", "asset_type": "website", "location": "https://outbound.high.powerappsportals.us/", "group": "In Scope Targets" }, { "name": "app.high.powerbigov.us/view?r=eyJrIjoiM2NhODNiNDctYmUxZi00YzA2LWE1NjctYmYwZjAyYzY1NTNmIiwidCI6IjU4ZjFlM2ZhLTU4Y2ItNGNiNi04OGNjLWM5MWNhYzIwN2YxOCJ9", "asset_type": "website", "location": "https://app.high.powerbigov.us/view?r=eyJrIjoiM2NhODNiNDctYmUxZi00YzA2LWE1NjctYmYwZjAyYzY1NTNmIiwidCI6IjU4ZjFlM2ZhLTU4Y2ItNGNiNi04OGNjLWM5MWNhYzIwN2YxOCJ9", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-d780088bd6773da5.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-5bdbdbd2473c3954", "name": "Department of Veterans Affairs", "program_url": "https://bugcrowd.com/engagements/va-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:33Z", "scope_published_at": "2025-07-29T13:46:31.113Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/va-vdp/changelog/2cfaae78-1ccd-4169-b7c8-5729f53b4c41.json" ], "in_scope": [ { "name": "*.va.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "www.vets.gov", "asset_type": "website", "location": "https://www.vets.gov/", "group": "In Scope" }, { "name": "www.veteranscrisisline.net", "asset_type": "website", "location": "https://www.veteranscrisisline.net/", "group": "In Scope" }, { "name": "www.reach.gov", "asset_type": "website", "location": "https://www.reach.gov/", "group": "In Scope" }, { "name": "www.vavmc.com/", "asset_type": "website", "location": "https://www.vavmc.com/", "group": "In Scope" }, { "name": "www.ehr.gov", "asset_type": "website", "location": "https://www.ehr.gov", "group": "In Scope" }, { "name": "www.vaoig.gov", "asset_type": "website", "location": "https://www.vaoig.gov", "group": "In Scope" }, { "name": "www.vasafe.gov", "asset_type": "website", "location": "https://www.vasafe.gov", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-5bdbdbd2473c3954.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-7da01efb82909d82", "name": "Despegar Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/despegar-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Tourism", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:17Z", "scope_published_at": "2026-04-28T12:00:00.093Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/despegar-vdp-pro/changelog/51ac2ae2-fac7-4ebc-8605-98e314c328f4.json" ], "in_scope": [ { "name": "Despegar", "asset_type": "website", "location": "https://www.depegar.com.ar", "group": "In Scope" }, { "name": "Decolar", "asset_type": "website", "location": "https://www.decolar.com", "group": "In Scope" }, { "name": "Despegar iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/despegar-vuelos-y-hoteles/id511479725", "group": "In Scope" }, { "name": "Despegar Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.gm.despegar&hl=en_US", "group": "In Scope" }, { "name": "Decolar iOS App", "asset_type": "ios", "location": "https://apps.apple.com/br/app/decolar-voos-e-hot%C3%A9is/id583990782", "group": "In Scope" }, { "name": "Decolar Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.gm.decolar", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-7da01efb82909d82.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-0d8d3749e2e946e0", "name": "Deutsche Bank Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/deutschebank-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Banking", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:45Z", "scope_published_at": "2026-04-24T16:35:36.991Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/deutschebank-vdp/changelog/886cd6f2-3a41-4c5d-91df-03cc7f4cc118.json" ], "in_scope": [ { "name": "Any Deutsche Bank Asset", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "Trackit DB", "asset_type": "website", "location": null, "group": "Out of scope " } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-0d8d3749e2e946e0.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-b347db983f855b21", "name": "DICK'S Sporting Goods", "program_url": "https://bugcrowd.com/engagements/dickssportinggoods", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:43Z", "scope_published_at": "2026-04-13T23:06:43.414Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/dickssportinggoods/changelog/4e9b49f1-c360-400d-9767-430168605f8b.json" ], "in_scope": [ { "name": "*.dickssportinggoods.com", "asset_type": "website", "location": "https://www.dickssportinggoods.com/", "group": "In Scope Targets" }, { "name": "*.golfgalaxy.com", "asset_type": "website", "location": "https://www.golfgalaxy.com/", "group": "In Scope Targets" }, { "name": "*.goinggoinggone.com", "asset_type": "website", "location": "https://www.goinggoinggone.com/", "group": "In Scope Targets" }, { "name": "*.publiclands.com", "asset_type": "website", "location": "https://www.publiclands.com/", "group": "In Scope Targets" }, { "name": "*.vrst.com", "asset_type": "website", "location": "https://www.vrst.com", "group": "In Scope Targets" }, { "name": "*.dcsg.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.calia.com", "asset_type": "website", "location": "https://www.calia.com", "group": "In Scope Targets" }, { "name": "*.gc.com", "asset_type": "website", "location": "https://gc.com/", "group": "In Scope Targets" }, { "name": "iOS App: Dicks Sporting Goods", "asset_type": "ios", "location": "https://apps.apple.com/us/app/dicks-sporting-goods-fitness/id556653197", "group": "In Scope Targets" }, { "name": "iOS App: Golf Galaxy", "asset_type": "ios", "location": "https://apps.apple.com/us/app/golf-galaxy/id1100245173", "group": "In Scope Targets" }, { "name": "iOS App: GameChanger", "asset_type": "ios", "location": "https://apps.apple.com/us/app/gamechanger/id1308415878", "group": "In Scope Targets" }, { "name": "Android App: Dicks Sporting Goods", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=dsgui.android&hl=en_US", "group": "In Scope Targets" }, { "name": "Android App: Golf Galaxy", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.dcsg.golfgalaxy&hl=en_US&gl=US", "group": "In Scope Targets" }, { "name": "Android App: GameChanger", "asset_type": "ios", "location": "https://play.google.com/store/apps/details?id=com.gc.teammanager&hl=en_US&pli=1", "group": "In Scope Targets" }, { "name": "*.footlocker.com", "asset_type": "website", "location": "https://footlocker.com", "group": "In Scope Targets" }, { "name": "iOS App: Foot Locker", "asset_type": "ios", "location": "https://apps.apple.com/us/app/foot-locker-shop-releases/id934030757", "group": "In Scope Targets" }, { "name": "Android App: Foot Locker", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.footlocker.approved&hl=en_US&pli=1", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-b347db983f855b21.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-23dff461bdefa0a5", "name": "Domain Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/domain-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Real Estate", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:01Z", "scope_published_at": "2026-08-21T21:01:14.540Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/domain-vdp-pro/changelog/ff069013-79b1-4007-8e7a-a5e9ed7db4f6.json" ], "in_scope": [ { "name": "*.domain.com.au", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.commercialrealestate.com.au", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.realtimeagent.com.au", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.allhomes.com.au", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.pricefinder.com.au", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.campaigntrack.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.realbase.io", "asset_type": "website", "location": "https://*.realbase.io", "group": "In Scope" }, { "name": "*.realhub.com.au", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.jobtrackstudio.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://skylight.domain.com.au/", "asset_type": "website", "location": "https://skylight.domain.com.au/", "group": "In Scope" }, { "name": "https://users.domain.com.au/", "asset_type": "website", "location": "https://users.domain.com.au/", "group": "In Scope" }, { "name": "*.bidtracker.com.au", "asset_type": "website", "location": "https://*.bidtracker.com.au", "group": "In Scope" }, { "name": "*.commercialview.com.au", "asset_type": "website", "location": "https://.commercialview.com.au", "group": "In Scope" }, { "name": "*.realhubapp.com", "asset_type": "website", "location": "https://*.realhubapp.com", "group": "In Scope" }, { "name": "developer.domain.com.au", "asset_type": "website", "location": "https://developer.domain.com.au/", "group": "In Scope" } ], "out_of_scope": [ { "name": "https://agent.domain.com.au/contact-us/", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://agent.domain.com.au/wp-admin/admin-ajax.php", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://www.allhomes.com.au/wsvc/listing/sale/*/contact", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://www.realtimeagent.com.au/wp-admin/admin-ajax.php", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://www.domain.com.au/phoenix/api/simple-enquiry", "asset_type": "api", "location": null, "group": "Out of Scope" }, { "name": "https://www.homes.com/about/contact-us/", "asset_type": "website", "location": "https://www.homes.com/about/contact-us/", "group": "Out of Scope" }, { "name": "https://www.homes.com/*#lead-form", "asset_type": "website", "location": "https://www.homes.com/*#lead-form", "group": "Out of Scope" }, { "name": "https://www.apartments.com/*/schedule-tour", "asset_type": "website", "location": "https://www.apartments.com/*/schedule-tour", "group": "Out of Scope" }, { "name": "https://www.apartments.com/services/dynamicleadform", "asset_type": "website", "location": "https://www.apartments.com/services/dynamicleadform", "group": "Out of Scope" }, { "name": "https://www.apartments.com/grow/about/contact", "asset_type": "website", "location": "https://www.apartments.com/grow/about/contact", "group": "Out of Scope" }, { "name": "https://www.loopnet.com/services/contact/listing", "asset_type": "website", "location": "https://www.loopnet.com/services/contact/listing", "group": "Out of Scope" }, { "name": "https://www.loopnet.com/solutions/contact-us", "asset_type": "website", "location": "https://www.loopnet.com/solutions/contact-us", "group": "Out of Scope" }, { "name": "*.onthemarket.com", "asset_type": "website", "location": "https://*.onthemarket.com/", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-23dff461bdefa0a5.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-2ba4f933d6de7ca7", "name": "Dyson Demo VDP Engagement", "program_url": "https://bugcrowd.com/engagements/dyson-demo-vdp-engagement", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Hardware", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": true, "is_private": false }, "scope_status": "no_published_assets", "scope_captured_at": "2026-10-03T16:44:36Z", "scope_published_at": "2025-04-15T06:26:26.776Z", "scope_group_count": 0, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://bugcrowd.com/engagements/dyson-demo-vdp-engagement", "http_status": 200, "result": "empty_published_table", "note": "The official engagement page was available, but its public brief published zero scope groups and zero target rows. Policy prose may still define or limit scope; no asset row was inferred." }, "scope_source_urls": [ "https://bugcrowd.com/engagements/dyson-demo-vdp-engagement/changelog/96267c44-4fde-4575-a2ce-5fd89bb24596.json" ], "in_scope": [], "out_of_scope": [], "policy_review_state": "directory_listing_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-2ba4f933d6de7ca7.md", "limitations": [ "Full program policy review remains outstanding.", "No public asset rows were captured; consult the live official program policy for any policy-defined scope.", "The official engagement page was available, but its public brief published zero scope groups and zero target rows. Policy prose may still define or limit scope; no asset row was inferred." ] }, { "id": "bugcrowd-cbd850681ea26a44", "name": "EchoStar Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/dish-network-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Utilities", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:45Z", "scope_published_at": "2025-10-14T16:15:16.453Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/dish-network-vdp-pro/changelog/473f8957-8a4e-4919-af9c-f860a75622c5.json" ], "in_scope": [ { "name": "*.dish.com", "asset_type": "website", "location": "https://dish.com/", "group": "In Scope" }, { "name": "*.my.dish.com", "asset_type": "website", "location": "https://my.dish.com", "group": "In Scope" }, { "name": "*.dishanywhere.com", "asset_type": "website", "location": "https://dishanywhere.com", "group": "In Scope" }, { "name": "*.sling.com", "asset_type": "website", "location": "https://sling.com", "group": "In Scope" }, { "name": "*.ontechsmartservices.com", "asset_type": "website", "location": "https://ontechsmartservices.com", "group": "In Scope" }, { "name": "*.boostmobile.com", "asset_type": "website", "location": "https://boostmobile.com", "group": "In Scope" }, { "name": "*.echostar.com", "asset_type": "website", "location": "https://echostar.com", "group": "In Scope" }, { "name": "*.hughesnet.com", "asset_type": "website", "location": "https://hughesnet.com", "group": "In Scope" }, { "name": "*.hughes.com", "asset_type": "website", "location": "https://hughes.com", "group": "In Scope" }, { "name": "Dish Anywhere iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/dish-anywhere/id327125649", "group": "In Scope" }, { "name": "Dish Anywhere Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.sm.SlingGuide.Dish", "group": "In Scope" }, { "name": "MyDISH iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/mydish-account/id1123102087", "group": "In Scope" }, { "name": "MyDISH Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.dish.mydish", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-cbd850681ea26a44.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-dba9db18617fecf6", "name": "eMAG Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/emag-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:52Z", "scope_published_at": "2025-03-04T11:03:44.530Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/emag-vdp-pro/changelog/98f031b4-9ed8-48b9-b95d-e462bccc5238.json" ], "in_scope": [ { "name": "*.emag.bg", "asset_type": "website", "location": "https://www.emag.bg/", "group": "eMAG In scope" }, { "name": "*.emag.ro", "asset_type": "website", "location": "https://emag.ro/", "group": "eMAG In scope" }, { "name": "*.emag.hu", "asset_type": "website", "location": "https://emag.hu/", "group": "eMAG In scope" }, { "name": "*.sameday.bg", "asset_type": "website", "location": null, "group": "Sameday" }, { "name": "*.sameday.hu", "asset_type": "website", "location": null, "group": "Sameday" }, { "name": "*.sameday.ro", "asset_type": "website", "location": null, "group": "Sameday" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-dba9db18617fecf6.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-da40f9c4f9014295", "name": "Equal Employment Opportunity Commission: Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/eeoc-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:36Z", "scope_published_at": "2022-04-27T19:38:25.587Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/eeoc-vdp/changelog/98d48fa1-0ee2-4aaa-843b-35eb26f08fb7.json" ], "in_scope": [ { "name": "eeoc.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "nxg.eeoc.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "ims.eeoc.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "uat-www.eeoc.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "sts.eeoc.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "surveys.eeoc.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "youth.eeoc.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "alertus.eeoc.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "arcuat.eeoc.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "arctrain.eeoc.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "arcdev.eeoc.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://arc.eeoc.gov", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-da40f9c4f9014295.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-24d0a65646a22b7a", "name": "Eurofins Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/eurofins-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Science", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:14Z", "scope_published_at": "2026-06-23T18:00:00.278Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/eurofins-vdp-pro/changelog/396b4476-b29c-4266-88f1-b9c29d6e96ba.json" ], "in_scope": [ { "name": "All Eurofins Assets", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-24d0a65646a22b7a.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-73281dad94769db3", "name": "EXIM - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/exim-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:30Z", "scope_published_at": "2021-11-23T22:03:14.744Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/exim-vdp/changelog/144e2dcb-9308-4884-8972-b2430779bf1e.json" ], "in_scope": [ { "name": "*.exim.gov", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-73281dad94769db3.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-f59a708cb6c667ac", "name": "Federal Communications Commission: Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/fcc-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:39Z", "scope_published_at": "2022-03-04T23:17:55.379Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/fcc-vdp/changelog/edca9ba7-b39c-4a1d-bded-aa2fffdd9c06.json" ], "in_scope": [ { "name": "https://www.fcc.gov/*", "asset_type": "website", "location": "https://www.fcc.gov/*", "group": "In Scope" }, { "name": "https://consumercomplaints.fcc.gov", "asset_type": "website", "location": "https://consumercomplaints.fcc.gov", "group": "In Scope" }, { "name": "https://autodiscover.fcc.gov", "asset_type": "website", "location": "https://autodiscover.fcc.gov", "group": "In Scope" }, { "name": "https://fccravpn.fcc.gov", "asset_type": "website", "location": "https://fccravpn.fcc.gov", "group": "In Scope" }, { "name": "https://xmail.fcc.gov", "asset_type": "website", "location": "https://xmail.fcc.gov", "group": "In Scope" }, { "name": "https://gbvdi.fcc.gov", "asset_type": "website", "location": "https://gbvdi.fcc.gov", "group": "In Scope" }, { "name": "https://osts.fcc.gov", "asset_type": "website", "location": "https://osts.fcc.gov", "group": "In Scope" }, { "name": "https://ecfsapi.fcc.gov", "asset_type": "website", "location": "https://ecfsapi.fcc.gov", "group": "In Scope" }, { "name": "https://apps2.fcc.gov", "asset_type": "website", "location": "https://apps2.fcc.gov", "group": "In Scope" }, { "name": "https://apps2demo.fcc.gov", "asset_type": "website", "location": "https://apps2demo.fcc.gov", "group": "In Scope" }, { "name": "https://apps3.fcc.gov", "asset_type": "website", "location": "https://apps3.fcc.gov", "group": "In Scope" }, { "name": "*.exploretsp.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://auctionapplicationdemo.fcc.gov", "asset_type": "website", "location": "https://auctionapplicationdemo.fcc.gov", "group": "In Scope" }, { "name": "https://auctionbidding.fcc.gov", "asset_type": "website", "location": "https://auctionbidding.fcc.gov", "group": "In Scope" }, { "name": "https://auctionbidding2.fcc.gov", "asset_type": "website", "location": "https://auctionbidding2.fcc.gov", "group": "In Scope" }, { "name": "https://auctiondata.fcc.gov", "asset_type": "website", "location": "https://auctiondata.fcc.gov", "group": "In Scope" }, { "name": "https://auctionfiling.fcc.gov", "asset_type": "website", "location": "https://auctionfiling.fcc.gov", "group": "In Scope" }, { "name": "https://auctionsignon.fcc.gov", "asset_type": "website", "location": "https://auctionsignon.fcc.gov", "group": "In Scope" }, { "name": "https://auctionsignon2.fcc.gov", "asset_type": "website", "location": "https://auctionsignon2.fcc.gov", "group": "In Scope" }, { "name": "https://data.fcc.gov", "asset_type": "website", "location": "https://data.fcc.gov", "group": "In Scope" }, { "name": "https://dcvdi.fcc.gov", "asset_type": "website", "location": "https://dcvdi.fcc.gov", "group": "In Scope" }, { "name": "https://ecfsapi-prototype.fcc.gov", "asset_type": "website", "location": "https://ecfsapi-prototype.fcc.gov", "group": "In Scope" }, { "name": "https://enterpriseefiling.fcc.gov", "asset_type": "website", "location": "https://enterpriseefiling.fcc.gov", "group": "In Scope" }, { "name": "https://esupport.fcc.gov", "asset_type": "website", "location": "https://esupport.fcc.gov", "group": "In Scope" }, { "name": "https://fccdata.fcc.gov", "asset_type": "website", "location": "https://fccdata.fcc.gov", "group": "In Scope" }, { "name": "https://fjallfoss.fcc.gov", "asset_type": "website", "location": "https://fjallfoss.fcc.gov", "group": "In Scope" }, { "name": "https://opendata.fcc.gov", "asset_type": "website", "location": "https://opendata.fcc.gov", "group": "In Scope" }, { "name": "https://p2p-mic-sasentry.fcc.gov", "asset_type": "website", "location": "https://p2p-mic-sasentry.fcc.gov", "group": "In Scope" }, { "name": "https://www3.fcc.gov", "asset_type": "website", "location": "https://www3.fcc.gov", "group": "In Scope" }, { "name": "https://paydemo.fcc.gov", "asset_type": "website", "location": "https://paydemo.fcc.gov", "group": "In Scope" }, { "name": "*.fcc.gov", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-f59a708cb6c667ac.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-c899a759eba6f44f", "name": "Federal Deposit Insurance Corporation - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/fdic-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:03Z", "scope_published_at": "2023-06-01T01:47:39.025Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/fdic-vdp/changelog/a4a6fc14-841a-4bb7-a18d-9f19e3e5c78f.json" ], "in_scope": [ { "name": "https://www.fdic.gov/", "asset_type": "website", "location": "https://www.fdic.gov/", "group": "In Scope" }, { "name": "https://www.fdicconnect.gov/index.asp", "asset_type": "website", "location": "https://www.fdicconnect.gov/index.asp", "group": "In Scope" }, { "name": "https://fdicoig.gov/", "asset_type": "website", "location": "https://fdicoig.gov/", "group": "In Scope" }, { "name": "https://www.ofia.gov/", "asset_type": "website", "location": "https://www.ofia.gov/", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-c899a759eba6f44f.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-8ff1cfe2a76d2397", "name": "Federal Housing Finance Agency Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/fhfa-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:51Z", "scope_published_at": "2024-05-07T04:58:28.041Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/fhfa-vdp/changelog/b39ca01e-0127-4ccc-8ddb-c0242cd4b683.json" ], "in_scope": [ { "name": "*.fhfa.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.mortgagetranslations.gov", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-8ff1cfe2a76d2397.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-24bb0555751df42e", "name": "FEDERAL MARITIME COMMISSION - VDP", "program_url": "https://gov.bugcrowd.net/engagements/fmc-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": true, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:24Z", "scope_published_at": "2022-05-05T17:02:38.000Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://gov.bugcrowd.net/engagements/fmc-vdp/changelog/e37325ec-2b1a-4eca-83e4-9a58571e2cb3.json" ], "in_scope": [ { "name": "█████████", "asset_type": "website", "location": null, "group": "███████████████" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-24bb0555751df42e.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-076240c3d76bf0d1", "name": "Federal Mine Safety and Health Review Commission - Vulnerability Disclosure", "program_url": "https://bugcrowd.com/engagements/fmshrc-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:33Z", "scope_published_at": "2025-01-29T04:15:06.986Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/fmshrc-vdp/changelog/e2b4c275-ea8b-44d0-bf0d-32366fa7917a.json" ], "in_scope": [ { "name": "fmshrc.gov", "asset_type": "website", "location": "https://www.fmshrc.gov/", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-076240c3d76bf0d1.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-078823dc61730919", "name": "Federal Retirement Thrift Investment Board : Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/frtib-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:37Z", "scope_published_at": "2025-08-29T13:55:16.486Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/frtib-vdp/changelog/5dfbb54b-74c7-4b56-970c-c2eb635ed990.json" ], "in_scope": [ { "name": "*.tsp.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.frtib.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "74.113.204.0/22", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "*.exploretsp.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "52.6.47.227", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "*.covergeoperations.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.federalalight.com", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-078823dc61730919.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-138d0c3f74ef4e65", "name": "Federal Trade Commission: Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/ftc-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:21Z", "scope_published_at": "2026-02-04T18:36:10.912Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ftc-vdp/changelog/486b3cf6-80f0-440c-8aa4-564a2fe7df03.json" ], "in_scope": [ { "name": "https://*.alertaenlinea.gov", "asset_type": "website", "location": "https://www.alertaenlinea.gov", "group": "In Scope Targets" }, { "name": "https://*.consumer.gov", "asset_type": "website", "location": "https://www.consumer.gov", "group": "In Scope Targets" }, { "name": "https://*.consumersentinel.gov", "asset_type": "website", "location": "https://www.consumersentinel.gov", "group": "In Scope Targets" }, { "name": "https://*.consumidor.gov", "asset_type": "website", "location": "https://consumidor.gov", "group": "In Scope Targets" }, { "name": "https://*.donotcall.gov", "asset_type": "website", "location": "https://www.donotcall.gov", "group": "In Scope Targets" }, { "name": "https://*.dontserveteens.gov", "asset_type": "website", "location": "https://www.dontserveteens.gov", "group": "In Scope Targets" }, { "name": "https://*.econsumer.gov", "asset_type": "website", "location": "https://www.econsumer.gov", "group": "In Scope Targets" }, { "name": "https://*.ftc.gov", "asset_type": "website", "location": "https://www.ftc.gov", "group": "In Scope Targets" }, { "name": "https://*.hsr.gov", "asset_type": "website", "location": "https://www.hsr.gov", "group": "In Scope Targets" }, { "name": "https://*.identitytheft.gov", "asset_type": "website", "location": "https://www.identitytheft.gov", "group": "In Scope Targets" }, { "name": "https://*.militaryconsumer.gov", "asset_type": "website", "location": "https://www.militaryconsumer.gov", "group": "In Scope Targets" }, { "name": "https://*.onguardonline.gov", "asset_type": "website", "location": "https://www.onguardonline.gov", "group": "In Scope Targets" }, { "name": "https://*.robodeidentidad.gov", "asset_type": "website", "location": "https://www.robodeidentidad.gov", "group": "In Scope Targets" }, { "name": "https://*.sentinel.gov", "asset_type": "website", "location": "https://www.sentinel.gov", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-138d0c3f74ef4e65.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-4ec7fd30567b4542", "name": "Figment Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/figment-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:24Z", "scope_published_at": "2025-03-26T17:40:43.953Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/figment-vdp/changelog/752d06eb-6302-4058-9ef2-5f17e2bf9b86.json" ], "in_scope": [ { "name": "figment.io", "asset_type": "website", "location": "https://figment.io", "group": "In Scope Targets " }, { "name": "app.figment.io", "asset_type": "website", "location": "https://app.figment.io", "group": "In Scope Targets " }, { "name": "api.figment.io", "asset_type": "api", "location": "https://api.figment.io", "group": "In Scope Targets " }, { "name": "dapp.figment.io", "asset_type": "website", "location": "https://dapp.figment.io", "group": "In Scope Targets " }, { "name": "rewards-calculator.figment.io", "asset_type": "website", "location": "https://rewards-calculator.figment.io", "group": "In Scope Targets " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-4ec7fd30567b4542.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-4ae2715df2ffb0bd", "name": "Flybuys Australia Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/flybuys-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:05Z", "scope_published_at": "2026-02-16T02:22:54.213Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/flybuys-vdp-pro/changelog/a08b91e2-ee0b-4f42-88bf-2de17254d4ea.json" ], "in_scope": [ { "name": "flybuystravel.com.au", "asset_type": "website", "location": "https://www.flybuystravel.com.au/", "group": "Flybuys - In Scope" }, { "name": "Flybuys Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.coles.android.flybuys.release", "group": "Flybuys - In Scope" }, { "name": "experience.flybuys.com.au", "asset_type": "website", "location": "https://experience.flybuys.com.au", "group": "Flybuys - In Scope" }, { "name": "flybuys.com.au", "asset_type": "website", "location": "https://www.flybuys.com.au", "group": "Flybuys - In Scope" }, { "name": "ahsapi.flybuys.com.au", "asset_type": "api", "location": null, "group": "Flybuys - In Scope" }, { "name": "apigw.flybuys.com.au", "asset_type": "api", "location": null, "group": "Flybuys - In Scope" }, { "name": "Flybuys iOS app", "asset_type": "ios", "location": "https://apps.apple.com/au/app/flybuys/id377842707 ", "group": "Flybuys - In Scope" }, { "name": "unpacked.flybuys.com.au", "asset_type": "website", "location": "https://unpacked.flybuys.com.au/", "group": "Flybuys - In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-4ae2715df2ffb0bd.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-3808970cd65d3efc", "name": "Gaming Corps Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/gamingcorps-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Games", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:31Z", "scope_published_at": "2025-07-24T14:34:40.574Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/gamingcorps-vdp-pro/changelog/af060dcd-2c70-4c6a-aefc-309347f57f36.json" ], "in_scope": [ { "name": "lobby.gamingcorpscasino.com", "asset_type": "website", "location": "https://lobby.gamingcorpscasino.com/", "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-3808970cd65d3efc.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-12f03056ae8dc130", "name": "Gap Inc.", "program_url": "https://bugcrowd.com/engagements/gapinc", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:51Z", "scope_published_at": "2026-08-14T09:41:39.117Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/gapinc/changelog/cceb97f9-3e7d-4114-a123-bbd4d2debbfe.json" ], "in_scope": [ { "name": "*.gap.com", "asset_type": "website", "location": "https://gap.com", "group": "In Scope Web Targets " }, { "name": "https://gap.com/shopping-bag", "asset_type": "website", "location": "https://gap.com/shopping-bag", "group": "In Scope Web Targets " }, { "name": "https://gap.com/checkout", "asset_type": "website", "location": "https://gap.com/checkout", "group": "In Scope Web Targets " }, { "name": "https://secure-www.gap.com/checkout/place-order/", "asset_type": "website", "location": "https://secure-www.gap.com/checkout/place-order/", "group": "In Scope Web Targets " }, { "name": "https://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-action", "asset_type": "website", "location": null, "group": "In Scope Web Targets " }, { "name": "https://secure-www.gap.com/checkout/place-order/xapi/place-order-action", "asset_type": "website", "location": null, "group": "In Scope Web Targets " }, { "name": "https://api.gap.com/credit_cards/v1/?external_customer_id=", "asset_type": "website", "location": null, "group": "In Scope Web Targets " }, { "name": "https://api.gap.com/", "asset_type": "api", "location": null, "group": "In Scope Web Targets " }, { "name": "https://secure-www.gap.com", "asset_type": "website", "location": null, "group": "In Scope Web Targets " }, { "name": "Gap (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=US", "group": "In Scope Mobile Targets " }, { "name": "Gap (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/gap/id326347260", "group": "In Scope Mobile Targets " } ], "out_of_scope": [ { "name": "equality.gapinc.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "investors.gapinc.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Recruiting - jobs.gapinc.com, careersblog.gapinc.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.gaptech.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.gap.com.mx", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.liverpool.com.*", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Janie & Jack", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Intermix", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-12f03056ae8dc130.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-4ce578ca5c8bf21f", "name": "Gartner Responsible Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/gartner-disclosure", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:40Z", "scope_published_at": "2026-09-03T17:16:18.010Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/gartner-disclosure/changelog/546cdea2-812f-44b8-839d-db556e5cbb48.json" ], "in_scope": [ { "name": "*.gartner.com", "asset_type": "website", "location": null, "group": "top-level domains with wildcards" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-4ce578ca5c8bf21f.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-42b31bfce7a25953", "name": "Genius", "program_url": "https://bugcrowd.com/engagements/Genius-VDP", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:47Z", "scope_published_at": "2026-06-30T18:59:38.197Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/Genius-VDP/changelog/af9ccf7e-a1a6-4a58-bdab-6ebfee0ca61b.json" ], "in_scope": [ { "name": "Genius.com", "asset_type": "website", "location": "https://genius.com/signup", "group": "In Scope Targets" }, { "name": "Genius Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.genius.android", "group": "In Scope Targets" }, { "name": "Genius iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/genius-song-lyrics-finder/id709482991", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-42b31bfce7a25953.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-2caa89d050033398", "name": "Geotab: VDP", "program_url": "https://bugcrowd.com/engagements/geotab-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Automotive", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:40Z", "scope_published_at": "2026-08-05T20:16:25.830Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/geotab-vdp/changelog/f0579322-5c58-4ff6-877b-826cff8f3687.json" ], "in_scope": [ { "name": "*.geotab.com (websites which show MyGeotab are out of scope)", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.geotab.ca", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.geotabinc.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.lat-lon.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.mobicorp.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.bsmtechnologies.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.smartchargerewards.com (Note: exceptions below)", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.bsmwireless.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.neutralvehicle.com", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "my.geotab.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "my*.geotab.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "mypreview*.geotab.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "myadmin.geotab.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.geotabgov.us", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "gov*.geotab.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "gofleet*.geotab.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "consumersenergy.smartchargerewards.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "smartchargenewyork.smartchargerewards.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "saskatchewan.smartchargerewards.ca", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "smartchargenewbrunswick.smartchargerewards.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "ne-wed.smartchargerewards.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "ne-hmlp.smartchargerewards.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.sentinelfm.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-2caa89d050033398.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-958c1e8fac3d3616", "name": "Gusto VDP", "program_url": "https://bugcrowd.com/engagements/gusto-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:26Z", "scope_published_at": "2025-12-23T19:53:29.799Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/gusto-vdp/changelog/a4580262-15c9-4be5-8e8e-e1987ab9cc1f.json" ], "in_scope": [ { "name": "api.gusto-demo.com", "asset_type": "api", "location": "https://docs.gusto.com/embedded-payroll/docs", "group": "In Scope" }, { "name": "https://dev.gusto.com/", "asset_type": "website", "location": "https://dev.gusto.com/", "group": "In Scope" }, { "name": "app.gusto-demo.com", "asset_type": "website", "location": "https://app.gusto-demo.com", "group": "In Scope" }, { "name": "https://github.com/Gusto/apollo-federation-ruby", "asset_type": "website", "location": "https://github.com/Gusto/apollo-federation-ruby", "group": "In Scope" }, { "name": "https://github.com/Gusto/grpc-web-ruby", "asset_type": "website", "location": "https://github.com/Gusto/grpc-web-ruby", "group": "In Scope" }, { "name": "Android App: Gusto Wallet", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.gusto.money&hl=en_US&gl=US", "group": "In Scope - Mobile" }, { "name": "iOS App: Gusto Wallet", "asset_type": "ios", "location": "https://apps.apple.com/us/app/gusto-wallet/id1478804271", "group": "In Scope - Mobile" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-958c1e8fac3d3616.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-300dcb9af533e5a1", "name": "Hack Me!", "program_url": "https://bugcrowd.com/engagements/hackme", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Construction", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": true, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:53Z", "scope_published_at": "2026-06-23T18:10:55.966Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/hackme/changelog/077de9e3-361c-4594-aa89-752d60d7af45.json" ], "in_scope": [ { "name": "www.bugcrowd.com", "asset_type": "website", "location": "https://www.bugcrowd.com", "group": "Primary Targets" }, { "name": "All IT-Managed Third-Party Services and Infrastructure", "asset_type": "other", "location": null, "group": "Primary Targets" }, { "name": "api.bugcrowd.com", "asset_type": "api", "location": "https://api.bugcrowd.com", "group": "Primary Targets" }, { "name": "Test by AN", "asset_type": "api", "location": "http://www.bugcrowd.com", "group": "Primary Targets" } ], "out_of_scope": [ { "name": "docs.bugcrowd.com", "asset_type": "website", "location": "https://docs.bugcrowd.com/", "group": "Out of Scope" }, { "name": "researcherdocs.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Crowdcontrol", "asset_type": "api", "location": "https://tracker.bugcrowd.com", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-300dcb9af533e5a1.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-9e1eee25140f90fc", "name": "HealthifyMe's Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/healthifyme", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:47Z", "scope_published_at": "2020-02-13T00:33:03.013Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/healthifyme/changelog/66a6ea6e-d8f0-4c73-aa1a-5241438ed89d.json" ], "in_scope": [ { "name": "*.healthifyme.com", "asset_type": "website", "location": null, "group": "In scope" }, { "name": "https://play.google.com/store/apps/details?id=com.healthifyme.basic&hl=en", "asset_type": "android", "location": null, "group": "In scope" }, { "name": "https://itunes.apple.com/in/app/healthifyme-weight-loss-coach/id943712366?mt=8", "asset_type": "ios", "location": null, "group": "In scope" }, { "name": "Any publicly facing asset owned by HealthifyMe (ip space, domains, etc)", "asset_type": "website", "location": null, "group": "In scope" } ], "out_of_scope": [ { "name": "behtarkhao.healthifyme.com", "asset_type": "website", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-9e1eee25140f90fc.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-1f1847755606b1cd", "name": "Hemi Labs VDP", "program_url": "https://bugcrowd.com/engagements/hemi", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:21Z", "scope_published_at": "2026-09-02T16:37:30.957Z", "scope_group_count": 9, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/hemi/changelog/cbdae4b1-7182-44d4-98ad-c839a8e61c80.json" ], "in_scope": [ { "name": "https://rpc.hemi.network/rpc", "asset_type": "api", "location": "https://rpc.hemi.network/rpc", "group": "Hemi Network RPC" }, { "name": "https://rpc.hemi.network/wsrpc", "asset_type": "api", "location": "https://rpc.hemi.network/wsrpc", "group": "Hemi Network RPC" }, { "name": "https://rpc.hemi.network/noderpc", "asset_type": "api", "location": "https://rpc.hemi.network/noderpc", "group": "Hemi Network RPC" }, { "name": "https://testnet.rpc.hemi.network/rpc", "asset_type": "api", "location": "https://testnet.rpc.hemi.network/rpc", "group": "Hemi Network RPC" }, { "name": "https://testnet.rpc.hemi.network/wsrpc", "asset_type": "api", "location": "https://testnet.rpc.hemi.network/wsrpc", "group": "Hemi Network RPC" }, { "name": "https://testnet.rpc.hemi.network/noderpc", "asset_type": "api", "location": "https://testnet.rpc.hemi.network/noderpc", "group": "Hemi Network RPC" }, { "name": "https://app.hemi.xyz/", "asset_type": "website", "location": "https://app.hemi.xyz/", "group": "Hemi Applications" }, { "name": "https://explorer.hemi.xyz/", "asset_type": "website", "location": "https://explorer.hemi.xyz/", "group": "Hemi Applications" }, { "name": "https://bitcoin-kit.hemi.xyz/", "asset_type": "website", "location": "https://bitcoin-kit.hemi.xyz/", "group": "Hemi Applications" }, { "name": "https://portal-api.hemi.xyz/", "asset_type": "api", "location": "https://portal-api.hemi.xyz/", "group": "Hemi Applications APIs" }, { "name": "https://hemi.xyz/", "asset_type": "website", "location": "https://hemi.xyz/", "group": "Hemi Marketing Websites" }, { "name": "https://umami.hemi.xyz/", "asset_type": "website", "location": "https://umami.hemi.xyz/", "group": "Hemi Marketing Websites" }, { "name": "https://github.com/hemilabs/heminetwork", "asset_type": "other", "location": "https://github.com/hemilabs/heminetwork", "group": "Hemi Source Code" }, { "name": "https://github.com/hemilabs/ui-monorepo", "asset_type": "other", "location": "https://github.com/hemilabs/ui-monorepo", "group": "Hemi Source Code" }, { "name": "https://github.com/hemilabs/optimism", "asset_type": "other", "location": "https://github.com/hemilabs/optimism", "group": "Hemi Source Code" }, { "name": "https://github.com/hemilabs/op-geth", "asset_type": "other", "location": "https://github.com/hemilabs/op-geth", "group": "Hemi Source Code" }, { "name": "All unarchived non-fork repositories under https://github.com/hemilabs", "asset_type": "other", "location": "https://github.com/hemilabs", "group": "Hemi Source Code" }, { "name": "*.hemi.xyz", "asset_type": "website", "location": null, "group": "Hemi Services/Infrastructure" }, { "name": "*.hemi.network", "asset_type": "website", "location": null, "group": "Hemi Services/Infrastructure" }, { "name": "vetro.org", "asset_type": "website", "location": "https://vetro.org", "group": "Vetro" }, { "name": "app.vetro.org", "asset_type": "website", "location": "https://app.vetro.org", "group": "Vetro" }, { "name": "api.vetro.org", "asset_type": "api", "location": "https://api.vetro.org", "group": "Vetro" }, { "name": "*.vetro.org", "asset_type": "other", "location": "https://*.vetro.org", "group": "Vetro" }, { "name": "All unarchived non-fork repositories under https://github.com/vetro-protocol", "asset_type": "other", "location": "https://github.com/vetro-protocol", "group": "Vetro" }, { "name": "Third Party Provider Vulnerability", "asset_type": "other", "location": null, "group": "Third Party Providers" } ], "out_of_scope": [ { "name": "Any Atlassian Product/Service", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-1f1847755606b1cd.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-9189e65bdbd62586", "name": "Home Depot Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/home-depot-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:09Z", "scope_published_at": "2026-09-08T22:22:20.680Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/home-depot-vdp-pro/changelog/693fa647-f03e-4cd2-aa47-aaa66c3e3a9f.json" ], "in_scope": [ { "name": "*.homedepot.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.homedepot.com.mx", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.homedepot.ca", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [ { "name": "ecooptions.homedepot.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "ir.homedepot.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "corporate.homedepot.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "www.thecompanystore.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "www.proreferral.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "www.blinds.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "homedepot.egifter.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "homedepot.cashstar.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "hdmoving.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "thdloan.greenskycredit.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "www.thdloanonline.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "citiretailservices.citibankonline.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "www.retailservicescommercial.citi.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "refacing.homedepot.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "careers.homedepot.com", "asset_type": "website", "location": null, "group": "Out of Scope " } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-9189e65bdbd62586.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-c37433af4243ba18", "name": "HSBC Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/hsbc-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Banking", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:46Z", "scope_published_at": "2025-10-15T15:10:51.467Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/hsbc-vdp-pro/changelog/dc9a1241-7cf9-4b0a-adf8-4887db6bc632.json" ], "in_scope": [ { "name": "HSBC Bank plc, and all its brands and subsidiaries", "asset_type": "other", "location": null, "group": "In scope targets" } ], "out_of_scope": [ { "name": "Marks and Spencers (M&S) operations other M&S Bank", "asset_type": "other", "location": null, "group": "Out Of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-c37433af4243ba18.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-af80cc8bd809ceac", "name": "IAG Loyalty (Avios) Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/iagloyalty-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Transportation", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:28Z", "scope_published_at": "2026-05-08T13:51:53.897Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/iagloyalty-vdp-pro/changelog/26c9825f-5a8d-4657-a224-6eb4ab8828f4.json" ], "in_scope": [ { "name": "Custom Build Identity Services", "asset_type": "website", "location": "https://accounts.britishairways.com/security/", "group": "In scope" }, { "name": "www.avios.com", "asset_type": "website", "location": "https://www.avios.com/", "group": "In scope" }, { "name": "www.avios.com/api/*", "asset_type": "website", "location": "https://www.avios.com/api/", "group": "In scope" }, { "name": "www.avios.com/collect-avios/buy*", "asset_type": "website", "location": "https://www.avios.com/collect-avios/buy", "group": "In scope" }, { "name": "www.avios.com/manage-avios/move-and-combine-avios/partner*", "asset_type": "website", "location": "https://www.avios.com/manage-avios/move-and-combine-avios/partner", "group": "In scope" }, { "name": "www.avios.com/vertis*", "asset_type": "website", "location": "https://www.avios.com/vertis", "group": "In scope" }, { "name": "www.avios.com/exchange*", "asset_type": "website", "location": "https://www.avios.com/exchange*", "group": "In scope" }, { "name": "www.avios.com/spend-avios/rewards", "asset_type": "website", "location": "https://www.avios.com/spend-avios/rewards*", "group": "In scope" }, { "name": "www.avios.com/??-??/spend-avios/rewards*", "asset_type": "website", "location": null, "group": "In scope" }, { "name": "www.avios.com/spend-avios/vouchers*", "asset_type": "website", "location": "https://www.avios.com/spend-avios/vouchers*", "group": "In scope" }, { "name": "www.avios.com/??-??/collect-avios*", "asset_type": "website", "location": null, "group": "In scope" }, { "name": "www.avios.com/collect-avios*", "asset_type": "website", "location": "https://www.avios.com/collect-avios", "group": "In scope" }, { "name": "www.avios.com/??-??/spend-avios*", "asset_type": "website", "location": null, "group": "In scope" }, { "name": "www.avios.com/spend-avios*", "asset_type": "website", "location": "https://www.avios.com/spend-avios*", "group": "In scope" }, { "name": "www.avios.com/sign-up", "asset_type": "website", "location": "https://www.avios.com/sign-up", "group": "In scope" }, { "name": "stg.avios.com/move/transfer-avios/*", "asset_type": "website", "location": null, "group": "In scope" }, { "name": "www.avios.com/gc*", "asset_type": "website", "location": "https://www.avios.com/gc", "group": "In scope" }, { "name": "www.avios.com/??-??/avios-shop*", "asset_type": "website", "location": null, "group": "In scope" }, { "name": "www.avios.com/avios-shop*", "asset_type": "website", "location": "https://www.avios.com/avios-shop", "group": "In scope" }, { "name": "rewardsapp.iagl.digital/v3", "asset_type": "api", "location": "https://rewardsapp.iagl.digital/v3", "group": "In scope" }, { "name": "thewineflyer.co.uk", "asset_type": "website", "location": "https://thewineflyer.co.uk/", "group": "In scope" }, { "name": "developer.iagloyalty.com", "asset_type": "website", "location": "https://developer.iagloyalty.com/", "group": "In scope" }, { "name": "Avios Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.usablenet.ba.avios", "group": "In scope" }, { "name": "Avios iOS App", "asset_type": "ios", "location": "https://apps.apple.com/es/app/avios-shop-collect-travel/id1388235740", "group": "In scope" }, { "name": "holiday.britishairways.com", "asset_type": "website", "location": "https://holiday.britishairways.com", "group": "In scope" }, { "name": "estore.aerlingus.com", "asset_type": "website", "location": "https://estore.aerlingus.com/en-IE/retailers", "group": "In scope" }, { "name": "pgt.estore.aerlingus.com", "asset_type": "website", "location": "https://pgt.estore.aerlingus.com", "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-af80cc8bd809ceac.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-f1e469c7b87bc83f", "name": "IAG Transform Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/iag-transform-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Transportation", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:29Z", "scope_published_at": "2026-09-29T12:48:40.077Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/iag-transform-vdp-pro/changelog/04799316-ac45-47bf-b1e4-bb6641147f74.json" ], "in_scope": [ { "name": "*.iaggbs.com", "asset_type": "website", "location": "https://iaggbs.com/", "group": "In scope" }, { "name": "*.iairgroup.com", "asset_type": "website", "location": "https://iairgroup.com/", "group": "In scope" }, { "name": "*.iag.ai", "asset_type": "other", "location": "https://iag.ai/", "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-f1e469c7b87bc83f.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-0c5cf30568bd0447", "name": "Insignia Financial Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/insigniafinancial", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:29Z", "scope_published_at": "2026-08-25T03:31:30.180Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/insigniafinancial/changelog/13bf421e-07b2-449b-93d0-a9972c283f49.json" ], "in_scope": [ { "name": "www.insigniafinancial.com.au", "asset_type": "website", "location": "https://www.insigniafinancial.com.au", "group": "In Scope Targets" }, { "name": "www.mlc.com.au", "asset_type": "website", "location": "https://www.mlc.com.au/", "group": "In Scope Targets" }, { "name": "www.bridges.com.au", "asset_type": "website", "location": "https://www.bridges.com.au", "group": "In Scope Targets" }, { "name": "www.sfg.com.au", "asset_type": "website", "location": "https://www.sfg.com.au/", "group": "In Scope Targets" }, { "name": "www.mlcam.com.au", "asset_type": "website", "location": "https://www.mlcam.com.au/", "group": "In Scope Targets" }, { "name": "www.antarescapital.com.au", "asset_type": "website", "location": "https://www.antarescapital.com.au/", "group": "In Scope Targets" }, { "name": "hub.anzsmartchoice.com.au", "asset_type": "website", "location": "https://hub.anzsmartchoice.com.au/", "group": "In Scope Targets" }, { "name": "dataservices.ioof.com.au", "asset_type": "website", "location": "https://dataservices.ioof.com.au/", "group": "In Scope Targets" }, { "name": "ddo.ioof.com.au", "asset_type": "website", "location": "https://ddo.ioof.com.au", "group": "In Scope Targets" }, { "name": "www.ioof.com.au", "asset_type": "website", "location": "https://www.ioof.com.au", "group": "In Scope Targets" }, { "name": "mlcmoneyview.mlc.com.au", "asset_type": "website", "location": "https://mlcmoneyview.mlc.com.au/wc/#/onboarding/couponCode", "group": "In Scope Targets" }, { "name": "referralportal.bridges.com.au", "asset_type": "website", "location": "https://referralportal.bridges.com.au/", "group": "In Scope Targets" }, { "name": "revenue.ioofonline.com.au", "asset_type": "website", "location": "https://revenue.ioofonline.com.au/", "group": "In Scope Targets" }, { "name": "www.wealthreport.com.au", "asset_type": "website", "location": "https://www.wealthreport.com.au", "group": "In Scope Targets" }, { "name": "www.plum.com.au/", "asset_type": "website", "location": "https://www.plum.com.au/", "group": "In Scope Targets" }, { "name": "www.wealthreport.bridges.com.au/", "asset_type": "website", "location": "https://wealthreport.bridges.com.au/", "group": "In Scope Targets" }, { "name": "wealthreport.consultum.com.au", "asset_type": "website", "location": "https://wealthreport.consultum.com.au/", "group": "In Scope Targets" }, { "name": "www.wealthreport.lonsdale.com.au", "asset_type": "website", "location": "https://wealthreport.lonsdale.com.au", "group": "In Scope Targets" }, { "name": "www.riwealthreport.com", "asset_type": "website", "location": "https://www.riwealthreport.com", "group": "In Scope Targets" }, { "name": "myexpand.com.au", "asset_type": "website", "location": "https://www.myexpand.com.au/", "group": "In Scope Targets" }, { "name": "www.wealthreport.sfg.com.au/", "asset_type": "website", "location": "https://wealthreport.sfg.com.au/", "group": "In Scope Targets" }, { "name": "www.wealthreport.com.au/alliances#", "asset_type": "website", "location": "https://www.wealthreport.com.au/alliances#", "group": "In Scope Targets" }, { "name": "www.cornerstoneportfolioservice.com.au", "asset_type": "website", "location": "https://www.cornerstoneportfolioservice.com.au/", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "*.ioof.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.mlc.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.plum.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.bridges.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.sfg.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.anzsmartchoice.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.insigniafinancial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.myexpand.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*. cornerstoneportfolioservice.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-0c5cf30568bd0447.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-4ceada98a80e3b3a", "name": "Inter-American Foundation - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/iaf-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:11Z", "scope_published_at": "2022-12-13T23:54:37.280Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/iaf-vdp/changelog/be93950f-8e03-4d64-9b15-a68c162de270.json" ], "in_scope": [ { "name": "*iaf.gov", "asset_type": "website", "location": null, "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-4ceada98a80e3b3a.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-5e7a19b68af96f6b", "name": "InterWell Health Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/interwell-health-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Healthcare", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:24Z", "scope_published_at": "2025-11-04T16:02:56.597Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/interwell-health-vdp-pro/changelog/ba5d287e-54fe-4063-acfd-5690977eaba2.json" ], "in_scope": [ { "name": "Interwell Health.com", "asset_type": "website", "location": "https://www.interwellhealth.com/", "group": "In Scope" }, { "name": "Acumenmd.com", "asset_type": "website", "location": "https://www.interwellhealth.com/what-we-offer/acumen-epic-connect", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-5e7a19b68af96f6b.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-e1b6b9e178643936", "name": "JLL Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/jll-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Real Estate", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:41Z", "scope_published_at": "2026-06-02T15:07:43.588Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/jll-vdp-pro/changelog/8b189f30-aa6b-47a4-b050-f6e9c588de1c.json" ], "in_scope": [ { "name": "https://www.us.jll.com/en/locations", "asset_type": "website", "location": "https://www.us.jll.com/en/locations", "group": "In Scope" }, { "name": "*.jll.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.jllt.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.corrigo-qa.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.corrigopro-qa.com", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-e1b6b9e178643936.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-a7f76b9001605f74", "name": "Keurig Dr Pepper Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/keurigdrpepper-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Food and Beverage", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:18Z", "scope_published_at": "2026-02-11T01:53:35.094Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/keurigdrpepper-vdp-pro/changelog/f29b3733-ccbf-439f-86ee-bdb073924ebd.json" ], "in_scope": [ { "name": "https://commercial.keurig.com/", "asset_type": "website", "location": "https://commercial.keurig.com/", "group": "In Scope " }, { "name": "https://www.keurig.com/", "asset_type": "website", "location": "https://www.keurig.com/", "group": "In Scope " }, { "name": "https://www.keurig.ca", "asset_type": "website", "location": "https://www.keurig.ca", "group": "In Scope " }, { "name": "All Keurig Dr Pepper Related Assets", "asset_type": "website", "location": null, "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-a7f76b9001605f74.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-ca86c25123ba829e", "name": "Kick Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/kick-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:19Z", "scope_published_at": "2026-02-05T18:00:00.524Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/kick-vdp-pro/changelog/568af31a-6e2d-4e89-8088-21f301079141.json" ], "in_scope": [ { "name": "https://kick.com", "asset_type": "website", "location": "https://kick.com/", "group": "In Scope" }, { "name": "Kick Mobile App iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/kick-live-streaming/id6446202561", "group": "In Scope" }, { "name": "Kick Mobile App Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.kick.mobile&hl=en_US", "group": "In Scope" }, { "name": "https://apps.apple.com/us/app/kick-go-live/id6743709514", "asset_type": "ios", "location": "https://apps.apple.com/us/app/kick-go-live/id6743709514", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-ca86c25123ba829e.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-5e6726836cb104fd", "name": "Kinaxis Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/kinaxis-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:12Z", "scope_published_at": "2026-07-21T18:00:02.787Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/kinaxis-vdp-pro/changelog/03997f62-b87f-48d5-92cc-7d4e0438df87.json" ], "in_scope": [ { "name": "*.kinaxis.com/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.kinaxis.net/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.ai.kinaxis.net", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*vpn*.kinaxis.com", "asset_type": "website", "location": null, "group": "In Scope " } ], "out_of_scope": [ { "name": "Anything not explicity listed as 'In Scope'", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-5e6726836cb104fd.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-77c0d0ae60e884b2", "name": "Kmart Group (Kmart, Target) Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/kmartaustralia-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Retail", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:07Z", "scope_published_at": "2026-09-16T05:58:32.674Z", "scope_group_count": 4, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/kmartaustralia-vdp-pro/changelog/99ddabca-887f-4f9a-8230-3810e9cf08ae.json" ], "in_scope": [ { "name": "https://kmart.com.au", "asset_type": "website", "location": "https://kmart.com.au/", "group": "Kmart Online Australia" }, { "name": "Kmart Mobile Application - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=au.com.kmart", "group": "Kmart Mobile Application" }, { "name": "Kmart Mobile Application - iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/kmart/id1611129681", "group": "Kmart Mobile Application" }, { "name": "https://target.com.au", "asset_type": "website", "location": "https://target.com.au", "group": "Target Online Australia " }, { "name": "Target Mobile App - iOS", "asset_type": "ios", "location": "https://apps.apple.com/app/apple-store/id440622971", "group": "Target Mobile Application" }, { "name": "Target Mobile App - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.lasoo.android.target", "group": "Target Mobile Application" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-77c0d0ae60e884b2.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-4ebefa556cae109d", "name": "Labcorp's Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/labcorp-vdp1", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:49Z", "scope_published_at": "2025-04-29T12:56:25.078Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/labcorp-vdp1/changelog/2d1e29ad-4d02-4c08-bcbf-d0be1e426560.json" ], "in_scope": [ { "name": "Any assets that belong to Labcorp", "asset_type": "website", "location": "https://www.labcorp.com/", "group": "In Scope" }, { "name": "Labcorp iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/labcorp-patient/id1361264072", "group": "In Scope" }, { "name": "Labcorp Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.labcorp.patientportal", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-4ebefa556cae109d.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-7b00f3e4451f80fe", "name": "Latitude Financial Services Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/latitudefinancial-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:32Z", "scope_published_at": "2025-11-19T16:29:10.825Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 6, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/latitudefinancial-vdp/changelog/b9503a26-7ba3-4be1-bac1-824c4c8d5d0e.json" ], "in_scope": [ { "name": "██████████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "███████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "█████████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "██████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "██████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "█████████████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "███████████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "██████████████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "█████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "████████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "██████████████████████████", "asset_type": "api", "location": null, "group": "████████████████" }, { "name": "███████████████████████", "asset_type": "api", "location": null, "group": "████████████████" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-7b00f3e4451f80fe.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review.", "6 repeated rows in the published table were collapsed in this catalog." ] }, { "id": "bugcrowd-7629677d39ad433c", "name": "Ledn Vulnerability Disclosure Pro Engagement", "program_url": "https://bugcrowd.com/engagements/ledn-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:15Z", "scope_published_at": "2026-06-16T20:13:01.125Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ledn-vdp-pro/changelog/bf01f2f2-9796-4564-9dd8-7745f33c41bc.json" ], "in_scope": [ { "name": "Ledn Platform", "asset_type": "website", "location": "https://platform.ledn.io", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-7629677d39ad433c.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-1094fe4db4d801c3", "name": "LegalZoom VDP", "program_url": "https://bugcrowd.com/engagements/legalzoom-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:22Z", "scope_published_at": "2025-07-01T15:48:48.768Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/legalzoom-vdp/changelog/f8b0ec91-e718-4113-a1a2-361e235f9389.json" ], "in_scope": [ { "name": "*.legalzoom.com", "asset_type": "website", "location": "https://legalzoom.com", "group": "In-Scope Targets" }, { "name": "*portal.legalinc.com", "asset_type": "website", "location": "https://portal.legalinc.com", "group": "In-Scope Targets" }, { "name": "*.earthclassmail.com", "asset_type": "website", "location": "https://earthclassmail.com", "group": "In-Scope Targets" }, { "name": "*.lzlegalservices.com", "asset_type": "website", "location": "https://lzlegalservices.com", "group": "In-Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-1094fe4db4d801c3.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-fe6d5bc8fef13cfb", "name": "Lenovo Responsible Disclosure", "program_url": "https://bugcrowd.com/engagements/lenovoresponsibledisclosure", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:49Z", "scope_published_at": "2020-04-08T19:15:03.690Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/lenovoresponsibledisclosure/changelog/f2e4e2fd-1a50-41f2-af8f-e15eb10d44c9.json" ], "in_scope": [ { "name": "*.motorola.com.br", "asset_type": "website", "location": null, "group": "In scope" }, { "name": "*.motorola.com.cn", "asset_type": "website", "location": null, "group": "In scope" }, { "name": "*.motorola.com", "asset_type": "website", "location": null, "group": "In scope" }, { "name": "*.lenovo.com.cn", "asset_type": "website", "location": null, "group": "In scope" }, { "name": "*.lenovo.com", "asset_type": "website", "location": null, "group": "In scope" }, { "name": "*. lenovomm.com", "asset_type": "website", "location": null, "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-fe6d5bc8fef13cfb.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-626ab5ec1ed8c0b9", "name": "LTK Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/ltk-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:23Z", "scope_published_at": "2026-05-06T16:51:54.668Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ltk-vdp-pro/changelog/0155df4c-da86-44f0-adec-d3407d5d508e.json" ], "in_scope": [ { "name": "LTK Brand Platform", "asset_type": "website", "location": "https://brands.rewardstyle.com/", "group": "In‑Scope Targets" }, { "name": "LTK Creator Web App", "asset_type": "website", "location": "https://creator.shopltk.com/", "group": "In‑Scope Targets" }, { "name": "LTK Shopper/Consumer Web App", "asset_type": "website", "location": "https://creator.shopltk.com/", "group": "In‑Scope Targets" }, { "name": "LTK Mobile App (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.rewardstyle.liketoknowit", "group": "In‑Scope Targets" }, { "name": "LTK Shopper/Consumer Mobile App (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/liketoknow-it/id1154027990", "group": "In‑Scope Targets" }, { "name": "LTK Creator Mobile App (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/ltk-creator-influencer-tools/id632918824", "group": "In‑Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-626ab5ec1ed8c0b9.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-a5738a5f17e0c95b", "name": "Lucid Motors Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/lucidmotors-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:25Z", "scope_published_at": "2026-01-20T01:28:44.767Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/lucidmotors-vdp/changelog/2072dc5e-3e60-414e-9642-4228c9f7e687.json" ], "in_scope": [ { "name": "www.lucidmotors.com", "asset_type": "website", "location": "https://www.lucidmotors.com", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "All Internal Applications", "asset_type": "website", "location": null, "group": "Out Of Scope " } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-a5738a5f17e0c95b.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-565e1101006fd714", "name": "Lumen VDP", "program_url": "https://bugcrowd.com/engagements/lumenvdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:26Z", "scope_published_at": "2026-09-10T13:58:44.933Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/lumenvdp/changelog/798c8b8b-e02c-4abd-91a1-f8bb53aca527.json" ], "in_scope": [ { "name": "lumen.com", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "centurylink.com", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "level3.com", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "ctl.io", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "savvis.com", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "*.lumen.com", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [ { "name": "LATAM.lumen.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "lumenb1.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "rtn04.lumen.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.lumen.net", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "ease*.lumen.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-565e1101006fd714.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-eea0c59a12298ac4", "name": "Macquarie Group Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/macquarie-group-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:28Z", "scope_published_at": "2026-10-02T05:44:07.890Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/macquarie-group-vdp/changelog/da1978e1-ed3f-437b-8a19-7003927c6338.json" ], "in_scope": [ { "name": "https://macquarie.com/*", "asset_type": "website", "location": "https://www.macquarie.com/", "group": "In Scope" }, { "name": "https://www.metromartinplace.com/", "asset_type": "website", "location": "https://www.metromartinplace.com/", "group": "In Scope" }, { "name": "https://www.1elizabeth.com.au/", "asset_type": "website", "location": "https://www.1elizabeth.com.au/", "group": "In Scope" }, { "name": "https://www.fibramacquarie.com/", "asset_type": "website", "location": "https://www.fibramacquarie.com/", "group": "In Scope" }, { "name": "https://www.mkif.com", "asset_type": "website", "location": "https://www.mkif.com", "group": "In Scope" }, { "name": "https://www.greeninvestmentgroup.com/", "asset_type": "website", "location": "https://www.greeninvestmentgroup.com/", "group": "In Scope" }, { "name": "https://www.macquarie.aero/", "asset_type": "website", "location": "https://www.macquarie.aero/", "group": "In Scope" }, { "name": "https://www.reversemortgageservices.com.au/", "asset_type": "website", "location": "https://www.reversemortgageservices.com.au/", "group": "In Scope" }, { "name": "https://www.medicalstudentloantrust.com/", "asset_type": "website", "location": "https://www.medicalstudentloantrust.com/", "group": "In Scope" }, { "name": "https://www.avertas.com.au", "asset_type": "website", "location": "https://avertas.com.au", "group": "In Scope" }, { "name": "*yourlease.com.au", "asset_type": "website", "location": "https://www.yourlease.com.au/", "group": "In Scope" }, { "name": "https://www.fibramacquarie.com", "asset_type": "website", "location": "https://fibramacquarie.com", "group": "In Scope" }, { "name": "*macquarie.com.au", "asset_type": "website", "location": "https://macquarie.com.au", "group": "In Scope" }, { "name": "https://www.micnic.com", "asset_type": "website", "location": "https://www.micnic.com", "group": "In Scope" }, { "name": "https://www.mirafunds.com", "asset_type": "website", "location": "https://www.mirafunds.com", "group": "In Scope" }, { "name": "https://www.coopersquarefund.com", "asset_type": "website", "location": "https://www.coopersquarefund.com", "group": "In Scope" }, { "name": "https://www.macquarieim.com", "asset_type": "website", "location": "https://www.macquarieim.com/", "group": "In Scope" }, { "name": "https://www.centralparkgroup.com", "asset_type": "website", "location": "https://www.centralparkgroup.com", "group": "In Scope" }, { "name": "https://www.martinplacemetro.com", "asset_type": "website", "location": "https://www.martinplacemetro.com", "group": "In Scope" }, { "name": "http://fleete.com/", "asset_type": "website", "location": "http://fleete.com/", "group": "In Scope" }, { "name": "https://warrants.com.hk", "asset_type": "website", "location": "https://warrants.com.hk", "group": "In Scope" }, { "name": "http://malaysiawarrants.com.my/", "asset_type": "website", "location": "http://malaysiawarrants.com.my", "group": "In Scope" }, { "name": "http://warrants.com.sg/", "asset_type": "website", "location": "http://warrants.com.sg/", "group": "In Scope" }, { "name": "https://portal.propertyiq.com.au", "asset_type": "website", "location": "https://portal.propertyiq.com.au", "group": "In Scope" }, { "name": "piqplus.propertyiq.com.au", "asset_type": "website", "location": "https://piqplus.propertyiq.com.au", "group": "In Scope" }, { "name": "api.propertyiq.com.au", "asset_type": "api", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-eea0c59a12298ac4.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-abca5c5b07e8b5c1", "name": "Marqeta Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/marqeta-vdp-public", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:39Z", "scope_published_at": "2025-06-12T17:47:29.262Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/marqeta-vdp-public/changelog/6a556340-6363-4d6f-a936-528162544713.json" ], "in_scope": [ { "name": "https://*.marqeta.com", "asset_type": "website", "location": "https://*.marqeta.com", "group": "In Scope Targets" }, { "name": "https://*.marqeta.io", "asset_type": "website", "location": "https://*.marqeta.io", "group": "In Scope Targets" }, { "name": "https://*.marqeta-dev.org", "asset_type": "website", "location": "https://*.marqeta-dev.org", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "https://community.marqeta.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-abca5c5b07e8b5c1.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-0a3150264aab4dfa", "name": "McDonald's Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/mcdonalds", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Food and Beverage", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:18Z", "scope_published_at": "2026-03-12T20:20:42.060Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/mcdonalds/changelog/71717aae-178d-4ae9-861f-390d797fc821.json" ], "in_scope": [ { "name": "*mcd.com", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*mcdonalds.com", "asset_type": "website", "location": null, "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-0a3150264aab4dfa.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-fb954472edaadf7b", "name": "McKesson Vulnerability Disclosure Program (VDP) Engagement", "program_url": "https://bugcrowd.com/engagements/mckesson-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Healthcare", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:32Z", "scope_published_at": "2026-05-26T21:11:15.525Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/mckesson-vdp-pro/changelog/0d6ff531-4ecf-45ab-9aad-dcda11cec701.json" ], "in_scope": [ { "name": "*.accesshealth.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.access-health.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.activatethecard.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.akiracares.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.alliancecancer.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.cancercenterofkansas.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.cascademedicalsupply.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.clarusonesourcing.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.clearvalueplus.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.cmoh.org/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.covermymeds.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.cypressmed.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.epic-care.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.fcms.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.fosterandthrive.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.genospace.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.groupeproxim.ca/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.guardian-ida-remedysrx.ca/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.healthmart.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.infolabinc.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.inviva.ca/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.labsco.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.legislink.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.linearsolutions.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.macrohelix.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.mastersrx.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.mckesson.ca/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.mckesson.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.mckesson.net/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.mckessoncompile.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.mckessonhosting.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.mckessonideashare.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.mckessonpharmacysystems.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.medicineshoppe.ca/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.mhiapps.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.mooremedical.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.nccindiana.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.nextdaymed.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.northstarrxllc.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.ohcare.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.ontada.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.ontadahealth.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.ophthalmicdirect.ca/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.palmettomedicalsupply.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.pathwaypurchasing.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.petimagingok.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.pdci.ca/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.plasticsurgeryconsultants.net/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.proclaimams.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.providerpay.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.pssd.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.relayhealth.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.regionalcancercare.org/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.rxcrossroads..com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.rxlightning-demo.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.rxownership.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.rxsavingssolutions.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.rxss.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.sarahcannonresearch.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.scri.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.southerncancercenter.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.supplylogix.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.tcrsurgeons.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.tncancer.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.uniprix.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.uniprix.net/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.usoncology.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" }, { "name": "*.woodlandsmed.com/*", "asset_type": "website", "location": null, "group": "In Scope Asset Group" } ], "out_of_scope": [ { "name": "*.ben-mms-uat.mckesson.com/*", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "*.ben-mms.mckesson.com/*", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "*.mckesson.stg.amelia.com/*", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "*.mckesson.amelia.com/*", "asset_type": "website", "location": null, "group": "Out of Scope " } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-fb954472edaadf7b.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-1c49604c4f41bc09", "name": "Millennium Challenge Corporation: Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/mcc-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:35Z", "scope_published_at": "2021-09-03T04:13:10.427Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/mcc-vdp/changelog/acebb836-b601-4de6-85ce-755601ad0046.json" ], "in_scope": [ { "name": "https://www.mcc.gov/", "asset_type": "website", "location": "https://www.mcc.gov/", "group": "In Scope" }, { "name": "*.mcc.gov/", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-1c49604c4f41bc09.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-aac137ad807c42ac", "name": "Minnesota Secretary of State VDP", "program_url": "https://bugcrowd.com/engagements/mn-secretary-of-state-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:10Z", "scope_published_at": "2024-03-20T17:45:39.008Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/mn-secretary-of-state-vdp/changelog/a59017b7-0667-4b14-821b-107e76a4f9f4.json" ], "in_scope": [ { "name": "https://electionresults.sos.state.mn.us", "asset_type": "website", "location": "https://electionresults.sos.state.mn.us", "group": "In Scope Public Facing Web Presence " }, { "name": "https://electionresults.sos.mn.gov", "asset_type": "website", "location": "https://electionresults.sos.mn.gov/", "group": "In Scope Public Facing Web Presence " }, { "name": "https://electionresultsfiles.sos.state.mn.us (election result text files)", "asset_type": "other", "location": "https://electionresultsfiles.sos.state.mn.us", "group": "In Scope Public Facing Web Presence " }, { "name": "https://electionresultsfiles.sos.mn.gov (election result text files)", "asset_type": "other", "location": "https://electionresultsfiles.sos.mn.gov", "group": "In Scope Public Facing Web Presence " }, { "name": "www.sos.state.mn.us", "asset_type": "website", "location": "https://www.sos.state.mn.us", "group": "In Scope Public Facing Web Presence " }, { "name": "www.sos.mn.gov", "asset_type": "website", "location": "https://www.sos.mn.gov", "group": "In Scope Public Facing Web Presence " }, { "name": "mnvotes.sos.mn.gov", "asset_type": "website", "location": "https://mnvotes.sos.mn.gov", "group": "In Scope Public Facing Web Presence " }, { "name": "https://apostille.sos.state.mn.us", "asset_type": "website", "location": "https://apostille.sos.state.mn.us", "group": "In Scope Public Facing Web Presence " }, { "name": "https://apostille.sos.mn.gov", "asset_type": "website", "location": "https://apostille.sos.mn.gov", "group": "In Scope Public Facing Web Presence " }, { "name": "https://commoncontent.sos.mn.gov (domain for static web assets)", "asset_type": "website", "location": "https://commoncontent.sos.mn.gov", "group": "In Scope Public Facing Web Presence " }, { "name": "https://commoncontent.sos.state.mn.us (domain for static web assets)", "asset_type": "website", "location": "https://commoncontent.sos.state.mn.us", "group": "In Scope Public Facing Web Presence " }, { "name": "https://notary.sos.mn.gov", "asset_type": "website", "location": "https://notary.sos.mn.gov/", "group": "In Scope Public Facing Web Presence " }, { "name": "https://notary.sos.state.mn.us", "asset_type": "website", "location": "https://notary.sos.state.mn.us/", "group": "In Scope Public Facing Web Presence " }, { "name": "https://officialdocuments.sos.mn.gov", "asset_type": "website", "location": "https://officialdocuments.sos.mn.gov", "group": "In Scope Public Facing Web Presence " }, { "name": "https://officialdocuments.sos.state.mn.us", "asset_type": "website", "location": "https://officialdocuments.sos.state.mn.us", "group": "In Scope Public Facing Web Presence " }, { "name": "mblsportal.sos.state.mn.us", "asset_type": "website", "location": "https://mblsportal.sos.state.mn.us", "group": "In Scope Public Facing Web Presence " }, { "name": "mblsportal.sos.mn.gov", "asset_type": "website", "location": "https://mblsportal.sos.mn.gov", "group": "In Scope Public Facing Web Presence " }, { "name": "commissionsandappointments.sos.state.mn.us", "asset_type": "website", "location": "https://commissionsandappointments.sos.state.mn.us", "group": "In Scope Public Facing Web Presence " }, { "name": "commissionsandappointments.sos.mn.gov", "asset_type": "website", "location": "https://commissionsandappointments.sos.mn.gov", "group": "In Scope Public Facing Web Presence " }, { "name": "pollfinder.sos.state.mn.us", "asset_type": "website", "location": "https://pollfinder.sos.state.mn.us", "group": "In Scope Public Facing Web Presence " }, { "name": "pollfinder.sos.mn.gov", "asset_type": "website", "location": "https://pollfinder.sos.mn.gov", "group": "In Scope Public Facing Web Presence " }, { "name": "myballotmn.sos.state.mn.us", "asset_type": "website", "location": "https://myballotmn.sos.state.mn.us", "group": "In Scope Public Facing Web Presence " }, { "name": "myballotmn.sos.mn.gov", "asset_type": "website", "location": "https://myballotmn.sos.mn.gov", "group": "In Scope Public Facing Web Presence " }, { "name": "caucusfinder.sos.state.mn.us", "asset_type": "website", "location": "https://caucusfinder.sos.state.mn.us", "group": "In Scope Public Facing Web Presence " }, { "name": "caucusfinder.sos.mn.gov", "asset_type": "website", "location": "https://caucusfinder.sos.mn.gov", "group": "In Scope Public Facing Web Presence " }, { "name": "candidates.sos.state.mn.us", "asset_type": "website", "location": "https://candidates.sos.state.mn.us", "group": "In Scope Public Facing Web Presence " }, { "name": "candidates.sos.mn.gov", "asset_type": "website", "location": "https://candidates.sos.mn.gov", "group": "In Scope Public Facing Web Presence " }, { "name": "mnvotes.sos.state.mn.us", "asset_type": "website", "location": "https://mnvotes.sos.state.mn.us", "group": "In Scope Public Facing Web Presence " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-aac137ad807c42ac.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-38c97d24fdf159da", "name": "Monash University Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/monash-esf", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Education", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:44Z", "scope_published_at": "2026-01-20T00:39:37.422Z", "scope_group_count": 4, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/monash-esf/changelog/a0c0b96f-e254-445f-96b1-136f5c889199.json" ], "in_scope": [ { "name": "*.monash.edu", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.erc.monash.edu", "asset_type": "website", "location": null, "group": "Monash eResearch Center" }, { "name": "*.monash.edu.my", "asset_type": "other", "location": "https://*.monash.edu.my", "group": "Monash University Malaysia" }, { "name": "*.mcpl.edu.au", "asset_type": "website", "location": "http://*.mcpl.edu.au", "group": "Monash Collage" }, { "name": "*.monashcollege.edu.au", "asset_type": "website", "location": "http://*.monashcollege.edu.au", "group": "Monash Collage" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-38c97d24fdf159da.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-7cf047ea05caec15", "name": "NAB's Responsible Disclosure Program", "program_url": "https://bugcrowd.com/engagements/nationalaustraliabankog", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "P1 24/7", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:50Z", "scope_published_at": "2025-03-18T07:20:03.887Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/nationalaustraliabankog/changelog/3a9c7c4e-e38d-4a5d-9a95-1a568d3349bf.json" ], "in_scope": [ { "name": "*.nab.com.au", "asset_type": "website", "location": null, "group": "In Scope Targets " }, { "name": "*.jbwere.com.au", "asset_type": "website", "location": null, "group": "In Scope Targets " }, { "name": "*.medfin.com.au", "asset_type": "website", "location": null, "group": "In Scope Targets " }, { "name": "*.nabbroker.com.au", "asset_type": "website", "location": null, "group": "In Scope Targets " }, { "name": "*.nabequitylending.com.au", "asset_type": "website", "location": null, "group": "In Scope Targets " }, { "name": "*.nabmarginlending.com.au", "asset_type": "website", "location": null, "group": "In Scope Targets " }, { "name": "*.nabtrade.com.au", "asset_type": "website", "location": null, "group": "In Scope Targets " }, { "name": "*.ubank.com.au", "asset_type": "website", "location": null, "group": "In Scope Targets " }, { "name": "*.86400.com.au", "asset_type": "website", "location": null, "group": "In Scope Targets " }, { "name": "*.claiming.com.au", "asset_type": "website", "location": null, "group": "In Scope Targets " }, { "name": "*.lanternpay.com", "asset_type": "website", "location": null, "group": "In Scope Targets " }, { "name": "*.advantedge.com.au", "asset_type": "website", "location": null, "group": "In Scope Targets " }, { "name": "*.hicaps.com.au", "asset_type": "website", "location": null, "group": "In Scope Targets " }, { "name": "cards.koganmoney.com.au", "asset_type": "website", "location": null, "group": "In Scope Targets " }, { "name": "*.globalfintechlink.com", "asset_type": "website", "location": null, "group": "In Scope Targets " }, { "name": "Any other assets that appear to belong to NAB Group", "asset_type": "other", "location": null, "group": "In Scope Targets " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-7cf047ea05caec15.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-ec0cf9c95db08ebd", "name": "National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/nasa-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:07Z", "scope_published_at": "2026-05-01T20:24:52.269Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/nasa-vdp/changelog/111f077e-65a4-4bd8-9b67-940c7d2ea20f.json" ], "in_scope": [ { "name": "https://nasa.gov", "asset_type": "website", "location": "https://www.nasa.gov", "group": "In Scope " }, { "name": "https://usgeo.gov/", "asset_type": "website", "location": "https://usgeo.gov/", "group": "In Scope " }, { "name": "https://globe.gov/", "asset_type": "website", "location": "https://globe.gov/", "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-ec0cf9c95db08ebd.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-f879c07b1a6c1d3c", "name": "National Credit Union Administration (NCUA) Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/ncua-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:36Z", "scope_published_at": "2025-04-09T18:39:20.659Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ncua-vdp/changelog/18460de2-e172-4c0a-808d-6b164d19be46.json" ], "in_scope": [ { "name": "*.ncua.gov", "asset_type": "website", "location": "https://*.ncua.gov", "group": "In Scope Targets" }, { "name": "*.mycreditunion.gov", "asset_type": "website", "location": "https://*.mycreditunion.gov", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-f879c07b1a6c1d3c.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-44dd6d0545553be0", "name": "National Football League (NFL) Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/nfl-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Media", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:50Z", "scope_published_at": "2026-09-11T14:25:57.929Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/nfl-vdp-pro/changelog/b022dbc5-a166-483d-adae-2b7d6cf9aa79.json" ], "in_scope": [ { "name": "https://*.nfl.com/", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "NFL iOS Mobile App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/nfl/id389781154", "group": "In Scope" }, { "name": "NFL OnePass Mobile App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/nfl-onepass/id1456010454", "group": "In Scope" }, { "name": "NFL Events Mobile App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/nfl-events/id1494588053", "group": "In Scope" }, { "name": "NFL Andriod Mobile App", "asset_type": "android", "location": "https://play.google.com/store/search?q=nfl&c=apps&hl=en_US", "group": "In Scope" }, { "name": "Any host verified to be owned by NFL Enterprises LLC", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-44dd6d0545553be0.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-7450daba086d6421", "name": "National Indian Gaming Commission", "program_url": "https://bugcrowd.com/engagements/nigc-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:53Z", "scope_published_at": "2024-04-11T21:15:05.249Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/nigc-vdp/changelog/ddde0094-8df8-42a3-9c91-479f245fa922.json" ], "in_scope": [ { "name": "*.nigc.gov", "asset_type": "website", "location": null, "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-7450daba086d6421.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-ab85491a5d994c11", "name": "National Labor Relations Board: Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/nlrb-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:38Z", "scope_published_at": "2021-07-28T16:25:07.605Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/nlrb-vdp/changelog/ef645cb3-59ee-4f97-8f8f-5da188233d0a.json" ], "in_scope": [ { "name": "*.NLRB.gov", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-ab85491a5d994c11.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-6ef4a4b54cfa2e8a", "name": "National Park Service", "program_url": "https://bugcrowd.com/engagements/nps-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:06Z", "scope_published_at": "2024-04-30T12:43:34.757Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/nps-vdp/changelog/fdb60014-3864-46a0-bd4c-dcf1fed7d8ad.json" ], "in_scope": [ { "name": "*.nps.gov", "asset_type": "website", "location": "https://*.nps.gov", "group": "In Scope Targets" }, { "name": "*.everykidoutdoors.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.sierrawild.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.volunteer.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-6ef4a4b54cfa2e8a.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-6900e29439c8992b", "name": "National Science Foundation - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/nsf-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:03Z", "scope_published_at": "2023-08-17T01:56:17.115Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/nsf-vdp/changelog/36c2257e-864b-4187-bcd5-35f2fefcb37a.json" ], "in_scope": [ { "name": "*.nsf.gov", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.research.gov", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.sac.gov", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.usap.gov", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "Anything not explicitly listed as 'In Scope'", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-6900e29439c8992b.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-f1bb7ea38a43f7f1", "name": "National Transportation Safety Board: Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/ntsb-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:20Z", "scope_published_at": "2022-09-22T16:52:25.712Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ntsb-vdp/changelog/816cbc67-ca40-41c6-963b-b0bf68ea719b.json" ], "in_scope": [ { "name": "*.ntsb.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-f1bb7ea38a43f7f1.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-43ac52ea8dc25024", "name": "New Balance VDP", "program_url": "https://bugcrowd.com/engagements/newbalance-vdppro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:33Z", "scope_published_at": "2026-07-16T13:26:22.714Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/newbalance-vdppro/changelog/f01c2a8a-a4b8-4c03-af44-c8ddff662dc0.json" ], "in_scope": [ { "name": "https://*.newbalance.*", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [ { "name": "Excludes Family Brands: Warrior and Brine", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-43ac52ea8dc25024.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-c5afa41cc99047fe", "name": "Nine Entertainment Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/nine-entertainment-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:16Z", "scope_published_at": "2026-08-18T06:37:14.334Z", "scope_group_count": 4, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/nine-entertainment-vdp-pro/changelog/42a9fc6e-c032-4b64-a085-4fb5ac457a6b.json" ], "in_scope": [ { "name": "Any Nine owned asset", "asset_type": "website", "location": "https://www.nineforbrands.com.au/brands/", "group": "Nine Entertainment - In-Scope" }, { "name": "adonline.com.au", "asset_type": "website", "location": "https://adonline.com.au", "group": "Nine Entertainment - In-Scope" }, { "name": "advertisers.com.au", "asset_type": "website", "location": "https://advertisers.com.au", "group": "Nine Entertainment - In-Scope" }, { "name": "mi9.com.au", "asset_type": "website", "location": "https://mi9.com.au", "group": "Nine Entertainment - In-Scope" }, { "name": "nine.com.au", "asset_type": "website", "location": "https://nine.com.au", "group": "Nine Entertainment - In-Scope" }, { "name": "nineentertainmentco.com.au", "asset_type": "website", "location": "https://nineentertainmentco.com.au", "group": "Nine Entertainment - In-Scope" }, { "name": "ninemediaroom.com.au", "asset_type": "website", "location": "https://ninemediaroom.com.au", "group": "Nine Entertainment - In-Scope" }, { "name": "nineplus.com.au", "asset_type": "website", "location": "https://nineplus.com.au", "group": "Nine Entertainment - In-Scope" }, { "name": "nineradiosyndication.com.au", "asset_type": "website", "location": "https://nineradiosyndication.com.au", "group": "Nine Entertainment - In-Scope" }, { "name": "ninetech.dev", "asset_type": "website", "location": "https://ninetech.dev", "group": "Nine Entertainment - In-Scope" }, { "name": "9jumpin.com.au", "asset_type": "website", "location": "https://9jumpin.com.au", "group": "Nine Entertainment - In-Scope" }, { "name": "9news.com.au", "asset_type": "website", "location": "https://9news.com.au", "group": "Nine Entertainment - In-Scope" }, { "name": "9now.com.au", "asset_type": "website", "location": "https://9now.com.au", "group": "Nine Entertainment - In-Scope" }, { "name": "nbnnews.com.au", "asset_type": "website", "location": "https://www.nbnnews.com.au/", "group": "Nine Entertainment - In-Scope" }, { "name": "ninenbn.com.au", "asset_type": "website", "location": "https://www.ninenbn.com.au/", "group": "Nine Entertainment - In-Scope" }, { "name": "stan.com.au", "asset_type": "website", "location": "https://stan.com.au", "group": "Nine Entertainment Brands - In Scope" }, { "name": "afr.com", "asset_type": "website", "location": "https://afr.com", "group": "Nine Entertainment Brands - In Scope" }, { "name": "smh.com.au", "asset_type": "website", "location": "https://smh.com.au", "group": "Nine Entertainment Brands - In Scope" }, { "name": "drive.com.au", "asset_type": "website", "location": "https://drive.com.au", "group": "Nine Entertainment Brands - In Scope" }, { "name": "Pedestrian.tv", "asset_type": "website", "location": "https://pedestrian.tv", "group": "Nine Entertainment Brands - In Scope" }, { "name": "brisbanetimes.com.au", "asset_type": "website", "location": "https://brisbanetimes.com.au", "group": "Nine Entertainment Brands - In Scope" }, { "name": "gizmodo.com.au", "asset_type": "website", "location": "https://gizmodo.com.au", "group": "Nine Entertainment Brands - In Scope" }, { "name": "goodfood.com.au", "asset_type": "website", "location": "https://goodfood.com.au", "group": "Nine Entertainment Brands - In Scope" }, { "name": "theage.com.au", "asset_type": "website", "location": "https://theage.com.au", "group": "Nine Entertainment Brands - In Scope" }, { "name": "watoday.com.au", "asset_type": "website", "location": "https://*.watoday.com.au", "group": "Nine Entertainment Brands - In Scope" }, { "name": "9now - iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/9now/id542088539", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "9now - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=au.com.mi9.jumpin.app", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "9news - iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/9news/id1010533727", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "9news - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=nineNewsAlerts.nine.com", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "3AW - iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/3aw/id443063438", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "3AW - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.thisisaim.radio3aw", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "2GB - iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/2gb/id403184432", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "2GB - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.jbm.macq.kony.twogb", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "6PR - iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/6pr/id443067670", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "6PR - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.thisisaim.radio6pr", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "Sydney Morning Herald - iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/the-sydney-morning-herald/id1411569831", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "Sydney Morning Herald - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.fairfaxmedia.ink.metro.smh", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "Australian Financial Review - iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/australian-financial-review/id524599864", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "Australian Financial Review - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.fairfaxmedia.ink.metro.afr", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "The Age - iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/the-age/id1411569220", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "The Age - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.fairfaxmedia.ink.metro.age", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "Stan - iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/stan/id948095331", "group": "Nine Brands - Mobile Apps In Scope" }, { "name": "Stan - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=au.com.stan.and", "group": "Nine Brands - Mobile Apps In Scope" } ], "out_of_scope": [ { "name": "*.domain.com.au", "asset_type": "website", "location": "https://www.domain.com.au/", "group": "Nine Entertainment & Brands - Out-Of-Scope" }, { "name": "businessinsider.com.au", "asset_type": "website", "location": "https://businessinsider.com.au", "group": "Nine Entertainment & Brands - Out-Of-Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-c5afa41cc99047fe.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-095eb4e6e0032ac4", "name": "Northwestern Mutual VDP", "program_url": "https://bugcrowd.com/engagements/northwestern-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:34Z", "scope_published_at": "2024-10-14T15:20:48.299Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/northwestern-vdp/changelog/2288e61b-599b-44c9-91cb-c8c27581a872.json" ], "in_scope": [ { "name": "*.northwesternmutual.com", "asset_type": "website", "location": "https://northwesternmutual.com", "group": "🎯 In Scope" }, { "name": "Anything Owned by Northwestern Mutual on the Public Internet Not Listed as Out of Scope", "asset_type": "website", "location": null, "group": "🎯 In Scope" } ], "out_of_scope": [ { "name": "northwesternmutual.com/find-a-financial-advisor/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/financial/advisor/*", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/careers-apply/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/report-a-death/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/notice-of-long-term-care-form/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/financial-professionals/?name=*", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/notice-of-disability-form/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/notice-of-group-disability-form/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "Emerald Publications - Anything That Resolves to 199.59.136.0 - 199.59.139.255 (CIDR: 199.59.136.0/22)", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Third Party" }, { "name": "Any third-party assets on *.nm.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Third Party" }, { "name": "clientwise.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Third Party" }, { "name": "events.nmfn.com (3rd party tool not owned/managed by us)", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Third Party" }, { "name": "nmresearchlibrary.nml.com (3rd party, not owned/managed by us)", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Third Party" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-095eb4e6e0032ac4.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-e3b0535225f7bf84", "name": "Occupational Safety and Health Review Commission: Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/oshrc-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:36Z", "scope_published_at": "2025-03-21T10:28:16.182Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/oshrc-vdp/changelog/a8907aea-6de2-4a5e-94fd-1d608f13908a.json" ], "in_scope": [], "out_of_scope": [ { "name": "https://www.oshrc.gov/", "asset_type": "website", "location": "https://www.oshrc.gov/", "group": "In Scope" }, { "name": "oshrc.entellirak.com", "asset_type": "website", "location": null, "group": "Out-of-Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-e3b0535225f7bf84.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-b28aaf562ba986af", "name": "Office of Natural Resources Revenue", "program_url": "https://bugcrowd.com/engagements/onrr-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:19Z", "scope_published_at": "2022-09-20T13:09:27.292Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/onrr-vdp/changelog/3b417416-e830-47ef-9619-115d2af4bc7f.json" ], "in_scope": [ { "name": "*.onrr.gov", "asset_type": "website", "location": "https://www.onrr.gov/", "group": "In Scope Targets" }, { "name": "revenuedata.doi.gov", "asset_type": "website", "location": "https://revenuedata.doi.gov/", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-b28aaf562ba986af.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-ff6465c6cc35cf62", "name": "Office of Personnel Management - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/opm-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "no_published_assets", "scope_captured_at": "2026-10-03T16:45:22Z", "scope_published_at": "2022-06-10T18:24:39.348Z", "scope_group_count": 0, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://bugcrowd.com/engagements/opm-vdp", "http_status": 200, "result": "empty_published_table", "note": "The official engagement page was available, but its public brief published zero scope groups and zero target rows. Policy prose may still define or limit scope; no asset row was inferred." }, "scope_source_urls": [ "https://bugcrowd.com/engagements/opm-vdp/changelog/2ed64b94-6bb3-4d9b-b03b-af5d0d091095.json" ], "in_scope": [], "out_of_scope": [], "policy_review_state": "directory_listing_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-ff6465c6cc35cf62.md", "limitations": [ "Full program policy review remains outstanding.", "No public asset rows were captured; consult the live official program policy for any policy-defined scope.", "The official engagement page was available, but its public brief published zero scope groups and zero target rows. Policy prose may still define or limit scope; no asset row was inferred." ] }, { "id": "bugcrowd-4314ea528b25d94b", "name": "Office of Surface Mining Reclamation and Enforcement: Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/osmre-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:41Z", "scope_published_at": "2025-01-21T18:18:46.081Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/osmre-vdp/changelog/a101f7c7-7312-4a03-a012-61337b40da7d.json" ], "in_scope": [ { "name": "*.osmre.gov.", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "Anything not explicitly listed as 'In Scope'", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-4314ea528b25d94b.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-421f456b68dfcbd2", "name": "Ohio Attorney General's Office Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/ohio-ago-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:30Z", "scope_published_at": "2025-08-14T18:00:00.095Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ohio-ago-vdp-pro/changelog/67f2566c-b1aa-470e-8b03-cc9128dc8ebd.json" ], "in_scope": [ { "name": "*.ohioattorneygeneral.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.ohioprotects.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.ohleg.org", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.vpn.ohioago.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "charitable.ohioago.gov", "asset_type": "website", "location": "https://charitable.ohioago.gov", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-421f456b68dfcbd2.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-d69facd33e7ecd4a", "name": "OLX Group VDP", "program_url": "https://bugcrowd.com/engagements/olx-eu", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "eCommerce", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:12Z", "scope_published_at": "2025-12-11T23:14:20.627Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/olx-eu/changelog/a9b2ddee-3d7d-48d0-8a15-7fcb948105d4.json" ], "in_scope": [ { "name": "payments.olx.com", "asset_type": "website", "location": "https://payments.olx.com", "group": "In scope targets" }, { "name": "*.otomoto.pl", "asset_type": "website", "location": "https://otomoto.pl", "group": "In scope targets" }, { "name": "*.olx.pl", "asset_type": "website", "location": "https://www.olx.pl/", "group": "In scope targets" }, { "name": "*.imovirtual.com", "asset_type": "website", "location": "https://www.imovirtual.com/", "group": "In scope targets" }, { "name": "*.standvirtual.com", "asset_type": "website", "location": "https://www.standvirtual.com/", "group": "In scope targets" }, { "name": "*.otodom.pl", "asset_type": "website", "location": "https://otodom.pl", "group": "In scope targets" }, { "name": "*.olx.pt", "asset_type": "website", "location": "https://olx.pt", "group": "In scope targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-d69facd33e7ecd4a.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-ae4b86c37438d87f", "name": "Optus Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/optus-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:15Z", "scope_published_at": "2023-02-28T01:49:57.651Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/optus-vdp-pro/changelog/7df8fec4-e070-4714-9130-bae4da0da7c6.json" ], "in_scope": [ { "name": "www.optus.com.au", "asset_type": "website", "location": "https://www.optus.com.au/", "group": "In Scope" }, { "name": "Any other asset belonging to Optus", "asset_type": "other", "location": null, "group": "In Scope" } ], "out_of_scope": [ { "name": "1.44.0.0/16", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "59.154.0.0/16", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "61.88.0.0/16", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "202.139.0.0/17", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "202.139.128.0/18", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "203.202.0.0/17", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "203.202.128.0/18", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "119.225.0.0/16", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "161.43.0.0/16", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "220.101.0.0/17", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "220.101.128.0/18", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "124.19.0.0/17", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "202.2.56.0/22", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "203.13.96.0/19", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "203.13.128.0/20", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "203.110.248.0/22", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "203.110.252.0/22", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "210.0.0/19", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "123.102.0.0/16", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "125.63.128.0/17", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "2405:9000::/32", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "27.99.0.0/17", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "58.104.0.0/13", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "106.70.0.0/15", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "110.20.0.0/14", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "110.32.0.0/15", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "114.72.0.0/14", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "114.76.0.0/15", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "114.78.0.0/16", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "122.104.0.0/13", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "175.32.0.0/13", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "203.213.128.0/19", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "58.145.128.0/19", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "203.164.0.0/16", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "210.49.0.0/16", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "211.28.0.0/14", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "220.236.0.0/14", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "103.213.120.0/24", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "103.213.121.0/24", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-ae4b86c37438d87f.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-719ce60d2a8589fa", "name": "OWASP CSRFGuard", "program_url": "https://bugcrowd.com/engagements/owaspcrsfguard", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:52Z", "scope_published_at": "2025-01-22T18:02:14.769Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/owaspcrsfguard/changelog/7a32e8b8-dceb-4cda-a9f2-a63b0a4feb31.json" ], "in_scope": [ { "name": "https://github.com/OWASP/OWASPBugBounty/tree/master/CRSFGuard", "asset_type": "other", "location": "https://github.com/OWASP/OWASPBugBounty/tree/master/CRSFGuard", "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-719ce60d2a8589fa.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-6aedc45de07eaf89", "name": "OWASP Java Encoder", "program_url": "https://bugcrowd.com/engagements/owaspjavaencoder", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:51Z", "scope_published_at": "2025-01-22T18:01:52.606Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/owaspjavaencoder/changelog/3d6b3036-d4dd-4b62-95da-daa6bbc74137.json" ], "in_scope": [ { "name": "https://github.com/OWASP/OWASPBugBounty/tree/master/JavaEncoder/war-files", "asset_type": "other", "location": "https://github.com/OWASP/OWASPBugBounty/tree/master/JavaEncoder/war-files", "group": "In scope" }, { "name": "https://github.com/OWASP/OWASPBugBounty/tree/master/JavaEncoder", "asset_type": "other", "location": "https://github.com/OWASP/OWASPBugBounty/tree/master/JavaEncoder", "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-6aedc45de07eaf89.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-691f938f1f29047d", "name": "OWASP Java HTML Sanitizer", "program_url": "https://bugcrowd.com/engagements/owaspjavasanitizer", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:52Z", "scope_published_at": "2025-01-22T18:02:03.374Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/owaspjavasanitizer/changelog/2650ea1c-eb2e-4323-b32b-371f5ccf25f5.json" ], "in_scope": [ { "name": "https://github.com/OWASP/OWASPBugBounty/tree/master/JavaHTMLSanitizer/war-files", "asset_type": "other", "location": "https://github.com/OWASP/OWASPBugBounty/tree/master/JavaHTMLSanitizer/war-files", "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-691f938f1f29047d.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-532a73adc8d04862", "name": "OWASP Vulnerability Disclosure Program Engagement", "program_url": "https://bugcrowd.com/engagements/owasp-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:20Z", "scope_published_at": "2026-02-10T18:20:13.681Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/owasp-vdp-pro/changelog/a6d17add-090f-4d27-8be9-eedc6c1d5607.json" ], "in_scope": [ { "name": "https://owasp.org/", "asset_type": "website", "location": "https://owasp.org/", "group": "In Scope " }, { "name": "All publicly accessible OWASP systems", "asset_type": "other", "location": null, "group": "In Scope " }, { "name": "https://www.owasp.community/", "asset_type": "website", "location": "https://www.owasp.community/", "group": "In Scope " } ], "out_of_scope": [ { "name": "Membership Portal", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "GlueUp", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "Donation/Payment Gateways", "asset_type": "other", "location": null, "group": "Out of Scope " } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-532a73adc8d04862.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-ccf046c5dda3ecab", "name": "Pension Benefit Guaranty Corporation VDP", "program_url": "https://bugcrowd.com/engagements/pbgc-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:06Z", "scope_published_at": "2023-10-23T12:55:00.663Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/pbgc-vdp/changelog/d7266feb-1d35-45cf-b273-76c6861bfa74.json" ], "in_scope": [ { "name": "https://www.pbgc.gov", "asset_type": "website", "location": "https://www.pbgc.gov", "group": "In Scope Targets" }, { "name": "https://www.pbgc.gov/mypba", "asset_type": "website", "location": "https://www.pbgc.gov/mypba", "group": "In Scope Targets" }, { "name": "https://www.efilingportal.pbgc.gov", "asset_type": "website", "location": "https://www.efilingportal.pbgc.gov", "group": "In Scope Targets" }, { "name": "https://mypaa.pbgc.gov/", "asset_type": "website", "location": "https://mypaa.pbgc.gov/", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-ccf046c5dda3ecab.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-28627fc78f00152f", "name": "Petpooja Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/petpooja-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:10Z", "scope_published_at": "2026-09-03T12:25:04.411Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/petpooja-vdp-pro/changelog/cfff090a-2481-4650-9298-62a652d14426.json" ], "in_scope": [ { "name": "Petpooja Production Web Applications & APIs", "asset_type": "website", "location": "https://*.petpooja.com/", "group": "Web Applications & APIs" }, { "name": "AttendoHR", "asset_type": "website", "location": "https://attendohr.com/", "group": "Web Applications & APIs" }, { "name": "Attendo: Employee", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.petpooja.employeepayroll", "group": "Mobile Applications" }, { "name": "Attendo: Admin", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.petpooja.attendance", "group": "Mobile Applications" }, { "name": "Attendo: Face", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.petpooja.facerecognition", "group": "Mobile Applications" }, { "name": "Petpooja - Merchant App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.petpooja.billing", "group": "Mobile Applications" }, { "name": "Petpooja Track", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.petpoojatrack.app", "group": "Mobile Applications" }, { "name": "Petpooja Invoice", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.petpooja.invoice", "group": "Mobile Applications" }, { "name": "Petpooja Invoice POS", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.petpooja.retail_invoice", "group": "Mobile Applications" }, { "name": "Purchase Manager", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.petpooja.purchase_manager", "group": "Mobile Applications" }, { "name": "Purchase Scan", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.invoice.briefcase", "group": "Mobile Applications" }, { "name": "Petpooja Marketing Hub", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.app.tvito", "group": "Mobile Applications" }, { "name": "Petpooja - Merchant App iOS", "asset_type": "ios", "location": "https://apps.apple.com/in/app/petpooja-merchant-app/id1362012013", "group": "Mobile Applications" }, { "name": "Attendo: Admin iOS", "asset_type": "ios", "location": "https://apps.apple.com/in/app/petpooja-payroll-admin/id6478654383", "group": "Mobile Applications" }, { "name": "Attendo: Employee iOS", "asset_type": "ios", "location": "https://apps.apple.com/in/app/petpooja-payroll-employee/id6499255254", "group": "Mobile Applications" }, { "name": "Petpooja Captain App", "asset_type": "ios", "location": "https://apps.apple.com/in/app/petpooja-captain-app/id6470435905", "group": "Mobile Applications" }, { "name": "Petpooja Marketing Hub iOS", "asset_type": "ios", "location": "https://apps.apple.com/in/app/petpooja-marketing-hub/id1621470378", "group": "Mobile Applications" }, { "name": "Petpooja Track App iOS", "asset_type": "ios", "location": "https://apps.apple.com/in/app/petpooja-track-app/id6772917153", "group": "Mobile Applications" }, { "name": "Petpooja Purchase Scan iOS", "asset_type": "ios", "location": "https://apps.apple.com/in/app/purchase-scan/id6740403231", "group": "Mobile Applications" }, { "name": "Petpooja Purchase Manager App", "asset_type": "ios", "location": "https://apps.apple.com/in/app/purchase-manager-app/id6761174994", "group": "Mobile Applications" } ], "out_of_scope": [ { "name": "Tasks API", "asset_type": "website", "location": "https://tasksapi.petpooja.com/", "group": "Out of Scope" }, { "name": "Tasks Staging API", "asset_type": "website", "location": "https://tasksstagingapi.petpooja.com/", "group": "Out of Scope" }, { "name": "Tasks Admin", "asset_type": "website", "location": "https://tasksadmin.petpooja.com/", "group": "Out of Scope" }, { "name": "Tasks Dashboard", "asset_type": "website", "location": "https://tasksdashboard.petpooja.com/", "group": "Out of Scope" }, { "name": "Petpooja Tasks", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.petpooja.task_manager", "group": "Out of Scope" }, { "name": "Petpooja Tasks iOS", "asset_type": "ios", "location": "https://apps.apple.com/in/app/petpooja-tasks/id6479517350", "group": "Out of Scope" }, { "name": "Petpooja .in Domains", "asset_type": "website", "location": "https://*.petpooja.in/", "group": "Out of Scope" }, { "name": "Petpooja Meta", "asset_type": "website", "location": "https://meta.petpooja.com", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-28627fc78f00152f.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-e661eafe0b59ae6e", "name": "Phyn - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/phyn-belkin-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:52Z", "scope_published_at": "2024-05-28T19:11:11.525Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/phyn-belkin-vdp-pro/changelog/be591242-41da-4517-b515-a54af484d941.json" ], "in_scope": [ { "name": "Phyn", "asset_type": "website", "location": "https://phyn.com/", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-e661eafe0b59ae6e.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-bbae4f26f5090fc6", "name": "Plusgrade Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/plusgrade-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:05Z", "scope_published_at": "2025-05-07T16:57:55.234Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/plusgrade-vdp-pro/changelog/508dbeae-e0cb-4852-b41a-048028a106b3.json" ], "in_scope": [ { "name": "*.plusgrade.com", "asset_type": "website", "location": "https://www.plusgrade.com/", "group": "Upgrades, Seating & More" }, { "name": "*.upstay.tech", "asset_type": "website", "location": "https://www.upstay.tech", "group": "Upgrades, Seating & More" }, { "name": "*.upgrd.co", "asset_type": "website", "location": null, "group": "Upgrades, Seating & More" }, { "name": "Additional scope included under resources tab", "asset_type": "website", "location": null, "group": "Upgrades, Seating & More" }, { "name": "*.points.com", "asset_type": "website", "location": null, "group": "Loyalty" }, { "name": "Additional scope included under resources tab", "asset_type": "website", "location": null, "group": "Loyalty" } ], "out_of_scope": [ { "name": "Partner Website & Applications", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "Anything not explicitly listed as in-scope", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-bbae4f26f5090fc6.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-8c67412f6c0dc54b", "name": "Postal Regulatory Commission Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/prc-vdp1", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:46Z", "scope_published_at": "2024-09-18T23:34:07.257Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/prc-vdp1/changelog/adcda503-a430-4463-ae41-1652b52f0eef.json" ], "in_scope": [ { "name": "https://www.prc.gov", "asset_type": "website", "location": "https://www.prc.gov", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-8c67412f6c0dc54b.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-f39dea04a403f50d", "name": "PostHog Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/posthog-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:27Z", "scope_published_at": "2025-09-10T19:05:46.281Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/posthog-vdp-pro/changelog/e6f36452-98f7-4dbf-99ab-e1cbab30fae0.json" ], "in_scope": [ { "name": "https://us.posthog.com/", "asset_type": "website", "location": "https://us.posthog.com/", "group": "In Scope" }, { "name": "https://posthog.com", "asset_type": "website", "location": "https://posthog.com", "group": "In Scope" }, { "name": "https://github.com/PostHog/posthog", "asset_type": "website", "location": "https://github.com/PostHog/posthog", "group": "In Scope" }, { "name": "https://github.com/PostHog/posthog.com", "asset_type": "website", "location": "https://github.com/PostHog/posthog.com", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-f39dea04a403f50d.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-7653bfc5ccf84843", "name": "Pretrial Services Agency for the District of Columbia", "program_url": "https://bugcrowd.com/engagements/psa-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:27Z", "scope_published_at": "2022-03-09T17:56:14.593Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/psa-vdp/changelog/8e6656d3-089c-4f3a-bc99-779117bfb190.json" ], "in_scope": [ { "name": "*.psa.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.pretrialservices.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "pretrialservices.gov", "asset_type": "website", "location": "https://pretrialservices.gov/", "group": "In Scope" }, { "name": "psa.gov", "asset_type": "website", "location": "https://psa.gov/", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-7653bfc5ccf84843.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-860f8c609806624d", "name": "Privacy and Civil Liberties Oversight Board: Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/pclob-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:35Z", "scope_published_at": "2021-07-28T21:08:20.309Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/pclob-vdp/changelog/9ef24698-8ffc-4369-af41-f441fae07d92.json" ], "in_scope": [ { "name": "www.pclob.gov", "asset_type": "website", "location": "https://www.pclob.gov/", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-860f8c609806624d.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-6dcae5c84de0ef71", "name": "Progress Software - Chef", "program_url": "https://bugcrowd.com/engagements/chef-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:58Z", "scope_published_at": "2026-06-26T12:58:37.779Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/chef-vdp/changelog/c43262a1-0faf-469e-8c41-f0f971c3aac1.json" ], "in_scope": [ { "name": "Chef InSpec™", "asset_type": "other", "location": null, "group": "Chef Software Applications" }, { "name": "Chef Habitat", "asset_type": "other", "location": null, "group": "Chef Software Applications" }, { "name": "Chef Private Supermarket", "asset_type": "other", "location": null, "group": "Chef Software Applications" }, { "name": "Chef Infra", "asset_type": "other", "location": null, "group": "Chef Software Applications" }, { "name": "Chef Automate", "asset_type": "other", "location": null, "group": "Chef Software Applications" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-6dcae5c84de0ef71.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-49d78a9b4cfd8f29", "name": "Progress Software - Corporate Websites", "program_url": "https://bugcrowd.com/engagements/corporatewebsites-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:57Z", "scope_published_at": "2025-04-09T22:09:47.965Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/corporatewebsites-vdp/changelog/c4a0ce20-00b0-461a-a6c3-20399850d4d2.json" ], "in_scope": [ { "name": "Progress Software Corporation Corporation Websites", "asset_type": "website", "location": "https://www.progress.com/", "group": "Progress Software Corporate Websites" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-49d78a9b4cfd8f29.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-a8ef9474b21e5951", "name": "Progress Software - Corticon", "program_url": "https://bugcrowd.com/engagements/corticon-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:53Z", "scope_published_at": "2024-09-16T18:03:48.045Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/corticon-vdp/changelog/92a3d424-0336-4bb0-b6ff-a834554e9f50.json" ], "in_scope": [ { "name": "Corticon Java Server", "asset_type": "other", "location": null, "group": "Corticon Software Applications" }, { "name": "Corticon Server .NET", "asset_type": "other", "location": null, "group": "Corticon Software Applications" }, { "name": "Corticon Web Console", "asset_type": "other", "location": null, "group": "Corticon Software Applications" }, { "name": "Corticon.js Runtime", "asset_type": "other", "location": null, "group": "Corticon Software Applications" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-a8ef9474b21e5951.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-5be4b58034ae1886", "name": "Progress Software - DataDirect", "program_url": "https://bugcrowd.com/engagements/datadirect-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:54Z", "scope_published_at": "2025-04-09T22:14:13.097Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/datadirect-vdp/changelog/8a99b826-fb3d-4cb7-b127-e9f8a043a411.json" ], "in_scope": [ { "name": "Connect for ODBC", "asset_type": "other", "location": null, "group": "DataDirect Software Applications" }, { "name": "Connect for JDBC", "asset_type": "other", "location": null, "group": "DataDirect Software Applications" }, { "name": "Connect for ADO.NET", "asset_type": "other", "location": null, "group": "DataDirect Software Applications" }, { "name": "Hybrid Data Pipeline", "asset_type": "website", "location": null, "group": "DataDirect Software Applications" }, { "name": "OpenAccess SDK", "asset_type": "other", "location": null, "group": "DataDirect Software Applications" }, { "name": "Autonomous REST Connector", "asset_type": "other", "location": null, "group": "DataDirect Software Applications" }, { "name": "SequeLink", "asset_type": "other", "location": null, "group": "DataDirect Software Applications" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-5be4b58034ae1886.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-46525098f8c35021", "name": "Progress Software - DevTools", "program_url": "https://bugcrowd.com/engagements/devtools-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:55Z", "scope_published_at": "2026-06-24T15:29:59.471Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/devtools-vdp/changelog/0872d94e-4b38-4af5-a59b-08529c3d5702.json" ], "in_scope": [ { "name": "Telerik UI for ASP.NET AJAX", "asset_type": "other", "location": null, "group": "DevTools Software Applications" }, { "name": "Telerik UI for ASP.NET Core", "asset_type": "other", "location": null, "group": "DevTools Software Applications" }, { "name": "Telerik UI for ASP.NET MVC", "asset_type": "other", "location": null, "group": "DevTools Software Applications" }, { "name": "Telerik UI for Blazor", "asset_type": "other", "location": null, "group": "DevTools Software Applications" }, { "name": "Telerik UI for WPF", "asset_type": "other", "location": null, "group": "DevTools Software Applications" }, { "name": "Telerik UI for WinForms", "asset_type": "other", "location": null, "group": "DevTools Software Applications" }, { "name": "Telerik UI for MAUI", "asset_type": "other", "location": null, "group": "DevTools Software Applications" }, { "name": "Kendo UI for jQuery", "asset_type": "other", "location": null, "group": "DevTools Software Applications" }, { "name": "Kendo UI for Angular", "asset_type": "other", "location": null, "group": "DevTools Software Applications" }, { "name": "Kendo UI for Vue", "asset_type": "other", "location": null, "group": "DevTools Software Applications" }, { "name": "KendoReact", "asset_type": "other", "location": null, "group": "DevTools Software Applications" }, { "name": "Telerik Fiddler Everywhere", "asset_type": "other", "location": null, "group": "DevTools Software Applications" }, { "name": "Telerik Reporting", "asset_type": "other", "location": null, "group": "DevTools Software Applications" }, { "name": "Telerik Test Studio", "asset_type": "other", "location": null, "group": "DevTools Software Applications" }, { "name": "Telerik Theme Builder", "asset_type": "other", "location": null, "group": "DevTools Software Applications" }, { "name": "Telerik Websites", "asset_type": "website", "location": null, "group": "DevTools Software Applications" }, { "name": "Progress AI Observability Platform", "asset_type": "website", "location": null, "group": "DevTools Software Applications" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-46525098f8c35021.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-6efb733bde8b066b", "name": "Progress Software - Flowmon", "program_url": "https://bugcrowd.com/engagements/flowmon-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:55Z", "scope_published_at": "2025-04-09T22:00:48.234Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/flowmon-vdp/changelog/0a0acf4d-668d-4285-968a-524ba9778779.json" ], "in_scope": [ { "name": "Flowmon", "asset_type": "website", "location": null, "group": "Flowmon Software Applications" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-6efb733bde8b066b.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-2e557751bbb760b0", "name": "Progress Software - LoadMaster", "program_url": "https://bugcrowd.com/engagements/loadmaster-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:58Z", "scope_published_at": "2025-04-09T22:11:36.005Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/loadmaster-vdp/changelog/a9a77244-cd34-47e9-8699-7fa2bc964e32.json" ], "in_scope": [ { "name": "LoadMaster", "asset_type": "website", "location": null, "group": "LoadMaster Software Applications" }, { "name": "LoadMaster 360", "asset_type": "website", "location": "https://portal.kemp.ax", "group": "LoadMaster Software Applications" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-2e557751bbb760b0.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-b23f5229bb465e41", "name": "Progress Software - MarkLogic VDP", "program_url": "https://bugcrowd.com/engagements/marklogic-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:54Z", "scope_published_at": "2026-05-12T15:28:22.601Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/marklogic-vdp/changelog/fb9345c9-249b-48a7-b871-65693e2e2069.json" ], "in_scope": [ { "name": "MarkLogic Server", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic XCC", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic ODBC", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic MLCP", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic Converters and Filters", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic HubCentral/DataHub", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic FastTrack", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic Node-Client-API", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic Java-Client-API", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic Python-Client-API", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic Spark-Connector", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic Kafka-Connector", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic Nifi-Connector", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic Jena RDF Connector", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic Mulesoft Connector", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic MXLPRS", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic ML-Gradle", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic-Unit-Test", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic GDS (ESRI Integration)", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic Kubernetes-Helm-Chart", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic Docker Container", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic Azure-Server-Image", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic Server-AMI-AWS", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" }, { "name": "MarkLogic Pega Connector", "asset_type": "other", "location": null, "group": "MarkLogic Software Applications" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-b23f5229bb465e41.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-caba97e9ef67ae3a", "name": "Progress Software - MOVEit - VDP", "program_url": "https://bugcrowd.com/engagements/moveit-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:58Z", "scope_published_at": "2025-07-31T14:19:30.318Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/moveit-vdp/changelog/196cba9e-0c9e-4347-8d3b-58c597f3c250.json" ], "in_scope": [ { "name": "MOVEit Transfer", "asset_type": "website", "location": null, "group": "MOVEit Software Applications" }, { "name": "MOVEit Automation", "asset_type": "website", "location": null, "group": "MOVEit Software Applications" }, { "name": "MOVEit Gateway", "asset_type": "website", "location": null, "group": "MOVEit Software Applications" }, { "name": "MOVEit Clients", "asset_type": "other", "location": null, "group": "MOVEit Software Applications" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-caba97e9ef67ae3a.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-528154630603f573", "name": "Progress Software - OpenEdge", "program_url": "https://bugcrowd.com/engagements/openedge-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:56Z", "scope_published_at": "2025-04-09T21:58:43.390Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/openedge-vdp/changelog/44ed831d-c0a3-43c5-95d8-999f99f96fc2.json" ], "in_scope": [ { "name": "OpenEdge Command Center", "asset_type": "other", "location": null, "group": "OpenEdge Software Applications" }, { "name": "Progress Application Server for OpenEdge (PASOE)", "asset_type": "other", "location": null, "group": "OpenEdge Software Applications" }, { "name": "Progress Developer Studio for OpenEdge (PDSOE)", "asset_type": "other", "location": null, "group": "OpenEdge Software Applications" }, { "name": "OpenEdge Management (OEM)", "asset_type": "other", "location": null, "group": "OpenEdge Software Applications" }, { "name": "OpenEdge SQL", "asset_type": "other", "location": null, "group": "OpenEdge Software Applications" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-528154630603f573.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-9662bdb6f75d8cdb", "name": "Progress Software - ShareFile", "program_url": "https://bugcrowd.com/engagements/sharefile-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:39Z", "scope_published_at": "2025-05-13T13:25:49.354Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/sharefile-vdp-pro/changelog/f39f7b12-9f1c-44bc-afff-fcfa60ac5d1f.json" ], "in_scope": [ { "name": "ShareFile SaaS Platform", "asset_type": "website", "location": null, "group": "Progress ShareFile" }, { "name": "ShareFile Storage Zones Controller", "asset_type": "website", "location": "https://docs.sharefile.com/en-us/storage-zones-controller/6-0/about.html", "group": "Progress ShareFile" }, { "name": "ShareFile Apps", "asset_type": "other", "location": null, "group": "Progress ShareFile" }, { "name": "RightSignature", "asset_type": "website", "location": null, "group": "Progress ShareFile" } ], "out_of_scope": [ { "name": "featureflags.sharefile.io", "asset_type": "website", "location": null, "group": "Progress ShareFile Out of Scope Targets" }, { "name": "*-novu-proxy.sharefile.io", "asset_type": "website", "location": null, "group": "Progress ShareFile Out of Scope Targets" }, { "name": "support.sharefile.com", "asset_type": "website", "location": null, "group": "Progress ShareFile Out of Scope Targets" }, { "name": "docs.sharefile.com", "asset_type": "website", "location": null, "group": "Progress ShareFile Out of Scope Targets" }, { "name": "dl.sharefile.com", "asset_type": "website", "location": null, "group": "Progress ShareFile Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-9662bdb6f75d8cdb.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-ce0e41603f0fdace", "name": "Progress Software - Sitefinity", "program_url": "https://bugcrowd.com/engagements/sitefinity-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:57Z", "scope_published_at": "2025-04-09T22:00:03.294Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/sitefinity-vdp/changelog/c7c2c683-280d-4921-973f-efa3d30b6c3b.json" ], "in_scope": [ { "name": "Sitefinity On-Prem", "asset_type": "website", "location": null, "group": "Sitefinity Software Applications" }, { "name": "Sitefinity Cloud", "asset_type": "website", "location": null, "group": "Sitefinity Software Applications" }, { "name": "Sitefinity Insight", "asset_type": "website", "location": null, "group": "Sitefinity Software Applications" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-ce0e41603f0fdace.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-51ede7c87dd139b2", "name": "Progress Software - WhatsUp Gold", "program_url": "https://bugcrowd.com/engagements/whatsupgold-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:55Z", "scope_published_at": "2026-04-09T19:40:24.161Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/whatsupgold-vdp/changelog/400b6812-217b-4da6-accb-43999c7a6fb8.json" ], "in_scope": [ { "name": "WhatsUp Gold", "asset_type": "website", "location": null, "group": "WhatsUp Gold Software Application" }, { "name": "WhatsUp Gold 360", "asset_type": "website", "location": "https://portal.whatsupgold.com/", "group": "WhatsUp Gold Software Application" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-51ede7c87dd139b2.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-03ad855d497c688d", "name": "Progress Software - WS_FTP VDP", "program_url": "https://bugcrowd.com/engagements/wsftp-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:59Z", "scope_published_at": "2024-09-16T18:13:54.912Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/wsftp-vdp/changelog/13403ca5-4e73-407c-9711-6ecfdd66eed6.json" ], "in_scope": [ { "name": "WS_FTP Server", "asset_type": "other", "location": null, "group": "WS_FTP Software Applications" }, { "name": "WS_FTP Professional", "asset_type": "other", "location": null, "group": "WS_FTP Software Applications" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-03ad855d497c688d.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-85f99677611c65d8", "name": "Progress Software RAG", "program_url": "https://bugcrowd.com/engagements/progresssoftware-rag", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:20Z", "scope_published_at": "2026-01-27T18:00:00.464Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/progresssoftware-rag/changelog/5d1e9957-4ace-4443-a0ab-936de2c7234d.json" ], "in_scope": [ { "name": "https://stashify.cloud", "asset_type": "website", "location": "https://stashify.cloud", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-85f99677611c65d8.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-7f8d68a8b22773ea", "name": "Progress Software – Podio", "program_url": "https://bugcrowd.com/engagements/progress-podio-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:35Z", "scope_published_at": "2025-10-23T13:55:53.618Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/progress-podio-vdp/changelog/ccaee612-9c28-4370-bd5b-646888e30b5e.json" ], "in_scope": [ { "name": "Podio", "asset_type": "website", "location": "https://www.podio.com", "group": "Podio Web Applications" }, { "name": "Podio iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/podio/id404183617", "group": "Podio Web Applications" }, { "name": "Podio Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.podio", "group": "Podio Web Applications" }, { "name": "Podio Workflow Automation", "asset_type": "website", "location": "https://workflow-automation.podio.com/", "group": "Podio Web Applications" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-7f8d68a8b22773ea.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-ee194a4857e12397", "name": "Progress Software – Progress Data Cloud", "program_url": "https://bugcrowd.com/engagements/progressdatacloud-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "no_published_assets", "scope_captured_at": "2026-10-03T16:44:42Z", "scope_published_at": "2026-05-13T22:09:19.572Z", "scope_group_count": 0, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://bugcrowd.com/engagements/progressdatacloud-vdp-pro", "http_status": 200, "result": "empty_published_table", "note": "The official engagement page was available, but its public brief published zero scope groups and zero target rows. Policy prose may still define or limit scope; no asset row was inferred." }, "scope_source_urls": [ "https://bugcrowd.com/engagements/progressdatacloud-vdp-pro/changelog/e39ebfc2-5ea6-4be5-95db-b0087697d611.json" ], "in_scope": [], "out_of_scope": [], "policy_review_state": "directory_listing_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-ee194a4857e12397.md", "limitations": [ "Full program policy review remains outstanding.", "No public asset rows were captured; consult the live official program policy for any policy-defined scope.", "The official engagement page was available, but its public brief published zero scope groups and zero target rows. Policy prose may still define or limit scope; no asset row was inferred." ] }, { "id": "bugcrowd-b713d12b7c22bd5a", "name": "Quitelike Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/quitelike-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:38Z", "scope_published_at": "2025-04-03T19:24:59.082Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/quitelike-vdp-pro/changelog/125ef674-f8ed-4b5d-8ff0-988c0dbde0df.json" ], "in_scope": [ { "name": "quitelike.com.au", "asset_type": "website", "location": "https://www.quitelike.com/", "group": "In scope" } ], "out_of_scope": [ { "name": "Third party providers and services", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "Orders - Any orders made cannot be refunded.", "asset_type": "other", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-b713d12b7c22bd5a.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-6b7585814fcbbbef", "name": "Railroad Retirement Board - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/rrb-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:28Z", "scope_published_at": "2022-09-06T17:49:00.588Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/rrb-vdp/changelog/b0c22ce5-d000-4652-9fa3-27f6165d44cd.json" ], "in_scope": [ { "name": "*.rrb.gov", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-6b7585814fcbbbef.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-89f7ed96409117ab", "name": "Rakuten Group, Inc. Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/rakuten-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "eCommerce", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:48Z", "scope_published_at": "2026-09-16T01:54:37.257Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/rakuten-vdp-pro/changelog/74a53f5b-56a1-42b2-a54a-75d153060414.json" ], "in_scope": [ { "name": "*.rakuten.com", "asset_type": "website", "location": "https://rakuten.com", "group": "In Scope Target" }, { "name": "*.rakuten.co.jp", "asset_type": "website", "location": "https://rakuten.co.jp", "group": "In Scope Target" }, { "name": "*.rakuten-wallet.co.jp", "asset_type": "website", "location": "https://rakuten-wallet.co.jp", "group": "In Scope Target" }, { "name": "*.rakuten-life.co.jp", "asset_type": "website", "location": "https://www.rakuten-life.co.jp", "group": "In Scope Target" }, { "name": "*.rakuten-ssi.co.jp", "asset_type": "website", "location": "https://rakuten-ssi.co.jp/", "group": "In Scope Target" }, { "name": "*.rakuten-toushin.co.jp", "asset_type": "website", "location": "https://rakuten-toushin.co.jp", "group": "In Scope Target" }, { "name": "*.rakuten-sec.co.jp", "asset_type": "website", "location": "https://rakuten-sec.co.jp", "group": "In Scope Target" }, { "name": "*.sec.rakuten.com.hk", "asset_type": "website", "location": "https://www.sec.rakuten.com.hk/", "group": "In Scope Target" }, { "name": "*.bullion.rakuten.com.hk", "asset_type": "website", "location": "https://bullion.rakuten.com.hk", "group": "In Scope Target" }, { "name": "*.rakuten-card.co.jp", "asset_type": "website", "location": "https://rakuten-card.co.jp", "group": "In Scope Target" }, { "name": "*.rakuten-card.jp", "asset_type": "website", "location": "https://*.rakuten-card.jp", "group": "In Scope Target" }, { "name": "*.card.rakuten.com.tw", "asset_type": "website", "location": "https://www.card.rakuten.com.tw/", "group": "In Scope Target" }, { "name": "*.rakuten-insurance.co.jp", "asset_type": "website", "location": "https://www.rakuten-insurance.co.jp", "group": "In Scope Target" }, { "name": "*.rakuten-bank.co.jp", "asset_type": "website", "location": "https://*.rakuten-bank.co.jp", "group": "In Scope Target" }, { "name": "*.rakutencheck.com", "asset_type": "website", "location": "https://*.rakutencheck.com", "group": "In Scope Target" }, { "name": "*.smapo.jp", "asset_type": "website", "location": "https://*.smapo.jp", "group": "In Scope Target" }, { "name": "*.rakutentrade.my", "asset_type": "website", "location": "https://*.rakutentrade.my", "group": "In Scope Target" }, { "name": "*.rakuten-sonpo.co.jp", "asset_type": "website", "location": null, "group": "In Scope Target" }, { "name": "*.rakuten-edy.co.jp", "asset_type": "website", "location": "https://rakuten-edy.co.jp", "group": "In Scope Target" }, { "name": "*.edy.jp", "asset_type": "website", "location": "https://edy.jp", "group": "In Scope Target" }, { "name": "*.bitwallet.co.jp", "asset_type": "website", "location": "https://bitwallet.co.jp", "group": "In Scope Target" } ], "out_of_scope": [ { "name": "STG/DEV subdomains in Rakuten Bank", "asset_type": "website", "location": null, "group": "Out of Scope Target" }, { "name": "STG/DEV subdomains in Rakuten Pay", "asset_type": "website", "location": null, "group": "Out of Scope Target" }, { "name": "STG/DEV subdomains in Rakuten Edy", "asset_type": "website", "location": null, "group": "Out of Scope Target" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-89f7ed96409117ab.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-06abb373b71e61d1", "name": "Retool Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/retool-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:51Z", "scope_published_at": "2024-04-10T12:00:33.005Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/retool-vdp/changelog/bb1f3cc4-03db-4ddf-8e0e-69bcd423cbe7.json" ], "in_scope": [ { "name": "login.retool.com", "asset_type": "website", "location": "https://login.retool.com", "group": "In-Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-06abb373b71e61d1.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-069a1848ccad9ded", "name": "RMIT University Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/rmit-university-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Education", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:17Z", "scope_published_at": "2025-12-12T04:46:35.538Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/rmit-university-vdp-pro/changelog/32d7db64-022c-4996-b26b-91e66b1a4cc2.json" ], "in_scope": [ { "name": "*.rmit.edu.au", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.rmit.edu.vn", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.Rmittraining.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "Australia IP Ranges: 131.170.0.0/16 and 144.205.0.0/16", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Vietnam IP Ranges: 103.253.88.0/22 and 103.144.84.0/23", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "203.17.179.0/24", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "ezproxy.rmit.edu.au", "asset_type": "other", "location": null, "group": "In Scope" } ], "out_of_scope": [ { "name": "*.ezproxy.rmit.edu.au", "asset_type": "other", "location": null, "group": "Out of scope " } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-069a1848ccad9ded.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-7cbddce73dc49402", "name": "ROKT Vulnerability Disclosure", "program_url": "https://bugcrowd.com/engagements/rokt-pte-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:16Z", "scope_published_at": "2023-08-17T04:11:46.522Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/rokt-pte-vdp-pro/changelog/3eb8f079-e3df-4899-ad24-b0038ecb0993.json" ], "in_scope": [ { "name": "Any asset that belongs to ROKT", "asset_type": "other", "location": null, "group": "In Scope - Rokt One Platform" }, { "name": "my.rokt.com", "asset_type": "website", "location": "https://my.rokt.com/", "group": "In Scope - Rokt One Platform" }, { "name": "op2-bff.rokt.com", "asset_type": "api", "location": "https://op2-bff.rokt.com/", "group": "In Scope - Rokt One Platform" }, { "name": "platform.rokt.com", "asset_type": "api", "location": "https://platform.rokt.com", "group": "In Scope - Rokt One Platform" }, { "name": "transactions.rokt.com", "asset_type": "api", "location": "https://transactions.rokt.com", "group": "In Scope - Rokt One Platform" }, { "name": "partner.rokt.com", "asset_type": "website", "location": "https://www.rokt.com/partners/", "group": "In Scope - Rokt One Platform" }, { "name": "data.rokt.com", "asset_type": "api", "location": "https://data.rokt.com/", "group": "In Scope - Rokt One Platform" }, { "name": "experiments.rokt.com", "asset_type": "api", "location": "https://experiments.rokt.com", "group": "In Scope - Rokt One Platform" }, { "name": "api.rokt.com", "asset_type": "api", "location": null, "group": "In Scope - Rokt SDKs Frontends and real-time APIs" }, { "name": "api.data.rokt.com (custom audience, nurture)", "asset_type": "api", "location": null, "group": "In Scope - Rokt SDKs Frontends and real-time APIs" }, { "name": "catalogs.rokt.com", "asset_type": "api", "location": null, "group": "In Scope - Rokt SDKs Frontends and real-time APIs" }, { "name": "public-api.rokt.com", "asset_type": "api", "location": null, "group": "In Scope - Rokt SDKs Frontends and real-time APIs" }, { "name": "mobile-api.rokt.com", "asset_type": "api", "location": null, "group": "In Scope - Rokt SDKs Frontends and real-time APIs" }, { "name": "apps.rokt.com", "asset_type": "api", "location": null, "group": "In Scope - Rokt SDKs Frontends and real-time APIs" }, { "name": "wsdk.rokt.com", "asset_type": "api", "location": null, "group": "In Scope - Rokt SDKs Frontends and real-time APIs" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-7cbddce73dc49402.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-937b97c4c90ad946", "name": "Roobet Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/roobet-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:14Z", "scope_published_at": "2024-08-14T04:13:15.596Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/roobet-vdp/changelog/a47f05e2-f3cc-485a-ba3c-97cbdeacb6ce.json" ], "in_scope": [ { "name": "https://roobet.com/", "asset_type": "website", "location": "https://roobet.com/", "group": "In Scope targets" }, { "name": "*.roobet.com", "asset_type": "website", "location": null, "group": "In Scope targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-937b97c4c90ad946.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-0715b82e337d0133", "name": "Royal Automotive Club of Victoria (RACV) Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/racv-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Automotive", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:43Z", "scope_published_at": "2026-08-11T07:12:44.650Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/racv-vdp-pro/changelog/80d0d164-dc93-4e80-a266-3e2c86ae100c.json" ], "in_scope": [ { "name": "https://www.racv.com.au", "asset_type": "website", "location": "https://racv.com.au", "group": "Royal Automotive Club of Victoria (RACV) - In scope " }, { "name": "https://www.bourkestreetgreen.com.au", "asset_type": "website", "location": "https://bourkestreetgreen.com.au", "group": "Royal Automotive Club of Victoria (RACV) - In scope " }, { "name": "https://arevo.com.au", "asset_type": "website", "location": "https://arevo.com.au", "group": "Royal Automotive Club of Victoria (RACV) - In scope " } ], "out_of_scope": [ { "name": "*.racv.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-0715b82e337d0133.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-76f8a9a7d7e1fa56", "name": "RSAC Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/rsac-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:25Z", "scope_published_at": "2025-10-09T20:54:55.161Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/rsac-vdp-pro/changelog/0083959e-e0b6-4a7d-aee3-40cb5fa66999.json" ], "in_scope": [ { "name": "RSAC Membership Application", "asset_type": "website", "location": "https://portal.onersac.com", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-76f8a9a7d7e1fa56.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-43691e3a06eb087c", "name": "Samsonite Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/samsonite-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:13Z", "scope_published_at": "2026-08-17T15:50:00.621Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/samsonite-vdp-pro/changelog/dbfb883c-f1fa-4c9d-88ff-4c260440d144.json" ], "in_scope": [ { "name": "Refer to 'Resources' for all Samsonite Websites and Servers within scope.", "asset_type": "website", "location": null, "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-43691e3a06eb087c.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-e19ce1fc3800a807", "name": "Santos Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/santos-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Oil & Gas", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:22Z", "scope_published_at": "2025-03-11T13:48:00.530Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/santos-vdp/changelog/14c3755e-740d-4462-9bd6-2b0551796100.json" ], "in_scope": [ { "name": "santos.com", "asset_type": "website", "location": "https://www.santos.com/", "group": "In Scope" }, { "name": "103.252.190.0/24", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "13.73.192.151", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "13.75.189.223", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "13.70.109.59", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "52.243.79.77", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "52.255.37.39", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "103.55.32.0/24", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "203.0.2.0/23", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "192.84.89.0/24", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "103.196.194.0/24", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "121.200.234.0/29", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "45.115.48.0/24", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "45.115.48.5/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "103.54.238.0/23", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "103.6.116.0/24", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "103.199.96.0/24", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "103.199.96.236/30", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "103.199.96.244/30", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "103.199.96.200/29", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "103.199.96.220/30", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "103.199.96.128/27", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "103.199.96.192/29", "asset_type": "other", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-e19ce1fc3800a807.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-96ff452445575134", "name": "Seagate VDP", "program_url": "https://bugcrowd.com/engagements/seagate-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:17Z", "scope_published_at": "2023-10-25T18:34:25.737Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/seagate-vdp/changelog/559c0f95-4fa5-4d69-94bb-1905505ad026.json" ], "in_scope": [ { "name": "lacie.com", "asset_type": "website", "location": "https://lacie.com", "group": "In Scope Targets" }, { "name": "lyvedogfood.seagate.com", "asset_type": "website", "location": "https://lyvedogfood.seagate.com", "group": "In Scope Targets" }, { "name": "lyveint.seagate.com", "asset_type": "website", "location": "https://lyveint.seagate.com", "group": "In Scope Targets" }, { "name": "lyvetst.seagate.com", "asset_type": "website", "location": "https://lyvetst.seagate.com", "group": "In Scope Targets" }, { "name": "pia.seagate.com", "asset_type": "website", "location": "https://pia.seagate.com", "group": "In Scope Targets" }, { "name": "plm.dothill.com", "asset_type": "website", "location": "https://plm.dothill.com", "group": "In Scope Targets" }, { "name": "portal-us.seagate.com", "asset_type": "website", "location": "https://portal-us.seagate.com", "group": "In Scope Targets" }, { "name": "seagate.com", "asset_type": "website", "location": "https://seagate.com", "group": "In Scope Targets" }, { "name": "seagategov.seagate.com", "asset_type": "website", "location": "https://seagategov.seagate.com", "group": "In Scope Targets" }, { "name": "ssl.seagate.com", "asset_type": "website", "location": "https://ssl.seagate.com", "group": "In Scope Targets" }, { "name": "verify.seagate.com", "asset_type": "website", "location": "https://verify.seagate.com", "group": "In Scope Targets" }, { "name": "*.seagate.com", "asset_type": "website", "location": "https://www.seagate.com", "group": "In Scope Targets" }, { "name": "api.seagate.com", "asset_type": "api", "location": null, "group": "In Scope Targets" }, { "name": "apps1.seagate.com", "asset_type": "api", "location": null, "group": "In Scope Targets" }, { "name": "apistore.seagate.com", "asset_type": "api", "location": null, "group": "In Scope Targets" }, { "name": "appstore.seagate.com", "asset_type": "website", "location": "https://appstore.seagate.com", "group": "In Scope Targets" }, { "name": "appstore-us.seagate.com", "asset_type": "website", "location": "https://appstore-us.seagate.com", "group": "In Scope Targets" }, { "name": "blog.lacie.com", "asset_type": "website", "location": "https://blog.lacie.com", "group": "In Scope Targets" }, { "name": "blog.seagate.com", "asset_type": "website", "location": "https://blog.seagate.com", "group": "In Scope Targets" }, { "name": "branding.seagate.com/", "asset_type": "website", "location": "https://branding.seagate.com/", "group": "In Scope Targets" }, { "name": "charitychina.seagate.com", "asset_type": "website", "location": "https://charitychina.seagate.com", "group": "In Scope Targets" }, { "name": "codereview.seagate.com", "asset_type": "website", "location": "https://codereview.seagate.com", "group": "In Scope Targets" }, { "name": "collective.lacie.com", "asset_type": "website", "location": "https://collective.lacie.com", "group": "In Scope Targets" }, { "name": "drivetrust.seagate.com", "asset_type": "website", "location": "https://drivetrust.seagate.com", "group": "In Scope Targets" }, { "name": "eapps.seagate.com", "asset_type": "website", "location": "https://eapps.seagate.com", "group": "In Scope Targets" }, { "name": "intelligent.media.seagate.com", "asset_type": "website", "location": "https://intelligent.media.seagate.com", "group": "In Scope Targets" }, { "name": "is.seagate.com", "asset_type": "website", "location": "https://is.seagate.com", "group": "In Scope Targets" }, { "name": "labs.seagate.com", "asset_type": "website", "location": "https://labs.seagate.com", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-96ff452445575134.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-40bbb4cb12d3b284", "name": "SeatGeek Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/seatgeek-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:33Z", "scope_published_at": "2025-07-28T16:21:52.345Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/seatgeek-vdp-pro/changelog/d490e919-ad94-4021-9936-c2606427777c.json" ], "in_scope": [ { "name": "https://seatgeek.com/", "asset_type": "website", "location": "https://seatgeek.com/", "group": "In scope" }, { "name": "https://api.seatgeek.com/", "asset_type": "api", "location": "https://api.seatgeek.com/", "group": "In scope" }, { "name": "SeatGeek Test Event", "asset_type": "website", "location": "https://seatgeek.com/silver-snakes-tickets/soccer/2026-01-02-7-pm/5684987?preview_token=OKBzQbJlKo", "group": "In scope" } ], "out_of_scope": [ { "name": "https://developer.seatgeek.com/", "asset_type": "website", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-40bbb4cb12d3b284.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-85439885c06dc115", "name": "Service NSW Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/service-nsw-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:47Z", "scope_published_at": "2025-08-14T00:08:30.024Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/service-nsw-vdp/changelog/11747c63-290e-45ee-a503-16741f4330f1.json" ], "in_scope": [ { "name": "*.account.service.nsw.gov.au", "asset_type": "website", "location": "https://account.service.nsw.gov.au", "group": "Service NSW" }, { "name": "*.service.nsw.gov.au", "asset_type": "website", "location": null, "group": "Service NSW" }, { "name": "*.api.service.nsw.gov.au", "asset_type": "api", "location": null, "group": "Service NSW" } ], "out_of_scope": [ { "name": "*nsw.gov.au", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-85439885c06dc115.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-fa9b0872ef612eaf", "name": "Shuffle Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/shuffle-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:09Z", "scope_published_at": "2026-09-08T22:19:35.412Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/shuffle-vdp-pro/changelog/cdcb3cdf-846b-406c-a0ae-8f324b44b9da.json" ], "in_scope": [ { "name": "*.shuffle.com", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.shuffle.us", "asset_type": "website", "location": null, "group": "In Scope " } ], "out_of_scope": [ { "name": "Third Party Software", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-fa9b0872ef612eaf.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-935bead7d64aba0b", "name": "Sky Disclosure Program", "program_url": "https://bugcrowd.com/engagements/sky-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:32Z", "scope_published_at": "2024-08-09T08:33:36.485Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/sky-vdp/changelog/298a7bd8-223e-42df-856f-ba24ff92865f.json" ], "in_scope": [ { "name": "All internet facing Sky assets (check the OOS section)", "asset_type": "other", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "*skybroadband.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-935bead7d64aba0b.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-48a6e3066aa434d6", "name": "SmartThings Vulnerability Disclosure", "program_url": "https://bugcrowd.com/engagements/smartthings", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:50Z", "scope_published_at": "2022-02-24T15:42:57.282Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/smartthings/changelog/9536048e-cb62-4794-8565-c80d153bdc1a.json" ], "in_scope": [ { "name": "SmartThings Hub", "asset_type": "iot", "location": null, "group": "In scope" }, { "name": "SmartThings Mobile Application for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/smartthings/id1222822904", "group": "In scope" }, { "name": "SmartThings Mobile Application for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.samsung.android.oneconnect", "group": "In scope" }, { "name": "SmartThings Rest APIs", "asset_type": "api", "location": "https://smartthings.developer.samsung.com/docs/api-ref/st-api.html", "group": "In scope" }, { "name": "SmartThings Graph Console", "asset_type": "website", "location": null, "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-48a6e3066aa434d6.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-13e674ef647905d8", "name": "Social Security Administration: Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/ssa-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:42Z", "scope_published_at": "2026-02-27T16:55:53.219Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ssa-vdp/changelog/c3aa7ff9-17ab-4a7e-8074-9cc22ace3874.json" ], "in_scope": [ { "name": "https://*.ssa.gov/*", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "https://*.segurosocial.gov/*", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "https://*.socialsecurity.gov/*", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "SSA CIDR Range 1", "asset_type": "network", "location": null, "group": "In Scope Targets" }, { "name": "SSA CIDR Range 2", "asset_type": "network", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "Targets not expressly listed as In Scope are Out of Scope", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "foia.ssa.gov", "asset_type": "website", "location": "https://foia.ssa.gov", "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-13e674ef647905d8.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-04b3e8f8a195f5f3", "name": "Sonic Healthcare Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/sonic-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Healthcare", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:28Z", "scope_published_at": "2026-09-02T05:14:07.179Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/sonic-vdp-pro/changelog/3f4cffdb-b7b7-49e5-ab22-4038907649f1.json" ], "in_scope": [ { "name": "Any internet-exposed assets that belong to Sonic Healthcare company and its subsidiaries", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "Other", "asset_type": "other", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-04b3e8f8a195f5f3.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-78a14f552eabc658", "name": "Sprout Social", "program_url": "https://bugcrowd.com/engagements/sproutsocial", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:53Z", "scope_published_at": "2025-08-20T15:05:51.968Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/sproutsocial/changelog/e1ff045a-ef97-4c1d-8847-264067c4188b.json" ], "in_scope": [ { "name": "Sprout Social for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/sprout-social/id475307859", "group": "In scope targets" }, { "name": "Sprout Social for Android", "asset_type": "android", "location": "https://sproutsocial.com/insights/sprout-social-android/", "group": "In scope targets" }, { "name": "sproutsocial.com/adapt/", "asset_type": "website", "location": "https://sproutsocial.com/adapt/", "group": "In scope targets" }, { "name": "sproutsocial.com/insights", "asset_type": "website", "location": "https://sproutsocial.com/insights", "group": "In scope targets" }, { "name": "sprout.link", "asset_type": "website", "location": "https://sprout.link", "group": "In scope targets" }, { "name": "media.sproutsocial.com", "asset_type": "website", "location": "https://media.sproutsocial.com", "group": "In scope targets" }, { "name": "sproutsocial.com", "asset_type": "website", "location": "https://sproutsocial.com", "group": "In scope targets" }, { "name": "advocacy.sproutsocial.com", "asset_type": "website", "location": "https://advocacy.sproutsocial.com", "group": "In scope targets" }, { "name": "api.advocacy.sproutsocial.com", "asset_type": "api", "location": "https://api.advocacy.sproutsocial.com", "group": "In scope targets" }, { "name": "*.taggermedia.com", "asset_type": "website", "location": "https://taggermedia.com", "group": "In scope targets" }, { "name": "influencer.sproutsocial.com", "asset_type": "website", "location": "https://influencer.sproutsocial.com", "group": "In scope targets" }, { "name": "creatorhub.sproutsocial.com", "asset_type": "website", "location": "https://creatorhub.sproutsocial.com", "group": "In scope targets" }, { "name": "api.influencer.sproutsocial.com", "asset_type": "api", "location": "https://api.influencer.sproutsocial.com", "group": "In scope targets" }, { "name": "app.sproutsocial.com", "asset_type": "website", "location": "https://app.sproutsocial.com", "group": "In scope targets" }, { "name": "app.sproutsocial.eu", "asset_type": "website", "location": "https://app.sproutsocial.eu", "group": "In scope targets" }, { "name": "identity.sproutsocial.com", "asset_type": "website", "location": "https://identity.sproutsocial.com", "group": "In scope targets" }, { "name": "identity.sproutsocial.eu", "asset_type": "website", "location": "https://identity.sproutsocial.eu", "group": "In scope targets" }, { "name": "revenue.sproutsocial.com", "asset_type": "website", "location": "https://revenue.sproutsocial.com", "group": "In scope targets" }, { "name": "revenue.sproutsocial.eu", "asset_type": "website", "location": "https://revenue.sproutsocial.eu", "group": "In scope targets" }, { "name": "sockets.sproutsocial.com", "asset_type": "website", "location": "https://sockets.sproutsocial.com", "group": "In scope targets" }, { "name": "sockets.sproutsocial.eu", "asset_type": "website", "location": "https://sockets.sproutsocial.eu", "group": "In scope targets" }, { "name": "secure-form.sproutsocial.com", "asset_type": "website", "location": "https://secure-form.sproutsocial.com", "group": "In scope targets" }, { "name": "secure-form.sproutsocial.eu", "asset_type": "website", "location": "https://secure-form.sproutsocial.eu", "group": "In scope targets" }, { "name": "share.sproutsocial.com", "asset_type": "website", "location": "https://share.sproutsocial.com", "group": "In scope targets" }, { "name": "app.sproutsocial.com/api", "asset_type": "api", "location": "https://app.sproutsocial.com/api", "group": "In scope targets" }, { "name": "api.sproutsocial.com", "asset_type": "api", "location": "https://api.sproutsocial.com", "group": "In scope targets" } ], "out_of_scope": [ { "name": "*.sproutsocial.com/wp-includes", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "pagely.sproutsocial.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "sproutsocial.com/wp-includes", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "jobboard.sproutsocial.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "Anything that CNAMEs to a third party", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "cms.sproutsocial.com", "asset_type": "website", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-78a14f552eabc658.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-c1cc0dad55d4175e", "name": "Stability AI US Services Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/stability-ai-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:34Z", "scope_published_at": "2025-05-13T18:38:00.675Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/stability-ai-vdp-pro/changelog/5bb417be-b5b1-4d4c-88de-e791ed4c4138.json" ], "in_scope": [ { "name": "Stability.AI Infrastructure (https://*.stability.ai)", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "Stability Platform API", "asset_type": "api", "location": "https://api.stability.ai/", "group": "In Scope" }, { "name": "Dreamstudio Web Application", "asset_type": "website", "location": "https://dreamstudio.stability.ai/", "group": "In Scope" }, { "name": "Dreamstudio API", "asset_type": "api", "location": "https://dreamstudio-api.stability.ai/", "group": "In Scope" }, { "name": "Stable Audio", "asset_type": "website", "location": "https://*.stableaudio.com/", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-c1cc0dad55d4175e.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-ad34d7cb1aed40db", "name": "Stake Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/stake-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:19Z", "scope_published_at": "2026-02-05T18:00:01.392Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/stake-vdp-pro/changelog/1a7caeff-79d1-4293-8c2f-8e290fe0d805.json" ], "in_scope": [ { "name": "https://stake.com/*", "asset_type": "website", "location": "https://stake.com/*", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-ad34d7cb1aed40db.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-df20a542ee9a99ae", "name": "State Farm VDP", "program_url": "https://bugcrowd.com/engagements/statefarm-esf", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Finance", "service_level": "P1 24/7", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:45Z", "scope_published_at": "2025-01-21T19:02:22.338Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/statefarm-esf/changelog/9641065e-1b8d-424e-b9f8-524390b242c7.json" ], "in_scope": [ { "name": "*statefarm.com", "asset_type": "website", "location": null, "group": "In scope" }, { "name": "State Farm Drive Safe and Save Mobile Application (iOS)", "asset_type": "ios", "location": null, "group": "In scope" }, { "name": "State Farm Drive Safe and Save Mobile Application (Android)", "asset_type": "android", "location": null, "group": "In scope" }, { "name": "State Farm Steer Clear Mobile Application (iOS)", "asset_type": "ios", "location": null, "group": "In scope" }, { "name": "State Farm Steer Clear Mobile Application (Android)", "asset_type": "android", "location": null, "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-df20a542ee9a99ae.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-b098c78c5513add9", "name": "State of California VDP", "program_url": "https://bugcrowd.com/engagements/cdt-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:10Z", "scope_published_at": "2023-02-07T17:12:58.315Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/cdt-vdp-pro/changelog/89a03378-ce75-4021-8815-fcbefb2d3f64.json" ], "in_scope": [ { "name": "*.ca.gov", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-b098c78c5513add9.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-2ef6b6e1540b7c93", "name": "State of Maryland Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/maryland-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:27Z", "scope_published_at": "2026-09-01T15:06:54.093Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/maryland-vdp-pro/changelog/a7dce790-95c8-4581-a8f5-57c71d0b9e5b.json" ], "in_scope": [ { "name": "*.maryland.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.md.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.state.md.us", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "networkMaryland", "asset_type": "network", "location": null, "group": "In Scope" }, { "name": "*.aacounty.org", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-2ef6b6e1540b7c93.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-3c7ab64d8b64c31f", "name": "Stickman 2", "program_url": "https://bugcrowd.com/engagements/stickman2", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "no_published_assets", "scope_captured_at": "2026-10-03T16:44:37Z", "scope_published_at": "2025-04-07T01:49:43.324Z", "scope_group_count": 0, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://bugcrowd.com/engagements/stickman2", "http_status": 200, "result": "empty_published_table", "note": "The official engagement page was available, but its public brief published zero scope groups and zero target rows. Policy prose may still define or limit scope; no asset row was inferred." }, "scope_source_urls": [ "https://bugcrowd.com/engagements/stickman2/changelog/d97caf37-4781-4d98-af1e-d102f9b3dd95.json" ], "in_scope": [], "out_of_scope": [], "policy_review_state": "directory_listing_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-3c7ab64d8b64c31f.md", "limitations": [ "Full program policy review remains outstanding.", "No public asset rows were captured; consult the live official program policy for any policy-defined scope.", "The official engagement page was available, but its public brief published zero scope groups and zero target rows. Policy prose may still define or limit scope; no asset row was inferred." ] }, { "id": "bugcrowd-f968b7d15829664c", "name": "StrongDM Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/strongdm", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:20Z", "scope_published_at": "2026-01-09T19:11:14.712Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/strongdm/changelog/b3499ffa-739f-4d0f-aa63-ffc1cde0b77d.json" ], "in_scope": [ { "name": "https://app.strongdm.com/", "asset_type": "website", "location": "https://app.strongdm.com/", "group": "In Scope" }, { "name": "StrongDM Java SDK", "asset_type": "other", "location": "https://github.com/strongdm/strongdm-sdk-java", "group": "In Scope" }, { "name": "StrongDM Ruby SDK", "asset_type": "other", "location": "https://github.com/strongdm/strongdm-sdk-ruby", "group": "In Scope" }, { "name": "StrongDM Python SDK", "asset_type": "other", "location": "https://github.com/strongdm/strongdm-sdk-python", "group": "In Scope" }, { "name": "StrongDM Go SDK", "asset_type": "other", "location": "https://github.com/strongdm/strongdm-sdk-go", "group": "In Scope" }, { "name": "StrongDM Gateway Docker/Kuberneters/Fargate Relay Container Image", "asset_type": "network", "location": "https://quay.io/repository/sdmrepo/relay?tab=info", "group": "In Scope" }, { "name": "SDM Client - Windows (sdm.exe)", "asset_type": "other", "location": "https://docs.strongdm.com/users/client/windows", "group": "In Scope" }, { "name": "SDM Client - macOS (sdm.app)", "asset_type": "other", "location": "https://docs.strongdm.com/users/client/macos", "group": "In Scope" }, { "name": "SDM Gateway - *nix application", "asset_type": "network", "location": "https://docs.strongdm.com/users/client/linux", "group": "In Scope" }, { "name": "*.sdm.network", "asset_type": "network", "location": null, "group": "In Scope" } ], "out_of_scope": [ { "name": "StrongDM Corporate Page", "asset_type": "website", "location": "https://www.strongdm.com", "group": "Out of Scope" }, { "name": "StrongDM Trial Sign Up", "asset_type": "website", "location": "https://www.strongdm.com/signup", "group": "Out of Scope" }, { "name": "StrongDM Documentation", "asset_type": "other", "location": "https://docs.strongdm.com", "group": "Out of Scope" }, { "name": "StrongDM Status Page", "asset_type": "other", "location": "https://status.strongdm.com", "group": "Out of Scope" }, { "name": "StrongDM Security Page", "asset_type": "other", "location": "https://security.strongdm.com", "group": "Out of Scope" }, { "name": "StrongDM Help Page", "asset_type": "website", "location": "https://help.strongdm.com", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-f968b7d15829664c.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-0a33bb240db28f3d", "name": "Stryker", "program_url": "https://bugcrowd.com/engagements/stryker-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": 1, "access_status": "open", "industry": "Healthcare", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:25Z", "scope_published_at": "2026-02-25T23:54:19.124Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/stryker-vdp/changelog/593f03de-8458-4647-901f-1a8f2e755028.json" ], "in_scope": [ { "name": "All public facing Stryker assets", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "Any asset or technology not explicitly owned by Stryker.", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-0a33bb240db28f3d.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-207944c1beac290c", "name": "Sunrun Vulnerability Disclosure Pro Engagement", "program_url": "https://bugcrowd.com/engagements/sunrun-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Consumer Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:26Z", "scope_published_at": "2026-09-23T19:10:12.004Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/sunrun-vdp-pro/changelog/b0e25799-d4d9-47f2-86dc-6b7c2d67772d.json" ], "in_scope": [ { "name": "https://ai.sunrun.com/", "asset_type": "website", "location": "https://ai.sunrun.com/", "group": "In Scope " }, { "name": "https://sunrunone.com/dashboard", "asset_type": "website", "location": "https://sunrunone.com/dashboard", "group": "In Scope " }, { "name": "https://www.valuereport.ai.sunrun.com/", "asset_type": "website", "location": "https://www.valuereport.ai.sunrun.com/", "group": "In Scope " }, { "name": "https://elephant.ai.sunrun.com/", "asset_type": "api", "location": "https://elephant.ai.sunrun.com/", "group": "In Scope " }, { "name": "https://www.affiliates.ai.sunrun.com/", "asset_type": "website", "location": "https://www.affiliates.ai.sunrun.com/", "group": "In Scope " }, { "name": "https://servicetransfer.staging.ai.sunrun.com/", "asset_type": "website", "location": "https://servicetransfer.staging.ai.sunrun.com/", "group": "In Scope " }, { "name": "https://ipa.ai.sunrun.com/", "asset_type": "api", "location": "https://ipa.ai.sunrun.com/", "group": "In Scope " } ], "out_of_scope": [ { "name": "Third-party SaaS services not owned or managed by Sunrun", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "Vendor-hosted platforms outside direct Sunrun control", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-207944c1beac290c.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-1cba7d35621f83d7", "name": "Telefónica Germany", "program_url": "https://bugcrowd.com/engagements/telefonicavdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:48Z", "scope_published_at": "2023-08-07T05:42:15.008Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/telefonicavdp/changelog/27e346bc-14f0-46d6-af7e-8e113ed0a551.json" ], "in_scope": [ { "name": "*.blau.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.o2online.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.telefonica.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.mediamarkt.o2service.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.mein.aetkasmart.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.saturn.o2service.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.sim-karte-aktivierung.blauworld.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.ayyildiz.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.base.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.alditalk-kundenbetreuung.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.fonic.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.fonic-mobile.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.netzclub.net", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.norma-mobil.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.nettokom.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.ortelmobile.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.whatsappsim.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.o2.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.o2spin.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.epos.vertriebspartner.de.o2.com", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "https://vertriebspartner.de.o2.com/partos", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.o2service.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.o2business.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.einfachprepaid.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.turkei-sim.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "PartOS iOS Application", "asset_type": "ios", "location": null, "group": "In scope targets" }, { "name": "PartOS Android Application", "asset_type": "android", "location": null, "group": "In scope targets" }, { "name": "O2 Business iOS Application", "asset_type": "ios", "location": "https://itunes.apple.com/us/app/o-business/id1219356865", "group": "In scope targets" }, { "name": "O2 Business Android Application", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=telefonica.de.o2business", "group": "In scope targets" }, { "name": "*.nova-mobil.de", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "Mein O2 iOS Application", "asset_type": "ios", "location": "https://apps.apple.com/de/app/mein-o2/id371338349", "group": "In scope targets" }, { "name": "Mein O2 Android Application", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=canvasm.myo2", "group": "In scope targets" } ], "out_of_scope": [ { "name": "*.mein.simfinity.de", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.k-classic-mobil.de", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://www.alditalk.de", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://www.udldigital.de", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://www.wayra.co.uk", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://mobilfunk.tchibo.de", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://www.think-big.org", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://shop-fanseite.telefonica.de", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.static.telefonica.de", "asset_type": "other", "location": null, "group": "Out of scope targets" }, { "name": "*.dyn.telefonica.de", "asset_type": "other", "location": null, "group": "Out of scope targets" }, { "name": "*.pool.telefonica.de", "asset_type": "other", "location": null, "group": "Out of scope targets" }, { "name": "https://mitarbeiter-outlet.telefonica.de", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://mein.aetkasmart.de", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "http://premiumpartner.fonic.de", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.m2m.o2.de", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://mdm.o2business.de", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.simfinity.de", "asset_type": "website", "location": null, "group": "Out of scope targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-1cba7d35621f83d7.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-7ca118b10b258890", "name": "Telstra Health VDP", "program_url": "https://bugcrowd.com/engagements/telstra-health", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Healthcare", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:38Z", "scope_published_at": "2025-10-09T22:35:23.022Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/telstra-health/changelog/3b919c1d-a9e6-45cc-a4a8-a98b35a68e0d.json" ], "in_scope": [ { "name": "www.telstrahealth.com", "asset_type": "website", "location": null, "group": "In-Scope Targets" }, { "name": "www.ncsr.gov.au", "asset_type": "website", "location": null, "group": "In-Scope Targets" }, { "name": "www.1800respect.org.au", "asset_type": "website", "location": null, "group": "In-Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-7ca118b10b258890.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-ec1f3cf76173302c", "name": "Telstra VDP", "program_url": "https://bugcrowd.com/engagements/telstra-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:18Z", "scope_published_at": "2025-10-09T22:29:55.412Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/telstra-vdp/changelog/02b46900-9459-4816-9127-17a43d8b3df8.json" ], "in_scope": [ { "name": "https://*.telstra.com/", "asset_type": "website", "location": "https://www.telstra.com/", "group": "Telstra - In Scope" }, { "name": "https://myid.telstra.com", "asset_type": "website", "location": "https://myid.telstra.com", "group": "Telstra - In Scope" }, { "name": "https://purple.telstra.com/", "asset_type": "website", "location": "https://purple.telstra.com/", "group": "Telstra - In Scope" }, { "name": "https://*.telstra.com.au/", "asset_type": "website", "location": "https://*.telstra.com.au/", "group": "Telstra - In Scope" }, { "name": "Telstra APIs", "asset_type": "api", "location": null, "group": "Telstra - In Scope" }, { "name": "My Telstra iOS app", "asset_type": "ios", "location": "https://apps.apple.com/au/app/my-telstra/id543829966", "group": "Mobile Targets" }, { "name": "My Telstra Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.telstra.mobile.android.mytelstra", "group": "Mobile Targets" } ], "out_of_scope": [ { "name": "*.mobile.telstra.com", "asset_type": "other", "location": "https://*.mobile.telstra.com", "group": "Telstra - Out of Scope" }, { "name": "cpe-*.bigpond.net.au", "asset_type": "other", "location": "https://cpe-*.bigpond.net.au", "group": "Telstra - Out of Scope" }, { "name": "capcpe-*.bigpond.net.au", "asset_type": "other", "location": "https://capcpe-*.bigpond.net.au", "group": "Telstra - Out of Scope" }, { "name": "cpe-*.telstra.net", "asset_type": "other", "location": "https://cpe-*.telstra.net", "group": "Telstra - Out of Scope" }, { "name": "*.lnk.telstra.net", "asset_type": "other", "location": "https://*.lnk.telstra.net", "group": "Telstra - Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-ec1f3cf76173302c.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-613327db0373c32b", "name": "Tennessee Valley Authority (TVA) Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/tva-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:26Z", "scope_published_at": "2025-09-23T17:57:36.276Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/tva-vdp/changelog/51537758-4867-43ed-a92b-719e515259c0.json" ], "in_scope": [ { "name": "*.tva.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.tva.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.mytva.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.energyright.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.tva-energyright.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.tvaenergyrightsolutions.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "tvaloans.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "tvasites.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "green.mytva.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "tvavirtual.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "tvadeposits.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "mytva.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "tvars.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "tvastem.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "tvarenewables.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "tvawcm.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "tvawcma.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "myenergyrightadvisor.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "energyright.efficientchoice.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "tva.dynamics365portals.us", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "tvasd.dynamics365portals.us", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "mytvara.org", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "tvamonitoring.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "tvasites.giswebtechguru.com", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-613327db0373c32b.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-6df51f6ee18c7b08", "name": "test engagement", "program_url": "https://bugcrowd.com/engagements/testing-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "no_published_assets", "scope_captured_at": "2026-10-03T16:44:29Z", "scope_published_at": "2025-08-22T17:47:16.537Z", "scope_group_count": 0, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://bugcrowd.com/engagements/testing-vdp-pro", "http_status": 200, "result": "empty_published_table", "note": "The official engagement page was available, but its public brief published zero scope groups and zero target rows. Policy prose may still define or limit scope; no asset row was inferred." }, "scope_source_urls": [ "https://bugcrowd.com/engagements/testing-vdp-pro/changelog/6202eb72-98ec-4580-b241-6d475adae7de.json" ], "in_scope": [], "out_of_scope": [], "policy_review_state": "directory_listing_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-6df51f6ee18c7b08.md", "limitations": [ "Full program policy review remains outstanding.", "No public asset rows were captured; consult the live official program policy for any policy-defined scope.", "The official engagement page was available, but its public brief published zero scope groups and zero target rows. Policy prose may still define or limit scope; no asset row was inferred." ] }, { "id": "bugcrowd-50f63105821abc11", "name": "The Bureau of Indian Education Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/bie-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:15Z", "scope_published_at": "2022-09-22T13:48:56.375Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/bie-vdp/changelog/aab5eebf-523b-4d73-bf0f-1239d732beb6.json" ], "in_scope": [ { "name": "www.bie.edu", "asset_type": "website", "location": "https://www.bie.edu", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-50f63105821abc11.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-3cdc1c553ef3cb0e", "name": "The Kroger Co - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/kroger-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:00Z", "scope_published_at": "2026-09-08T16:42:45.469Z", "scope_group_count": 6, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/kroger-vdp/changelog/f7ab1882-c840-4d13-9bf5-2022c4474030.json" ], "in_scope": [ { "name": "*.fredmeyer.com", "asset_type": "website", "location": "https://www.fredmeyer.com/", "group": "Grocery Shopping Experience" }, { "name": "*.marianos.com", "asset_type": "website", "location": "https://www.marianos.com/", "group": "Grocery Shopping Experience" }, { "name": "*.citymarket.com", "asset_type": "website", "location": "https://www.citymarket.com/", "group": "Grocery Shopping Experience" }, { "name": "*.smithsfoodanddrug.com", "asset_type": "website", "location": "https://www.smithsfoodanddrug.com", "group": "Grocery Shopping Experience" }, { "name": "*.frysfood.com", "asset_type": "website", "location": "https://www.frysfood.com/", "group": "Grocery Shopping Experience" }, { "name": "*.picknsave.com", "asset_type": "website", "location": "https://www.picknsave.com/", "group": "Grocery Shopping Experience" }, { "name": "*.bakersplus.com", "asset_type": "website", "location": "https://www.bakersplus.com/", "group": "Grocery Shopping Experience" }, { "name": "*.foodsco.net", "asset_type": "website", "location": "https://www.foodsco.net", "group": "Grocery Shopping Experience" }, { "name": "*.rulerfoods.com", "asset_type": "website", "location": "https://www.rulerfoods.com", "group": "Grocery Shopping Experience" }, { "name": "*.gerbes.com", "asset_type": "website", "location": "https://www.gerbes.com/", "group": "Grocery Shopping Experience" }, { "name": "*.roundys.com", "asset_type": "website", "location": "https://www.roundys.com", "group": "Grocery Shopping Experience" }, { "name": "*.ralphs.com", "asset_type": "website", "location": "https://www.ralphs.com/", "group": "Grocery Shopping Experience" }, { "name": "www.kroger.com", "asset_type": "website", "location": "https://kroger.com", "group": "Grocery Shopping Experience" }, { "name": "*.harristeeter.com", "asset_type": "website", "location": "https://www.harristeeter.com/", "group": "Grocery Shopping Experience" }, { "name": "*.qfc.com", "asset_type": "website", "location": "https://www.qfc.com/", "group": "Grocery Shopping Experience" }, { "name": "*.jaycfoods.com", "asset_type": "website", "location": "https://www.jaycfoods.com", "group": "Grocery Shopping Experience" }, { "name": "*.dillons.com", "asset_type": "website", "location": "https://www.dillons.com/", "group": "Grocery Shopping Experience" }, { "name": "*.metromarket.net", "asset_type": "website", "location": "https://www.metromarket.net", "group": "Grocery Shopping Experience" }, { "name": "*.food4less.com", "asset_type": "website", "location": "https://www.food4less.com/", "group": "Grocery Shopping Experience" }, { "name": "*.kingsoopers.com", "asset_type": "website", "location": "https://www.kingsoopers.com/", "group": "Grocery Shopping Experience" }, { "name": "*.pay-less.com", "asset_type": "website", "location": "https://www.pay-less.com", "group": "Grocery Shopping Experience" }, { "name": "*.krogerrealestate.com", "asset_type": "website", "location": "https://www.krogerrealestate.com/", "group": "The Kroger Co." }, { "name": "*.krogerprecisionmarketing.com", "asset_type": "website", "location": "https://www.krogerprecisionmarketing.com", "group": "The Kroger Co." }, { "name": "*.mylifeatkroger.com", "asset_type": "website", "location": "https://www.mylifeatkroger.com", "group": "The Kroger Co." }, { "name": "*.thekrogerco.com", "asset_type": "website", "location": "https://www.thekrogerco.com", "group": "The Kroger Co." }, { "name": "*.thekrogercozerohungerzerowastefoundation.com", "asset_type": "website", "location": "https://www.thekrogercozerohungerzerowastefoundation.com", "group": "The Kroger Co." }, { "name": "*.chefschoicecatering.com", "asset_type": "website", "location": "https://www.chefschoicecatering.com", "group": "The Kroger Co." }, { "name": "*.kroger.com", "asset_type": "website", "location": "https://www.kroger.com", "group": "The Kroger Co." }, { "name": "*.votekroger.com", "asset_type": "website", "location": "https://www.votekroger.com", "group": "The Kroger Co." }, { "name": "*.murrayscheese.com", "asset_type": "website", "location": "https://www.murrayscheese.com/", "group": "The Kroger Co." }, { "name": "*.krogerfamilycareers.com", "asset_type": "website", "location": "https://www.krogerfamilycareers.com", "group": "The Kroger Co." }, { "name": "*.homechef.com", "asset_type": "website", "location": "https://www.homechef.com/", "group": "The Kroger Co." }, { "name": "*.krogerprepaid.com", "asset_type": "website", "location": "https://www.krogerprepaid.com", "group": "The Kroger Co." }, { "name": "*.fredmeyerjewelers.com", "asset_type": "website", "location": "https://www.fredmeyerjewelers.com/", "group": "The Kroger Co." }, { "name": "*.krogerwireless.com", "asset_type": "website", "location": "https://www.krogerwireless.com/", "group": "The Kroger Co." }, { "name": "*.krogerschedule.com", "asset_type": "website", "location": "https://www.krogerschedule.com", "group": "Health & Wellness" }, { "name": "*.krogerhealth.com", "asset_type": "website", "location": "https://www.krogerhealth.com", "group": "Health & Wellness" }, { "name": "*.thelittleclinic.com", "asset_type": "website", "location": "https://www.thelittleclinic.com", "group": "Health & Wellness" }, { "name": "*.ppsrx.com", "asset_type": "website", "location": "https://www.ppsrx.com", "group": "Health & Wellness" }, { "name": "*.8451.com", "asset_type": "website", "location": "https://www.8451.com", "group": "8451" }, { "name": "api.kroger.com", "asset_type": "api", "location": "https://api.kroger.com", "group": "API/Webservices" }, { "name": "api.8451.com", "asset_type": "api", "location": "https://api.8451.com", "group": "API/Webservices" } ], "out_of_scope": [ { "name": "*/hc/help/contact-us", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://www.fredmeyerjewelers.com/service/content/emailus.aspx", "asset_type": "website", "location": "https://www.fredmeyerjewelers.com/service/content/emailus.aspx", "group": "Out of Scope" }, { "name": "https://www.8451.com/contact-us/", "asset_type": "website", "location": "https://www.8451.com/contact-us/", "group": "Out of Scope" }, { "name": "Any contact, signup, request form", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-3cdc1c553ef3cb0e.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-d6bd13de58bd71bb", "name": "The NatWest Group Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/natwest-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Banking", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:08Z", "scope_published_at": "2024-10-28T10:04:46.321Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/natwest-vdp/changelog/49d03813-c82a-496c-ad34-2305039031ac.json" ], "in_scope": [ { "name": "*.coutts.com", "asset_type": "website", "location": "https://*.coutts.com", "group": "NatWest Group" }, { "name": "*.natwest.com", "asset_type": "website", "location": "https://*.natwest.com", "group": "NatWest Group" }, { "name": "*.natwest.co.uk", "asset_type": "website", "location": "https://*.natwest.co.uk", "group": "NatWest Group" }, { "name": "*.natwestgroup.com", "asset_type": "website", "location": "https://*.natwestgroup.com", "group": "NatWest Group" }, { "name": "*.rbs.co.uk", "asset_type": "website", "location": "https://*.rbs.co.uk", "group": "NatWest Group" }, { "name": "*.rbs.com", "asset_type": "website", "location": "https://*.rbs.com", "group": "NatWest Group" }, { "name": "*.ulsterbank.co.uk", "asset_type": "website", "location": "https://*.ulsterbank.co.uk", "group": "NatWest Group" }, { "name": "*.ulsterbank.ie", "asset_type": "website", "location": "https://*.ulsterbank.ie", "group": "NatWest Group" }, { "name": "*.ulsterbank.com", "asset_type": "website", "location": "https://*.ulsterbank.com", "group": "NatWest Group" }, { "name": "*.natwestinternational.com", "asset_type": "website", "location": "https://*.natwestinternational.com", "group": "NatWest Group" }, { "name": "*.iombank.com", "asset_type": "website", "location": "https://*.iombank.com", "group": "NatWest Group" }, { "name": "*.rbsinternational.com", "asset_type": "website", "location": "https://*.rbsinternational.com", "group": "NatWest Group" }, { "name": "*.rbsmentor.co.uk", "asset_type": "website", "location": "https://*.rbsmentor.co.uk", "group": "NatWest Group" }, { "name": "*.rbspeople.com", "asset_type": "website", "location": "https://*.rbspeople.com", "group": "NatWest Group" }, { "name": "*.nwgpeople.com", "asset_type": "website", "location": "https://*.nwgpeople.com", "group": "NatWest Group" }, { "name": "*.natwestmentor.co.uk", "asset_type": "website", "location": "https://*.natwestmentor.co.uk", "group": "NatWest Group" }, { "name": "*.natwestoffshore.com", "asset_type": "website", "location": "https://*.natwestoffshore.com", "group": "NatWest Group" }, { "name": "*.couttscrowndependencies.com", "asset_type": "website", "location": "https://*.couttscrowndependencies.com", "group": "NatWest Group" }, { "name": "*.mymoneysense.com", "asset_type": "website", "location": "https://*.mymoneysense.com", "group": "NatWest Group" }, { "name": "*.holtsmilitarybank.co.uk", "asset_type": "website", "location": "https://*.holtsmilitarybank.co.uk", "group": "NatWest Group" }, { "name": "*.natwestgrouppeople.com", "asset_type": "website", "location": "https://*.natwestgrouppeople.com", "group": "NatWest Group" }, { "name": "*.lombard.co.uk", "asset_type": "website", "location": "https://*.lombard.co.uk", "group": "NatWest Group" }, { "name": "*.lombard.com", "asset_type": "website", "location": "https://*.lombard.com", "group": "NatWest Group" }, { "name": "*.managedtest.com", "asset_type": "website", "location": "https://*.managedtest.com", "group": "NatWest Group" }, { "name": "Any other asset that appears to belong to NatWest Group.", "asset_type": "other", "location": null, "group": "NatWest Group" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-d6bd13de58bd71bb.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-43c11be0aa0ab435", "name": "TNS Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/tns-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Telecommunications", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:25Z", "scope_published_at": "2026-09-15T18:25:30.652Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/tns-vdp-pro/changelog/3df77fd4-c895-4c37-828f-3ce2f1c1b99a.json" ], "in_scope": [ { "name": "*.TNSI.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "Commonlanguage.com", "asset_type": "website", "location": "https://www.commonlanguage.com/", "group": "In Scope" }, { "name": "UKonetouchswitch.com", "asset_type": "website", "location": "https://ukonetouchswitch.com/", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-43c11be0aa0ab435.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-3e64310688312f0f", "name": "Trimble Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/trimble-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:22Z", "scope_published_at": "2025-12-29T02:49:02.885Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/trimble-vdp-pro/changelog/8309ce5f-7aef-4b6d-ae29-7caff006d774.json" ], "in_scope": [ { "name": "All Trimble Owned Endpoints", "asset_type": "other", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-3e64310688312f0f.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-41cd7e796024ae5c", "name": "U. S. Wildland Fire Service - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/owf-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:20Z", "scope_published_at": "2026-08-31T13:55:47.489Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/owf-vdp/changelog/434e702c-a67c-4508-9a0c-da5acc525577.json" ], "in_scope": [ { "name": "*.firenet.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-41cd7e796024ae5c.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-d89165c920da9585", "name": "U.S International Development Finance Corporation - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/dfc-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:08Z", "scope_published_at": "2023-03-23T22:57:13.247Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/dfc-vdp/changelog/068f83a9-e060-4d89-a64f-effe04b50920.json" ], "in_scope": [ { "name": "*.dfc.gov", "asset_type": "website", "location": "https://*.dfc.gov", "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-d89165c920da9585.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-4455b195f329f1fb", "name": "U.S. Chemical Safety and Hazard Investigation Board - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/csb-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:13Z", "scope_published_at": "2022-11-16T01:21:03.596Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/csb-vdp/changelog/61db5d48-b756-4961-9675-cbd63353c3c2.json" ], "in_scope": [ { "name": "www.csb.gov", "asset_type": "website", "location": "https://www.csb.gov", "group": "In Scope Targets " }, { "name": "www.safetyvideos.gov", "asset_type": "website", "location": "https://www.Safetyvideos.gov", "group": "In Scope Targets " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-4455b195f329f1fb.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-ae917c39e7b919a9", "name": "U.S. Department of Commerce - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/usdoc-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:21Z", "scope_published_at": "2026-04-20T19:36:16.337Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/usdoc-vdp/changelog/3d77a480-c8c2-42be-b79b-d366eb5479ec.json" ], "in_scope": [ { "name": "*.dnsops.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.nist.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.noaa.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.uspto.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.census.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.doc.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.commerce.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.firstnet.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.export.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.trade.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.2020census.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.bea.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.aviationweather.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.ntis.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.weather.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.ap.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.bldrdoc.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.mbda.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.drought.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.bis.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.buyusa.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.chips.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.climate.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.ntia.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.manufacturing.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.eda.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.edison.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fishwatch.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.stopfakes.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.goes-r.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.gps.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.heat.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.hurricanes.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.icams-portal.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.iedison.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.ofcm.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.internet4all.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.internetforall.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.luca-appeals.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.manufacturingusa.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.marinecadastre.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.mfgusa.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.mgi.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.my2020census.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.nccoe.org", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.nehrp.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.time.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.tsunami.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.nwirp.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.papahanaumokuakea.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.pscr.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.privacyshield.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.sdr.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.selectusa.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.semiconductors.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.spaceweather.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.spectrum.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.standards.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.sworm.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.tasefiling.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.usicecenter.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.wwtg.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.xd.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.cwc.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.spd15revision.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "trumpcard.gov", "asset_type": "website", "location": "https://trumpcard.gov", "group": "In Scope Targets" }, { "name": "trumpgoldcard.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "NIST GitHub", "asset_type": "website", "location": "https://github.com/usnistgov/", "group": "In Scope Targets" }, { "name": "*.boulder.doc.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.natcast.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.natcast.net", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.natcast.org", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.nstc-usa.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.nstcusa.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.nstc-usa.net", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.nstc-usa.org", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.nstcusa.org", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.usnstc.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.usnstc.net", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.usnstc.org", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-ae917c39e7b919a9.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-0881b8b54f593689", "name": "U.S. Department of Transportation (DOT) Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/usdot-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:17Z", "scope_published_at": "2026-03-05T16:37:39.103Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/usdot-vdp/changelog/1f38b96b-1ad1-4f44-9eff-1094de30f296.json" ], "in_scope": [ { "name": "911.gov", "asset_type": "website", "location": "https://911.gov", "group": "In Scope Targets" }, { "name": "bts.gov", "asset_type": "website", "location": "https://bts.gov", "group": "In Scope Targets" }, { "name": "cmts.gov", "asset_type": "website", "location": "https://cmts.gov", "group": "In Scope Targets" }, { "name": "distracteddriving.gov", "asset_type": "website", "location": "https://distracteddriving.gov", "group": "In Scope Targets" }, { "name": "distraction.gov", "asset_type": "website", "location": "https://distraction.gov", "group": "In Scope Targets" }, { "name": "dot.gov", "asset_type": "website", "location": "https://dot.gov", "group": "In Scope Targets" }, { "name": "ems.gov", "asset_type": "website", "location": "https://ems.gov", "group": "In Scope Targets" }, { "name": "flyhealthy.gov", "asset_type": "website", "location": "https://flyhealthy.gov", "group": "In Scope Targets" }, { "name": "nhtsa.dot.gov", "asset_type": "website", "location": "https://nhtsa.dot.gov", "group": "In Scope Targets" }, { "name": "nhtsa.gov", "asset_type": "website", "location": "https://nhtsa.gov", "group": "In Scope Targets" }, { "name": "protectyourmove.gov", "asset_type": "website", "location": "https://protectyourmove.gov", "group": "In Scope Targets" }, { "name": "safecar.gov", "asset_type": "website", "location": "https://safecar.gov", "group": "In Scope Targets" }, { "name": "safeocs.gov", "asset_type": "website", "location": "https://safeocs.gov", "group": "In Scope Targets" }, { "name": "safercar.gov", "asset_type": "website", "location": "https://safercar.gov", "group": "In Scope Targets" }, { "name": "safertruck.gov", "asset_type": "website", "location": "https://safertruck.gov", "group": "In Scope Targets" }, { "name": "trafficsafetymarketing.gov", "asset_type": "website", "location": "https://trafficsafetymarketing.gov", "group": "In Scope Targets" }, { "name": "transportation.gov", "asset_type": "website", "location": "https://transportation.gov", "group": "In Scope Targets" }, { "name": "usmma.edu", "asset_type": "website", "location": "https://usmma.edu", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-0881b8b54f593689.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-27f823813122bd6e", "name": "U.S. Fish and Wildlife Service", "program_url": "https://bugcrowd.com/engagements/fws-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:28Z", "scope_published_at": "2023-01-27T17:39:30.552Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/fws-vdp/changelog/4f54a257-1e9e-474e-b4f1-5e253c9d7e91.json" ], "in_scope": [ { "name": "*.fws.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.rivers.gov", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-27f823813122bd6e.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-db9cf4d2fe92b4a2", "name": "U.S. General Services Administration - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/gsa-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:23Z", "scope_published_at": "2026-09-30T01:14:48.804Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/gsa-vdp/changelog/2dcc5434-558b-4539-88fe-bb632b3074be.json" ], "in_scope": [ { "name": "*.gsa.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.acquisitiongateway.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.acquisition.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.afadvantage.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.benefits.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.buyamerican.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.cao.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.cbca.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.cdo.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.cfo.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.challenge.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.cio.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.citizenscience.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.cloud.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.code.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.coffa.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.computersforlearning.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.contractdirectory.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.cpars.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.data.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.digital.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.ecpic.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.esrs.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.evaluation.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.facadatabase.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.faca.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fac.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fai.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fapiis.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fbf.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fbo.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fcsm.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fdms.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fedidcard.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fedramp.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.firstgov.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fmi.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.forms.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fpc.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fpds.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fpki.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fpki-lab.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fsd.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.fsrs.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.gobiernousa.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.go.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.govloans.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.gsaadvantage.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.gsaauctions.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.gsafleet.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.gsaig.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.identitysandbox.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.idmanagement.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.itdashboard.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.login.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.madeinamerica.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.ncmms.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.notify.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.paymentaccuracy.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.performance.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.pic.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.pif.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.pki.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.pki-lab.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.presidentialinnovationfellows.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.ppms.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.realestatesales.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.realpropertyprofile.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.reginfo.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.regulations.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.rocis.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.sam.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.search.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.section508.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.sftool.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.statspolicy.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.usability.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.usa.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.usagov.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.usai.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.us.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.ussm.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.reporting.gov", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-db9cf4d2fe92b4a2.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-d77c7baf93f1cc2c", "name": "U.S. Geological Survey", "program_url": "https://bugcrowd.com/engagements/usgs-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:12Z", "scope_published_at": "2024-09-13T14:38:20.660Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/usgs-vdp/changelog/e15bb79b-d857-430f-a8ea-4db9ffd35e7c.json" ], "in_scope": [ { "name": "*.usgs.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.acwi.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.earthquake.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.evergladesrestoration.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.nationalmap.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.watermonitor.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.fgdc.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.gcmrc.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.geoplatform.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.jem.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.lacoast.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.landfire.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.landimaging.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.lca.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.mrlc.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.mtbs.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.nemi.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.reportband.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.sciencebase.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.conservation.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.criticalminerals.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.volcano.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.wlci.gov", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.invasivespecies.gov", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-d77c7baf93f1cc2c.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-ff5ec604673ccb13", "name": "U.S. Securities and Exchange Commission (SEC) - Vulnerability Disclosure Program", "program_url": "https://gov.bugcrowd.net/engagements/sec-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": true, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:12Z", "scope_published_at": "2026-08-12T17:13:45.023Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://gov.bugcrowd.net/engagements/sec-vdp/changelog/7dce9446-f985-4317-a4a2-c0000f8cd102.json" ], "in_scope": [ { "name": "*.sec.gov", "asset_type": "website", "location": "https://www.sec.gov/", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-ff5ec604673ccb13.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-b15a62573a7a45d6", "name": "U.S. Small Business Administration (SBA) Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/sba-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:40Z", "scope_published_at": "2025-01-28T18:00:01.319Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/sba-vdp/changelog/4a9ba772-b58c-4648-9640-828df28f631f.json" ], "in_scope": [ { "name": "*.sba.gov", "asset_type": "website", "location": "https://www.sba.gov", "group": "In Scope Targets" }, { "name": "*.sbir.com", "asset_type": "website", "location": "https://www.sbir.gov/", "group": "In Scope Targets" }, { "name": "*.nwbc.com", "asset_type": "website", "location": "https://www.nwbc.gov/", "group": "In Scope Targets" }, { "name": "*.business.com", "asset_type": "website", "location": "https://business.gov", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-b15a62573a7a45d6.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-4e34f86d65a857f2", "name": "Udall Foundation Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/udall-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:34Z", "scope_published_at": "2025-04-24T18:57:26.406Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/udall-vdp/changelog/c91755b1-cbcd-424f-bbf0-22cdc024c255.json" ], "in_scope": [ { "name": "*.udall.gov", "asset_type": "website", "location": "https://*.udall.gov", "group": "In Scope Targets" }, { "name": "*.ecr.gov", "asset_type": "website", "location": "https://*.ecr.gov", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-4e34f86d65a857f2.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-114edfb42cacce71", "name": "Ulta Beauty Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/ultabeauty-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:04Z", "scope_published_at": "2025-10-23T17:14:59.467Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ultabeauty-vdp/changelog/99b04282-0f12-4f72-81a8-fab3bdfd90d7.json" ], "in_scope": [ { "name": "Main Website", "asset_type": "website", "location": "https://www.ulta.com", "group": "SpaceNK Website" }, { "name": "Mobile Application - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.ulta&hl=en_US&gl=US", "group": "SpaceNK Website" }, { "name": "Mobile Application - iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/ulta-beauty-makeup-skincare/id561930308", "group": "SpaceNK Website" }, { "name": "Glam Street", "asset_type": "website", "location": "https://www.glamst.com", "group": "SpaceNK Website" }, { "name": "Ulta Inc", "asset_type": "website", "location": "https://www.ultainc.com", "group": "SpaceNK Website" }, { "name": "Ulta Training", "asset_type": "website", "location": "https://www.ultatraining.com", "group": "SpaceNK Website" }, { "name": "SpaceNK Website", "asset_type": "website", "location": "https://www.spacenk.com", "group": "SpaceNK Website" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-114edfb42cacce71.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-a58abab0f863f55a", "name": "Umbrella Corporation Demo VDP", "program_url": "https://bugcrowd.com/engagements/umbrella-demo-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Biotech", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": true, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:24Z", "scope_published_at": "2026-09-09T02:30:28.469Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/umbrella-demo-vdp-pro/changelog/694d507f-e247-49d3-bafa-98e2cf44c9d2.json" ], "in_scope": [ { "name": "https://www.umbrella.corp/", "asset_type": "website", "location": null, "group": "High Priority In-Scope Assets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-a58abab0f863f55a.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-ab809b2562b9e467", "name": "Unilever Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/unilever-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:44Z", "scope_published_at": "2026-09-08T15:23:44.295Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/unilever-vdp/changelog/a6464e6a-c230-4dba-99b1-dd54f2eb51be.json" ], "in_scope": [ { "name": "███████████████████████████████", "asset_type": "website", "location": null, "group": "███████████████████████" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-ab809b2562b9e467.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-fca1fac7601afb6e", "name": "Unisys Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/unisys-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:44Z", "scope_published_at": "2025-09-11T08:05:09.018Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/unisys-vdp-pro/changelog/e318f8af-0bc0-4f0a-89ec-066d6d19c4aa.json" ], "in_scope": [ { "name": "*.unisys.com", "asset_type": "website", "location": "http://unisys.com/", "group": "In scope" }, { "name": "*.unifysquare.com", "asset_type": "website", "location": "http://unifysquare.com/", "group": "In scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-fca1fac7601afb6e.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-c52797df6a24a24b", "name": "United Airlines", "program_url": "https://bugcrowd.com/engagements/united-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Transportation", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:34Z", "scope_published_at": "2026-09-23T20:54:32.725Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/united-vdp/changelog/507b321c-25a9-4552-b8b8-ae7f20cabc02.json" ], "in_scope": [ { "name": "*.united.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.ual.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "United Mobile App for iOS", "asset_type": "ios", "location": null, "group": "In Scope Targets" }, { "name": "United Mobile App for Android", "asset_type": "android", "location": null, "group": "In Scope Targets" }, { "name": "MileagePlus X App for iOS", "asset_type": "ios", "location": null, "group": "In Scope Targets" }, { "name": "MileagePlus X App for Android", "asset_type": "android", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "mpdining.rewardsnetwork.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "3rd party applications/services", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "hotels.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "vacations.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "cars.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "newsroom.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "ir.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "hub.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "jobparters.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "careers.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "opinions.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "globallinks.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "dutyfree.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "bigmetalbird.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "globalservices.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "uatp.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "brand.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "thanksamillion.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.unitedmileageplus.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "mystatus.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "newspaper-miles.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.mileageplus.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "cruises.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "cardmemberoffers.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "ualmiles.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "uma.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "unitedshop.summitmg.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "united-veterans.jobs", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "clubconferencerooms.united.com/unit", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "theexplorercard.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "mpclubcard.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "myexplorercard.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "unitedexplorecard.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "unitedexplorer.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "unitedexplorercard.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "mileageplusawards.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "Onboard Wi-Fi, entertainment systems or avionics", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "m.mpdining.rewardsnetwork.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "news.united.com/responsys", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "survey.continental.com/vovici.net", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "booking.unitedcargo.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "chargerback.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.unitedvacationsdive.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "packages.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "bp.ual.com", "asset_type": "website", "location": "https://bp.ual.com", "group": "Out of Scope Targets" }, { "name": "mycargo.unitedcargo.com", "asset_type": "website", "location": "https://mycargo.unitedcargo.com", "group": "Out of Scope Targets" }, { "name": "chartercateringops.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "salesuat.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "chartersmanifest.united.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-c52797df6a24a24b.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-ca613a154649d177", "name": "United States Agency for Global Media Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/usagm-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:11Z", "scope_published_at": "2023-01-23T19:20:25.040Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/usagm-vdp/changelog/05d59a09-b48a-4247-99cd-ee5c5c99176c.json" ], "in_scope": [ { "name": "*.opentech.fund", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.alhurra.com", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.radiosawa.com", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.rfa.org", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.rferl.org", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.radiotelevisionmarti.com", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.insidevoa.com", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "*.usagm.gov", "asset_type": "website", "location": null, "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-ca613a154649d177.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-62c0ae6770c0076f", "name": "United States Department of Agriculture: Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/usda-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:37Z", "scope_published_at": "2021-11-19T18:37:22.865Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/usda-vdp/changelog/7cddb925-30c9-4e7d-91b3-c6d28afd15b2.json" ], "in_scope": [ { "name": "https://www.fsis.usda.gov/", "asset_type": "website", "location": "https://www.fsis.usda.gov/", "group": "In Scope" }, { "name": "https://www.fas.usda.gov/", "asset_type": "website", "location": "https://www.fas.usda.gov/", "group": "In Scope" }, { "name": "https://www.aphis.usda.gov/aphis/home/", "asset_type": "website", "location": "https://www.aphis.usda.gov/aphis/home/", "group": "In Scope" }, { "name": "https://www.agcounts.usda.gov/static/cawi/layouts/cawi/breeze/index.html", "asset_type": "website", "location": "https://www.agcounts.usda.gov/static/cawi/layouts/cawi/breeze/index.html", "group": "In Scope" }, { "name": "https://www.nass.usda.gov/", "asset_type": "website", "location": "https://www.nass.usda.gov/", "group": "In Scope" }, { "name": "https://ask.usda.gov/s/", "asset_type": "website", "location": "https://ask.usda.gov/s/", "group": "In Scope" }, { "name": "https://www.rma.usda.gov/", "asset_type": "website", "location": "https://www.rma.usda.gov/", "group": "In Scope" }, { "name": "https://oha.usda.gov/", "asset_type": "website", "location": "https://oha.usda.gov/", "group": "In Scope" }, { "name": "https://www.farmers.gov/", "asset_type": "website", "location": "https://www.farmers.gov/", "group": "In Scope" }, { "name": "https://www.oem.usda.gov/", "asset_type": "website", "location": "https://www.oem.usda.gov/", "group": "In Scope" }, { "name": "https://www.dietaryguidelines.gov/", "asset_type": "website", "location": "https://www.dietaryguidelines.gov/", "group": "In Scope" }, { "name": "https://professionalstandards.fns.usda.gov/", "asset_type": "website", "location": "https://professionalstandards.fns.usda.gov/", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-62c0ae6770c0076f.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-a273a5da9b902045", "name": "United States International Trade Commission - Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/usitc-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:06Z", "scope_published_at": "2023-07-26T18:25:01.552Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/usitc-vdp/changelog/7272bf30-66a3-46f7-bbf8-0818c6421c84.json" ], "in_scope": [ { "name": "https://*.usitc.gov", "asset_type": "website", "location": "https://*.usitc.gov", "group": "In Scope " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-a273a5da9b902045.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-4d6a776d68a4a951", "name": "Universal Service Administrative Co Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/usac-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Telecommunications", "service_level": "P1 24/7", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:30Z", "scope_published_at": "2025-07-22T19:15:20.306Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/usac-vdp-pro/changelog/36051317-8c70-4f20-8405-c1000a0f43f8.json" ], "in_scope": [ { "name": "https://usac.okta.com/api/v1/groups/{{groupId}}/users/{{userId}}", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "https://usac.okta.com/api/v1/groups/{{groupId}}", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "https://usac.okta.com/api/v1/groups", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "https://usac.okta.com/api/v1/sessions/{{sessionId}}", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "https://usac.okta.com/api/v1/users/{{userId}}", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "https://usac.okta.com/api/v1/users/{{userId}}/lifecycle/reset_password?sendEmail=false", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "https://usac.okta.com/api/v1/users/{{userId}}/lifecycle/expire_password?tempPassword=true", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "https://usac.okta.com/api/v1/users/{{userId}}/lifecycle/unlock", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "https://usac.okta.com/api/v1/users/{{userId}}/lifecycle/deactivate", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "https://usac.okta.com/api/v1/users/{{userId}}/lifecycle/activate?sendEmail=false", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "Platform Access - Okta", "asset_type": "website", "location": "https://usac.okta.com", "group": "In Scope" }, { "name": "Platform Access - One Portal", "asset_type": "website", "location": "https://forms.universalservice.org/portal/login", "group": "In Scope" }, { "name": "Platform Access - USAC", "asset_type": "website", "location": "https://www.usac.org/", "group": "In Scope" }, { "name": "Platform Access - NV", "asset_type": "website", "location": "https://getinternet.gov/apply?id=nv_home&ln=RW5nbGlzaA%3D%3D", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-4d6a776d68a4a951.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-8597cbd662608759", "name": "University of Canterbury Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/university-canterbury-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Education", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:33Z", "scope_published_at": "2025-11-20T01:32:13.276Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/university-canterbury-vdp-pro/changelog/60d02fdf-24a4-47b6-a6ce-e34803cfbfee.json" ], "in_scope": [ { "name": "*.canterbury.ac.nz", "asset_type": "website", "location": "http://canterbury.ac.nz/", "group": "In Scope" }, { "name": "uconline.ac.nz", "asset_type": "website", "location": "http://uconline.ac.nz/", "group": "In Scope" }, { "name": "koawa.co.nz", "asset_type": "website", "location": "http://koawa.co.nz/", "group": "In Scope" }, { "name": "hitlabnz.org", "asset_type": "website", "location": "http://hitlabnz.org/", "group": "In Scope" }, { "name": "ucsa.org.nz", "asset_type": "website", "location": "http://ucsa.org.nz/", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-8597cbd662608759.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-0b330b4385e9d5bb", "name": "University of Melbourne Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/uni-melbourne-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:24Z", "scope_published_at": "2024-10-02T05:01:05.667Z", "scope_group_count": 3, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/uni-melbourne-vdp/changelog/b69beeee-cf0b-4630-a624-9e19bc9ead74.json" ], "in_scope": [ { "name": "*.unimelb.edu.au", "asset_type": "website", "location": "https://*.unimelb.edu.au", "group": "University of Melbourne - University services in scope" }, { "name": "103.12.108.0/22", "asset_type": "network", "location": null, "group": "University of Melbourne - University services in scope" }, { "name": "128.250.0.0/16", "asset_type": "network", "location": null, "group": "University of Melbourne - University services in scope" }, { "name": "https://www.pollenforecast.com.au/", "asset_type": "website", "location": "https://www.pollenforecast.com.au/", "group": "University of Melbourne - Pollen Monitoring in scope" }, { "name": "Melbourne Pollen Count - iOS app", "asset_type": "ios", "location": "https://apps.apple.com/au/app/melbourne-pollen-count/id707461899", "group": "University of Melbourne - Pollen Monitoring in scope" }, { "name": "Melbourne Pollen Count - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.plenum.pollen", "group": "University of Melbourne - Pollen Monitoring in scope" }, { "name": "Canberra Pollen Count - iOS app", "asset_type": "ios", "location": "https://apps.apple.com/au/app/canberra-pollen-count/id914338280", "group": "University of Melbourne - Pollen Monitoring in scope" }, { "name": "Canberra Pollen Count - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.plenum.canberra", "group": "University of Melbourne - Pollen Monitoring in scope" }, { "name": "Sydney Pollen Count - iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/sydney-pollen-count-forecast/id1036166930", "group": "University of Melbourne - Pollen Monitoring in scope" }, { "name": "Sydney Pollen Count - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.plenum.sydney", "group": "University of Melbourne - Pollen Monitoring in scope" }, { "name": "Perth Pollen Count - iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/perth-pollen-count/id1640644173", "group": "University of Melbourne - Pollen Monitoring in scope" }, { "name": "Perth Pollen Count - Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.plenum.perth", "group": "University of Melbourne - Pollen Monitoring in scope" }, { "name": "45.113.232.0/22", "asset_type": "network", "location": null, "group": "University of Melbourne - Research Cloud (MRC) in scope" }, { "name": "103.6.252.0/22", "asset_type": "network", "location": null, "group": "University of Melbourne - Research Cloud (MRC) in scope" }, { "name": "115.146.80.0/20", "asset_type": "network", "location": null, "group": "University of Melbourne - Research Cloud (MRC) in scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-0b330b4385e9d5bb.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-2a024f681d2cd9f3", "name": "US Environmental Protection Agency Vulnerability Disclosure", "program_url": "https://bugcrowd.com/engagements/epa-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Government", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:30Z", "scope_published_at": "2023-01-20T18:06:37.421Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/epa-vdp/changelog/96c72a1b-b1d6-4b57-9213-adbd51a059a5.json" ], "in_scope": [ { "name": "*.epa.gov", "asset_type": "website", "location": null, "group": "EPA" }, { "name": "*.airnow.gov", "asset_type": "website", "location": null, "group": "EPA" }, { "name": "*.airknowledge.gov", "asset_type": "website", "location": null, "group": "EPA" }, { "name": "*.energystar.gov", "asset_type": "website", "location": null, "group": "EPA" }, { "name": "*.foiaonline.gov", "asset_type": "website", "location": null, "group": "EPA" }, { "name": "*.FEDCENTER.GOV", "asset_type": "website", "location": "https://*.FEDCENTER.GOV", "group": "EPA" }, { "name": "*.FRTR.GOV", "asset_type": "website", "location": "https://*.FRTR.GOV", "group": "EPA" }, { "name": "*.GLNPO.GOV", "asset_type": "website", "location": "https://*.GLNPO.GOV", "group": "EPA" }, { "name": "*.URBANWATERS.GOV", "asset_type": "website", "location": "https://*.URBANWATERS.GOV", "group": "EPA" }, { "name": "*.SUSTAINABILITY.GOV", "asset_type": "website", "location": "https://*.SUSTAINABILITY.GOV", "group": "EPA" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-2a024f681d2cd9f3.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-7c0aaff62ad54c8e", "name": "Victoria's Secret Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/victoriassecret-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:41Z", "scope_published_at": "2026-05-13T13:21:35.595Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/victoriassecret-vdp/changelog/5fee854c-9a3b-4bc5-8cef-6ea8a612866f.json" ], "in_scope": [ { "name": "victoriassecret.com/us", "asset_type": "website", "location": "https://www.victoriassecret.com/us/", "group": "In Scope Targets" }, { "name": "Pink Nation iOS app", "asset_type": "ios", "location": "https://apps.apple.com/us/app/pink-nation/id463630399", "group": "In Scope Targets" }, { "name": "Pink Nation Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.victoriassecret.pinknation", "group": "In Scope Targets" }, { "name": "Victoria's Secret iOS app", "asset_type": "ios", "location": "https://apps.apple.com/us/app/victorias-secret/id336860594", "group": "In Scope Targets" }, { "name": "Victoria's Secret Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.victoriassecret.vsaa", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-7c0aaff62ad54c8e.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-330f2dc452433035", "name": "Village Roadshow Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/village-roadshow-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:49Z", "scope_published_at": "2024-09-19T05:57:39.052Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/village-roadshow-vdp-pro/changelog/0c128438-aeab-43c6-beaa-eac69c211589.json" ], "in_scope": [ { "name": "*.vrl.com.au", "asset_type": "website", "location": "https://vrl.com.au", "group": "In Scope Targets" }, { "name": "*.vrtp.com.au", "asset_type": "website", "location": "https://*.vrtp.com.au", "group": "In Scope Targets" }, { "name": "*.roadshow.com.au", "asset_type": "website", "location": "https://roadshow.com.au", "group": "In Scope Targets" }, { "name": "*.topgolf.com.au", "asset_type": "website", "location": "https://topgolf.com.au", "group": "In Scope Targets" }, { "name": "*.villagecinemas.com.au", "asset_type": "website", "location": "https://villagecinemas.com.au", "group": "In Scope Targets" }, { "name": "*.intencity.com.au", "asset_type": "website", "location": "https://intencity.com.au", "group": "In Scope Targets" }, { "name": "*.wetnwild.com.au", "asset_type": "website", "location": "https://wetnwild.com.au", "group": "In Scope Targets" }, { "name": "*.themeparks.com.au", "asset_type": "website", "location": "https://themeparks.com.au", "group": "In Scope Targets" }, { "name": "*.outbackspectacular.com.au", "asset_type": "website", "location": "https://outbackspectacular.com.au", "group": "In Scope Targets" }, { "name": "*.paradisecountry.com.au", "asset_type": "website", "location": "https://paradisecountry.com.au", "group": "In Scope Targets" }, { "name": "*.seaworldresort.com.au", "asset_type": "website", "location": "https://seaworldresort.com.au", "group": "In Scope Targets" }, { "name": "*.seaworld.com.au", "asset_type": "website", "location": "https://seaworld.com.au", "group": "In Scope Targets" }, { "name": "*.seaworldcarnivale.com.au", "asset_type": "website", "location": "https://seaworldcarnivale.com.au", "group": "In Scope Targets" }, { "name": "*.movieworld.com.au", "asset_type": "website", "location": "https://movieworld.com.au", "group": "In Scope Targets" }, { "name": "*.whitechristmas.com.au", "asset_type": "website", "location": "https://whitechristmas.com.au", "group": "In Scope Targets" }, { "name": "*.roadshowroughdiamond.com", "asset_type": "website", "location": "https://roadshowroughdiamond.com", "group": "In Scope Targets" }, { "name": "*.frightnights.com.au", "asset_type": "website", "location": "https://frightnights.com.au", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-330f2dc452433035.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-57b4ef5a3f8a81a0", "name": "Virtru Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/virtru-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Media", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:40Z", "scope_published_at": "2026-09-30T21:20:35.055Z", "scope_group_count": 4, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/virtru-vdp-pro/changelog/c4d23f5f-95dc-4d27-9126-4dafc4eb05ef.json" ], "in_scope": [ { "name": "api.virtru.com", "asset_type": "api", "location": "https://api.virtru.com/*", "group": "Virtru SaaS APIs" }, { "name": "api.virtru.com/accounts", "asset_type": "api", "location": null, "group": "Virtru SaaS APIs" }, { "name": "api.virtru.com/kas", "asset_type": "api", "location": null, "group": "Virtru SaaS APIs" }, { "name": "audit.virtru.com", "asset_type": "api", "location": null, "group": "Virtru SaaS APIs" }, { "name": "api.virtru.com/encrypted-storage", "asset_type": "api", "location": null, "group": "Virtru SaaS APIs" }, { "name": "api.virtru.com/auth", "asset_type": "api", "location": null, "group": "Virtru SaaS APIs" }, { "name": "Virtru SDKs", "asset_type": "iot", "location": "https://developer.virtru.com/docs/sdk", "group": "Virtru SDKs" }, { "name": "Virtru Gmail Plugin", "asset_type": "other", "location": "https://www.virtru.com/install/#", "group": "Virtru Encryption Clients" }, { "name": "Virtru Outlook Plugin ['10, '13, '16, '19]", "asset_type": "other", "location": "https://www.virtru.com/install/#", "group": "Virtru Encryption Clients" }, { "name": "Virtru iOS Application", "asset_type": "ios", "location": "https://apps.apple.com/us/app/virtru-email-protection/id789957178#?platform=iphone", "group": "Virtru Encryption Clients" }, { "name": "Virtru Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.virtru.email&hl=en_US&gl=US", "group": "Virtru Encryption Clients" }, { "name": "Virtru O365/Outlook Plugin", "asset_type": "other", "location": "https://support.virtru.com/hc/en-us/articles/1500010860821", "group": "Virtru Encryption Clients" }, { "name": "Secure Reader", "asset_type": "website", "location": "https://secure.virtru.com/secure-reader", "group": "Virtru Web Apps" }, { "name": "Virtru Control Center (formerly Dashboard)", "asset_type": "website", "location": "https://secure.virtru.com/dashboard", "group": "Virtru Web Apps" }, { "name": "Secure Share", "asset_type": "website", "location": "https://secure.virtru.com/secure-share", "group": "Virtru Web Apps" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-57b4ef5a3f8a81a0.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-173851f15943efca", "name": "Webflow Vulnerability Disclosure Pro Engagement", "program_url": "https://bugcrowd.com/engagements/webflow-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:32Z", "scope_published_at": "2026-08-14T19:40:18.304Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/webflow-vdp-pro/changelog/5388d039-dc1b-45ee-94c0-820d7a100579.json" ], "in_scope": [ { "name": "Webflow", "asset_type": "website", "location": "https://webflow.com", "group": "In-Scope Targets" }, { "name": "Webflow Dashboard", "asset_type": "website", "location": "https://webflow.com/dashboard", "group": "In-Scope Targets" }, { "name": "*.design.webflow.com", "asset_type": "website", "location": null, "group": "In-Scope Targets" }, { "name": "api.webflow.com", "asset_type": "api", "location": null, "group": "In-Scope Targets" }, { "name": "auth.webflow.com", "asset_type": "api", "location": null, "group": "In-Scope Targets" }, { "name": "Webflow Marketplace App - HubSpot", "asset_type": "website", "location": "https://webflow.com/apps/detail/hubspot", "group": "In-Scope Targets" }, { "name": "Webflow Marketplace App - Figma to Webflow", "asset_type": "website", "location": "https://webflow.com/apps/detail/figma-to-webflow", "group": "In-Scope Targets" }, { "name": "Webflow Marketplace App - Stripe", "asset_type": "website", "location": "https://webflow.com/apps/detail/stripe", "group": "In-Scope Targets" }, { "name": "Webflow Marketplace App - Google site tool for Webflow", "asset_type": "website", "location": "https://webflow.com/apps/detail/google-site-tools-for-webflow", "group": "In-Scope Targets" }, { "name": "Webflow Marketplace App - Bynder", "asset_type": "website", "location": "https://webflow.com/apps/detail/bynder", "group": "In-Scope Targets" }, { "name": "Webflow Marketplace App - Zapier", "asset_type": "website", "location": "https://webflow.com/apps/detail/zapier", "group": "In-Scope Targets" }, { "name": "app.intellimize.com", "asset_type": "website", "location": null, "group": "In-Scope Targets" }, { "name": "api.intellimize.co", "asset_type": "api", "location": null, "group": "In-Scope Targets" }, { "name": "log.intellimize.co", "asset_type": "api", "location": null, "group": "In-Scope Targets" }, { "name": "forum.webflow.com", "asset_type": "website", "location": null, "group": "In-Scope Targets" }, { "name": "affiliates.webflow.com", "asset_type": "website", "location": null, "group": "In-Scope Targets" }, { "name": "university.webflow.com", "asset_type": "website", "location": null, "group": "In-Scope Targets" }, { "name": "experts.webflow.com", "asset_type": "website", "location": null, "group": "In-Scope Targets" }, { "name": "Webflow Community", "asset_type": "website", "location": "https://webflow.com/community", "group": "In-Scope Targets" }, { "name": "Webflow Resources", "asset_type": "website", "location": "https://webflow.com/resources", "group": "In-Scope Targets" }, { "name": "Webflow Blog", "asset_type": "website", "location": "https://webflow.com/blog", "group": "In-Scope Targets" }, { "name": "Webflow Open Source", "asset_type": "other", "location": "https://github.com/webflow", "group": "In-Scope Targets" } ], "out_of_scope": [ { "name": "webflowconf.webflow.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.webflow.io", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "discourse.webflow.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Webflow Development Environments", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "wishlist.webflow.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "community.webflow.com", "asset_type": "website", "location": "https://community.webflow.com", "group": "Out of Scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-173851f15943efca.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-4934c276349e84c5", "name": "WestJet's Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/westjet-disclose", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:43Z", "scope_published_at": "2020-08-20T15:38:50.946Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/westjet-disclose/changelog/16e13731-0452-4e38-9ca5-80e7063691e3.json" ], "in_scope": [ { "name": "www.westjet.com", "asset_type": "website", "location": "https://www.westjet.com", "group": "WestJet VDP Pro In-Scope Group" }, { "name": "www.flyswoop.com", "asset_type": "website", "location": "https://www.flyswoop.com", "group": "WestJet VDP Pro In-Scope Group" } ], "out_of_scope": [ { "name": "travel.westjet.com", "asset_type": "api", "location": null, "group": "Out of scope" }, { "name": "biz.westjet.com", "asset_type": "website", "location": null, "group": "Out of scope" } ], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-4934c276349e84c5.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-62086aa9074899ce", "name": "Westpac Banking Corporation Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/westpac-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Banking", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:43Z", "scope_published_at": "2026-08-05T01:11:33.019Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/westpac-vdp-pro/changelog/365ca605-4c62-4782-9021-acd6bfbe5b7e.json" ], "in_scope": [ { "name": "*.westpac.com.au", "asset_type": "website", "location": null, "group": "In scope: Web Targets" }, { "name": "*.stgeorge.com.au", "asset_type": "website", "location": null, "group": "In scope: Web Targets" }, { "name": "*.banksa.com.au", "asset_type": "website", "location": null, "group": "In scope: Web Targets" }, { "name": "*.bankofmelbourne.com.au", "asset_type": "website", "location": null, "group": "In scope: Web Targets" }, { "name": "*.bt.com.au", "asset_type": "website", "location": null, "group": "In scope: Web Targets" }, { "name": "Westpac Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=org.westpac.bank&feature=search_result", "group": "In Scope: Mobile Apps" }, { "name": "Westpac iOS app", "asset_type": "ios", "location": "https://apps.apple.com/au/app/westpac/id299111811", "group": "In Scope: Mobile Apps" }, { "name": "St George Bank iOS app", "asset_type": "ios", "location": "https://apps.apple.com/au/app/st-george-mobile-banking/id294380705", "group": "In Scope: Mobile Apps" }, { "name": "St George Bank Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=org.stgeorge.bank", "group": "In Scope: Mobile Apps" }, { "name": "BankSA iOS app", "asset_type": "ios", "location": "https://apps.apple.com/us/app/banksa-mobile-banking/id295246634", "group": "In Scope: Mobile Apps" }, { "name": "BankSA Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=org.banksa.bank&hl=en-AU", "group": "In Scope: Mobile Apps" }, { "name": "Bank of Melbourne iOS app", "asset_type": "ios", "location": "https://apps.apple.com/au/app/bank-of-melbourne-banking/id449512723", "group": "In Scope: Mobile Apps" }, { "name": "Bank of Melbourne Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=org.bom.bank&hl=en-AU", "group": "In Scope: Mobile Apps" }, { "name": "BT Panorama iOS app", "asset_type": "ios", "location": "https://apps.apple.com/au/app/bt-panorama/id1000509933", "group": "In Scope: Mobile Apps" }, { "name": "BT Panorama Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details/BT_Panorama?id=au.com.bt.panorama&hl=en-US", "group": "In Scope: Mobile Apps" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-62086aa9074899ce.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-d23b515978448edf", "name": "Xero Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/xero-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:44Z", "scope_published_at": "2024-11-26T03:34:36.035Z", "scope_group_count": 2, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/xero-vdp-pro/changelog/1547a736-9a83-4e30-8d34-37bb413b4dcd.json" ], "in_scope": [ { "name": "*.xero.com", "asset_type": "website", "location": "https://xero.com", "group": "Xero VDP - Web Targets" }, { "name": "https://go.xero.com", "asset_type": "website", "location": "https://go.xero.com", "group": "Xero VDP - Web Targets" }, { "name": "https://payroll.xero.com", "asset_type": "website", "location": "https://payroll.xero.com", "group": "Xero VDP - Web Targets" }, { "name": "https://reporting.xero.com", "asset_type": "website", "location": "https://reporting.xero.com", "group": "Xero VDP - Web Targets" }, { "name": "https://fixedassets.xero.com", "asset_type": "website", "location": "https://fixedassets.xero.com", "group": "Xero VDP - Web Targets" }, { "name": "https://my.xero.com", "asset_type": "website", "location": "https://my.xero.com", "group": "Xero VDP - Web Targets" }, { "name": "https://bankaccounts.xero.com", "asset_type": "website", "location": "https://bankaccounts.xero.com", "group": "Xero VDP - Web Targets" }, { "name": "https://login.xero.com/", "asset_type": "website", "location": "https://login.xero.com", "group": "Xero VDP - Web Targets" }, { "name": "https://identity.xero.com", "asset_type": "website", "location": "https://identity.xero.com", "group": "Xero VDP - Web Targets" }, { "name": "https://apps.xero.com", "asset_type": "website", "location": "https://apps.xero.com", "group": "Xero VDP - Web Targets" }, { "name": "https://central.xero.com", "asset_type": "website", "location": "https://central.xero.com", "group": "Xero VDP - Web Targets" }, { "name": "https://www.xero.com/{region}/advisors", "asset_type": "website", "location": null, "group": "Xero VDP - Web Targets" }, { "name": "*.api.xero.com", "asset_type": "api", "location": null, "group": "Xero VDP - API Targets " } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-d23b515978448edf.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-3509f9e9b2bc36d5", "name": "Zaxbys Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/zaxbys-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Hospitality", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:35Z", "scope_published_at": "2025-10-20T17:15:39.642Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/zaxbys-vdp-pro/changelog/c2114872-cfb6-4a17-a4a8-923ba9a59e6a.json" ], "in_scope": [ { "name": "Zaxbys Website", "asset_type": "website", "location": "https://zaxbys.com/", "group": "In Scope" }, { "name": "Zaxbys iOS Mobile Application", "asset_type": "ios", "location": "https://apps.apple.com/us/app/zaxbys/id480603264", "group": "In Scope" }, { "name": "Zaxbys Android Mobile App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.snapfinger.mobile.zaxbys&hl=en_US", "group": "In Scope" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-3509f9e9b2bc36d5.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-bfd15b71beacd9c3", "name": "Ziff Davis Vulnerability Disclosure Program", "program_url": "https://bugcrowd.com/engagements/ziffdavis-vdp-pro", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:45:13Z", "scope_published_at": "2026-07-27T07:33:23.874Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/ziffdavis-vdp-pro/changelog/6a1ba564-eb81-4bfc-bd37-f5a49dc1a64d.json" ], "in_scope": [ { "name": "Sugar Sync", "asset_type": "website", "location": "https://sugarsync.com", "group": "In Scope Targets" }, { "name": "Prime inc", "asset_type": "website", "location": "https://primeinc.org", "group": "In Scope Targets" }, { "name": "Campaigner", "asset_type": "website", "location": "https://campaigner.com", "group": "In Scope Targets" }, { "name": "SMTP", "asset_type": "website", "location": "https://smtp.com", "group": "In Scope Targets" }, { "name": "IPVanish", "asset_type": "website", "location": "https://ipvanish.com", "group": "In Scope Targets" }, { "name": "Lipid Care", "asset_type": "website", "location": "https://lipid.care", "group": "In Scope Targets" }, { "name": "iOS: App Store Encrypt.team", "asset_type": "ios", "location": null, "group": "In Scope Targets" }, { "name": "Ziff Davis Corporate Site", "asset_type": "website", "location": "https://www.ziffdavis.com/", "group": "In Scope Targets" }, { "name": "Mashable Site", "asset_type": "website", "location": "https://mashable.com/", "group": "In Scope Targets" }, { "name": "Other Ziff Davis assets", "asset_type": "other", "location": null, "group": "In Scope Targets" }, { "name": "Extreme Tech", "asset_type": "website", "location": "https://extremetech.com", "group": "In Scope Targets" }, { "name": "Best Blackfriday", "asset_type": "website", "location": "https://bestblackfriday.com", "group": "In Scope Targets" }, { "name": "PCMag AU", "asset_type": "website", "location": "https://au.pcmag.com", "group": "In Scope Targets" }, { "name": "Managed Care", "asset_type": "website", "location": "https://managedcare.network", "group": "In Scope Targets" }, { "name": "Tech Hub Box", "asset_type": "website", "location": "https://www.techhubbox.com", "group": "In Scope Targets" }, { "name": "Red Dead Redemption 2 Map", "asset_type": "website", "location": "https://rdr2map.com/", "group": "In Scope Targets" }, { "name": "Martech match", "asset_type": "website", "location": "https://martechmatch.com/", "group": "In Scope Targets" }, { "name": "Offers", "asset_type": "website", "location": "https://offers.com", "group": "In Scope Targets" }, { "name": "Inside CRM", "asset_type": "website", "location": "https://insidecrm.com", "group": "In Scope Targets" }, { "name": "myMS Care", "asset_type": "website", "location": "https://myms.care", "group": "In Scope Targets" }, { "name": "MapELEMENTS", "asset_type": "website", "location": "https://www.mapelements.com", "group": "In Scope Targets" }, { "name": "The Infotech Beat", "asset_type": "website", "location": "https://www.theinfotechbeat.com", "group": "In Scope Targets" }, { "name": "Division2 Map", "asset_type": "website", "location": "https://division2map.com", "group": "In Scope Targets" }, { "name": "Marty Awards", "asset_type": "website", "location": "https://martyawards.com", "group": "In Scope Targets" }, { "name": "Read it quik", "asset_type": "website", "location": "http://readitquik.com", "group": "In Scope Targets" }, { "name": "Retail Me Not", "asset_type": "website", "location": "https://retailmenot.com", "group": "In Scope Targets" }, { "name": "Geek", "asset_type": "website", "location": "https://geek.com", "group": "In Scope Targets" }, { "name": "PCMag", "asset_type": "website", "location": "https://pcmag.com", "group": "In Scope Targets" }, { "name": "Prime ce", "asset_type": "website", "location": "https://primece.com", "group": "In Scope Targets" }, { "name": "Spatialbuzz UK", "asset_type": "website", "location": "https://demo-uk.spatialbuzz.net", "group": "In Scope Targets" }, { "name": "Fallout Map", "asset_type": "website", "location": "https://fo76map.com", "group": "In Scope Targets" }, { "name": "Read it quik 2", "asset_type": "website", "location": "https://readitquk.net", "group": "In Scope Targets" }, { "name": "Tech Bargains.", "asset_type": "website", "location": "https://techbargains.com", "group": "In Scope Targets" }, { "name": "Community Spice Works", "asset_type": "website", "location": "https://community.spiceworks.com", "group": "In Scope Targets" }, { "name": "Vipre - Safesend Software", "asset_type": "website", "location": "https://safesendsoftware.com", "group": "In Scope Targets" }, { "name": "MEDPAGE Today 2", "asset_type": "website", "location": "https://formd.com", "group": "In Scope Targets" }, { "name": "Baby Centre UK", "asset_type": "website", "location": "https://babycentre.co.uk", "group": "In Scope Targets" }, { "name": "Bphope", "asset_type": "website", "location": "https://bphope.com", "group": "In Scope Targets" }, { "name": "Blackfriday", "asset_type": "website", "location": "https://blackfriday.com", "group": "In Scope Targets" }, { "name": "Deals of America", "asset_type": "website", "location": "https://dealsofamerica.com", "group": "In Scope Targets" }, { "name": "Encrypt.Me", "asset_type": "website", "location": "https://encrypt.me", "group": "In Scope Targets" }, { "name": "Hope to Cope", "asset_type": "website", "location": "https://hopetocope.com", "group": "In Scope Targets" }, { "name": "Red it quik", "asset_type": "website", "location": "https://reditquik.co", "group": "In Scope Targets" }, { "name": "Computer Shopper", "asset_type": "website", "location": "https://computershopper.com", "group": "In Scope Targets" }, { "name": "The Blackfriday", "asset_type": "website", "location": "https://theblackfriday.com", "group": "In Scope Targets" }, { "name": "WLVPN", "asset_type": "website", "location": "https://wlvpn.com", "group": "In Scope Targets" }, { "name": "Aberdeen 2", "asset_type": "website", "location": "https://aberdeenclean.wpengine.com", "group": "In Scope Targets" }, { "name": "Redit quik", "asset_type": "website", "location": "http://readitquik.com/", "group": "In Scope Targets" }, { "name": "IGN", "asset_type": "website", "location": "https://ign.com", "group": "In Scope Targets" }, { "name": "Line2", "asset_type": "website", "location": "https://line2.com", "group": "In Scope Targets" }, { "name": "Strong VPN", "asset_type": "website", "location": "https://strongvpn.com", "group": "In Scope Targets" }, { "name": "Aberdeen Strategy & Research Library", "asset_type": "website", "location": "https://aberdeen.canto.com", "group": "In Scope Targets" }, { "name": "Retail Me Not CANADA", "asset_type": "website", "location": "https://retailmenot.ca", "group": "In Scope Targets" }, { "name": "How Long to Beat", "asset_type": "website", "location": "https://howlongtobeat.com", "group": "In Scope Targets" }, { "name": "iContact", "asset_type": "website", "location": "https://icontact.com", "group": "In Scope Targets" }, { "name": "Strong DNS", "asset_type": "website", "location": "https://strongdns.com", "group": "In Scope Targets" }, { "name": "Voucher Codes UK", "asset_type": "website", "location": "https://vouchercodes.co.uk", "group": "In Scope Targets" }, { "name": "Lose it", "asset_type": "website", "location": "https://loseit.com", "group": "In Scope Targets" }, { "name": "Get Open Access", "asset_type": "website", "location": "https://getopenaccess.com", "group": "In Scope Targets" }, { "name": "Humble Bundle", "asset_type": "website", "location": "https://humblebundle.com", "group": "In Scope Targets" }, { "name": "IGN Boards", "asset_type": "website", "location": "https://ignboards.com", "group": "In Scope Targets" }, { "name": "Software Insider", "asset_type": "website", "location": "https://software-insider.com", "group": "In Scope Targets" }, { "name": "Martechly", "asset_type": "website", "location": "https://martechly.com", "group": "In Scope Targets" }, { "name": "Speed Test", "asset_type": "website", "location": "https://speedtest.net", "group": "In Scope Targets" }, { "name": "UCM Mail", "asset_type": "website", "location": "https://ucmmail.com", "group": "In Scope Targets" }, { "name": "Signflow Germany", "asset_type": "website", "location": "https://signflow.dk", "group": "In Scope Targets" }, { "name": "OMFIT", "asset_type": "website", "location": "https://omfit.com", "group": "In Scope Targets" }, { "name": "InsideCRM", "asset_type": "website", "location": "https://insidecrm.com/", "group": "In Scope Targets" }, { "name": "Down Detector", "asset_type": "website", "location": "https://downdetector.com", "group": "In Scope Targets" }, { "name": "Med Page Today", "asset_type": "website", "location": "https://medpagetoday.com", "group": "In Scope Targets" }, { "name": "Vipre", "asset_type": "website", "location": "https://vipre.com", "group": "In Scope Targets" }, { "name": "Creditcards Explained", "asset_type": "website", "location": "https://www.creditcardsexplained.com", "group": "In Scope Targets" }, { "name": "Web Mail", "asset_type": "website", "location": "https://webmail4.com", "group": "In Scope Targets" }, { "name": "Oracle Cloud", "asset_type": "website", "location": "https://console.us-ashburn-1.oraclecloud.com", "group": "In Scope Targets" }, { "name": "VOIP News", "asset_type": "website", "location": "https://voip-news.com", "group": "In Scope Targets" }, { "name": "Inspired eLearning", "asset_type": "website", "location": "https://inspiredelearning.com", "group": "In Scope Targets" }, { "name": "Tool Box", "asset_type": "website", "location": "https://toolbox.com", "group": "In Scope Targets" }, { "name": "Coupon Codes", "asset_type": "website", "location": "https://www.couponcodes.com", "group": "In Scope Targets" }, { "name": "Aberdeen", "asset_type": "website", "location": "https://aberdeen.com", "group": "In Scope Targets" }, { "name": "Get Stat", "asset_type": "website", "location": "https://internal.getstat.com", "group": "In Scope Targets" }, { "name": "Doctor Directory", "asset_type": "website", "location": "https://doctordirectory.com", "group": "In Scope Targets" }, { "name": "IT Management", "asset_type": "website", "location": "https://itmanagement.com", "group": "In Scope Targets" }, { "name": "Spice Works", "asset_type": "website", "location": "https://spiceworks.com", "group": "In Scope Targets" }, { "name": "My Vipre", "asset_type": "website", "location": "https://myvipre.com", "group": "In Scope Targets" }, { "name": "Inspired LMS", "asset_type": "website", "location": "https://inspiredlms.com", "group": "In Scope Targets" }, { "name": "Cypher Smart Electricmail", "asset_type": "website", "location": "https://cyphersmart.electricmail.com", "group": "In Scope Targets" }, { "name": "MOZ", "asset_type": "website", "location": "https://moz.com", "group": "In Scope Targets" }, { "name": "eVoice UK", "asset_type": "website", "location": "https://evoice.co.uk", "group": "In Scope Targets" }, { "name": "Ekahau", "asset_type": "website", "location": "https://ekahau.com", "group": "In Scope Targets" }, { "name": "PCMag UK", "asset_type": "website", "location": "https://uk.pcmag.com", "group": "In Scope Targets" }, { "name": "Send inc", "asset_type": "website", "location": "https://sendinc.com", "group": "In Scope Targets" }, { "name": "Nursing ALD", "asset_type": "website", "location": "https://www.nursingald.com", "group": "In Scope Targets" }, { "name": "Endpoint Security Cloud", "asset_type": "other", "location": null, "group": "In Scope Targets" }, { "name": "Everyday Health", "asset_type": "website", "location": "https://everydayhealth.com", "group": "In Scope Targets" }, { "name": "Mail Anyone", "asset_type": "website", "location": "https://mailanyone.net", "group": "In Scope Targets" }, { "name": "Ekahau Cloud", "asset_type": "website", "location": "https://ekahau.cloud", "group": "In Scope Targets" }, { "name": "Fuse Mail", "asset_type": "website", "location": "https://fusemail.com", "group": "In Scope Targets" }, { "name": "Technology Signal", "asset_type": "website", "location": "https://technologysignal.com", "group": "In Scope Targets" }, { "name": "What to Expect", "asset_type": "website", "location": "https://whattoexpect.com", "group": "In Scope Targets" }, { "name": "Technology Signals", "asset_type": "website", "location": "https://technology-signals.com", "group": "In Scope Targets" }, { "name": "Live Drive", "asset_type": "website", "location": "https://livedrive.com", "group": "In Scope Targets" }, { "name": "VPN Account", "asset_type": "website", "location": "https://vpnaccount.net", "group": "In Scope Targets" }, { "name": "B2B techhub", "asset_type": "website", "location": "https://b2btechhub.com", "group": "In Scope Targets" }, { "name": "Health eCareers", "asset_type": "website", "location": "https://healthecareers.com", "group": "In Scope Targets" }, { "name": "After MD", "asset_type": "website", "location": "https://aftermd.com", "group": "In Scope Targets" }, { "name": "Tower Source", "asset_type": "website", "location": "https://www.towersource.com", "group": "In Scope Targets" }, { "name": "Technology-signals", "asset_type": "website", "location": "https://technology-signals.net", "group": "In Scope Targets" }, { "name": "Castle Connolly", "asset_type": "website", "location": "https://castleconnolly.com", "group": "In Scope Targets" }, { "name": "CME Toolkit", "asset_type": "website", "location": "https://cmetoolkit.com", "group": "In Scope Targets" }, { "name": "Cell Maps Admin", "asset_type": "website", "location": "https://admin.cellmaps.com", "group": "In Scope Targets" }, { "name": "Map Genie", "asset_type": "website", "location": "https://mapgenie.io/", "group": "In Scope Targets" }, { "name": "Encrypt team", "asset_type": "website", "location": "https://Encrypt.team", "group": "In Scope Targets" }, { "name": "Mom Media", "asset_type": "website", "location": "https://Mom2.com", "group": "In Scope Targets" }, { "name": "Mom 2 Summit", "asset_type": "website", "location": "https://Mom2Summit.com", "group": "In Scope Targets" }, { "name": "New Media Council - Mom", "asset_type": "website", "location": "https://NewMediaCouncil.org", "group": "In Scope Targets" }, { "name": "Mom 2", "asset_type": "website", "location": "https://Mom2.org", "group": "In Scope Targets" }, { "name": "The Iris Awards - Mom", "asset_type": "website", "location": "https://TheIrisAwards.com", "group": "In Scope Targets" }, { "name": "Life Hacker", "asset_type": "website", "location": "https://lifehacker.com", "group": "In Scope Targets" }, { "name": "BabyCentre", "asset_type": "website", "location": "https://*.babycenter.com/", "group": "In Scope Targets" }, { "name": "DailyOM", "asset_type": "website", "location": "https://dailyom.com", "group": "In Scope Targets" }, { "name": "eReceptionist UK", "asset_type": "website", "location": "https://ereceptionist.co.uk", "group": "In Scope Targets" }, { "name": "AskMen", "asset_type": "website", "location": "https://askmen.com", "group": "In Scope Targets" }, { "name": "Signal Tech Net", "asset_type": "website", "location": "https://signaltechnet.com", "group": "In Scope Targets" }, { "name": "GME Today", "asset_type": "website", "location": "https://gmetoday.org", "group": "In Scope Targets" }, { "name": "Network Validator", "asset_type": "website", "location": "https://networkvalidator.mosaik.com", "group": "In Scope Targets" }, { "name": "Spatialbuzz", "asset_type": "website", "location": "https://spatialbuzz.com", "group": "In Scope Targets" }, { "name": "Bring over", "asset_type": "website", "location": "https://bringover.net", "group": "In Scope Targets" }, { "name": "Migraine Again", "asset_type": "website", "location": "https://migraineagain.com", "group": "In Scope Targets" }, { "name": "IT Research Online", "asset_type": "website", "location": "https://www.itresearchonline.com", "group": "In Scope Targets" }, { "name": "Root Metrics", "asset_type": "website", "location": "https://rootmetrics.com", "group": "In Scope Targets" }, { "name": "Is CSI Host", "asset_type": "website", "location": "https://iscsihost.org", "group": "In Scope Targets" }, { "name": "ziffdavis.com", "asset_type": "website", "location": "https://ziffdavis.com", "group": "In Scope Targets" }, { "name": "Diabetes Daily", "asset_type": "website", "location": "https://diabetesdaily.com", "group": "In Scope Targets" }, { "name": "IBD Care", "asset_type": "website", "location": "https://ibd.care", "group": "In Scope Targets" }, { "name": "B2B Ideas", "asset_type": "website", "location": "https://www.b2bideas.com", "group": "In Scope Targets" }, { "name": "iContact Archive", "asset_type": "website", "location": "https://icontact-archive.com/", "group": "In Scope Targets" }, { "name": "Moz SEO API", "asset_type": "website", "location": "https://lsapi.seomoz.com/", "group": "In Scope Targets" }, { "name": "Campaigner 2", "asset_type": "website", "location": "https://*.csmtp.net/", "group": "In Scope Targets" }, { "name": "Moz SEO 2", "asset_type": "website", "location": "https://seomoz.com", "group": "In Scope Targets" }, { "name": "eVoice", "asset_type": "website", "location": "https://evoice.com", "group": "In Scope Targets" }, { "name": "iContact's Social Tools", "asset_type": "website", "location": "https://icont.ac", "group": "In Scope Targets" }, { "name": "OneBox", "asset_type": "website", "location": "https://www.onebox.com/", "group": "In Scope Targets" }, { "name": "Live Drive 2", "asset_type": "website", "location": "https://files.wl-livedrive.com/", "group": "In Scope Targets" }, { "name": "Moz SEO - Search Analytics", "asset_type": "website", "location": "https://internal.getstat.com/", "group": "In Scope Targets" }, { "name": "Encrypt.me 2", "asset_type": "website", "location": "https://peps.encryptme.com/", "group": "In Scope Targets" }, { "name": "KickBox", "asset_type": "website", "location": "https://www.kickbox.com", "group": "In Scope Targets" }, { "name": "Colo Movers", "asset_type": "website", "location": "https://colomovers.com/", "group": "In Scope Targets" }, { "name": "Reliable Hosting", "asset_type": "website", "location": "https://reliablehosting.com/", "group": "In Scope Targets" }, { "name": "Strong Tech", "asset_type": "website", "location": "https://strongtech.org/", "group": "In Scope Targets" }, { "name": "Excel Micro", "asset_type": "website", "location": "https://excelmicro.com/", "group": "In Scope Targets" }, { "name": "Sikker Mail", "asset_type": "website", "location": "https://sikkermail.dk", "group": "In Scope Targets" }, { "name": "Logiva", "asset_type": "website", "location": "https://logiva.dk/", "group": "In Scope Targets" }, { "name": "Ascend App - Lose IT!", "asset_type": "website", "location": "https://ascendapp.com/", "group": "In Scope Targets" }, { "name": "Zap Dragon", "asset_type": "website", "location": "https://www.zapdragon.com/", "group": "In Scope Targets" }, { "name": "Challenges App - Lose IT!", "asset_type": "website", "location": "https://www.challenges.app/", "group": "In Scope Targets" }, { "name": "Fit Now Inc", "asset_type": "website", "location": "https://fitnowinc.com/", "group": "In Scope Targets" }, { "name": "Campaigner SMTPService", "asset_type": "api", "location": "https://ws.csmtp.net/2014/06/SMTPService.asmx", "group": "In Scope Targets" }, { "name": "Ad Care", "asset_type": "website", "location": "https://ad.care/", "group": "In Scope Targets" }, { "name": "BabyCenter CANADA", "asset_type": "website", "location": "https://www.babycenter.ca/", "group": "In Scope Targets" }, { "name": "BabyCenter Australia", "asset_type": "website", "location": "https://babycenter.com.au/", "group": "In Scope Targets" }, { "name": "BabyCenter Germany", "asset_type": "website", "location": "https://babycenter.de/", "group": "In Scope Targets" }, { "name": "BabyCenter India", "asset_type": "website", "location": "https://babycenter.in/", "group": "In Scope Targets" }, { "name": "Everyday Health Group - Pregnancy & Parenting", "asset_type": "website", "location": "https://ehg-pp.com", "group": "In Scope Targets" }, { "name": "Health Professional Academy", "asset_type": "website", "location": "https://healthprofessionalacademy.co.uk/", "group": "In Scope Targets" }, { "name": "The Deceased Preference Service", "asset_type": "website", "location": "https://deceasedpreferenceservice.co.uk/", "group": "In Scope Targets" }, { "name": "Emma's Diary", "asset_type": "website", "location": "https://emmasdiary.co.uk/", "group": "In Scope Targets" }, { "name": "Dice Breaker", "asset_type": "website", "location": "https://*.dicebreaker.com/", "group": "In Scope Targets" }, { "name": "Eurogamer Belgium", "asset_type": "website", "location": "https://eurogamer.be/", "group": "In Scope Targets" }, { "name": "Eurogamer Czech Republic", "asset_type": "website", "location": "https://eurogamer.cz/", "group": "In Scope Targets" }, { "name": "Eurogamer", "asset_type": "website", "location": "https://*.eurogamer.net/", "group": "In Scope Targets" }, { "name": "Gamer Network", "asset_type": "website", "location": "https://gamer.network/", "group": "In Scope Targets" }, { "name": "Eurogamer Denmark", "asset_type": "website", "location": "https://eurogamer.dk/", "group": "In Scope Targets" }, { "name": "Eurogamer France", "asset_type": "website", "location": "https://eurogamer.fr/", "group": "In Scope Targets" }, { "name": "Eurogamer Sweden", "asset_type": "website", "location": "https://eurogamer.se/", "group": "In Scope Targets" }, { "name": "Eurogamer Germany", "asset_type": "website", "location": "https://*.eurogamer.de/", "group": "In Scope Targets" }, { "name": "Eurogamer Spain", "asset_type": "website", "location": "https://*.eurogamer.es/", "group": "In Scope Targets" }, { "name": "Eurogamer Italy", "asset_type": "website", "location": "https://*.eurogamer.it/", "group": "In Scope Targets" }, { "name": "Eurogamer Netherlands", "asset_type": "website", "location": "https://*.eurogamer.nl/", "group": "In Scope Targets" }, { "name": "Eurogamer Poland", "asset_type": "website", "location": "https://*.eurogamer.pl/", "group": "In Scope Targets" }, { "name": "Eurogamer Portugal", "asset_type": "website", "location": "https://*.eurogamer.pt/", "group": "In Scope Targets" }, { "name": "Blackout Live Stream Battles", "asset_type": "website", "location": "https://gamer-network-livestreambattles.com/", "group": "In Scope Targets" }, { "name": "Gamer Network Switch Party", "asset_type": "website", "location": "https://gamernetworkswitchparty.com/", "group": "In Scope Targets" }, { "name": "Gamer Nework Victory Road", "asset_type": "website", "location": "https://gamernetworkvictoryroad.com/", "group": "In Scope Targets" }, { "name": "Games Industry", "asset_type": "website", "location": "https://*.gamesindustry.biz/", "group": "In Scope Targets" }, { "name": "GN Anthem", "asset_type": "website", "location": "https://gn-anthem.com/", "group": "In Scope Targets" }, { "name": "Enter the Dark Zone", "asset_type": "website", "location": "https://gn-darkzone.com/", "group": "In Scope Targets" }, { "name": "GN Minecraft", "asset_type": "website", "location": "https://*.gn-minecraft.com/", "group": "In Scope Targets" }, { "name": "GN Sekiro", "asset_type": "website", "location": "https://gn-sekiro.com/", "group": "In Scope Targets" }, { "name": "Jelly Deals", "asset_type": "website", "location": "https://*.jelly.deals/", "group": "In Scope Targets" }, { "name": "Guess the retro game sounds video quiz", "asset_type": "website", "location": "https://*.logitechg-gn.com/", "group": "In Scope Targets" }, { "name": "Rock Paper Shotgun Net", "asset_type": "website", "location": "https://metabomb.net/", "group": "In Scope Targets" }, { "name": "Esports By Omen", "asset_type": "website", "location": "https://*.omenesportsreport.com/", "group": "In Scope Targets" }, { "name": "Outside Xbox", "asset_type": "website", "location": "https://*.outsidexbox.com/", "group": "In Scope Targets" }, { "name": "Outside Xtra", "asset_type": "website", "location": "https://*.outsidextra.com/", "group": "In Scope Targets" }, { "name": "Oxventure", "asset_type": "website", "location": "https://*.oxventure.com/", "group": "In Scope Targets" }, { "name": "Rock Paper Shotgun", "asset_type": "website", "location": "https://*.rockpapershotgun.com/", "group": "In Scope Targets" }, { "name": "Gamer Network Smash Bros", "asset_type": "website", "location": "https://*.smashbattleslive.com/", "group": "In Scope Targets" }, { "name": "Dice Breaker UK", "asset_type": "website", "location": "https://tabletopawards.co.uk/", "group": "In Scope Targets" }, { "name": "Dice Breaker COM", "asset_type": "website", "location": "https://tabletopawards.com/", "group": "In Scope Targets" }, { "name": "VG247", "asset_type": "website", "location": "https://*.vg247.com/", "group": "In Scope Targets" }, { "name": "TDS Gift Cards", "asset_type": "website", "location": "https://*.tdsgiftcards.com/", "group": "In Scope Targets" }, { "name": "VG247 Italy", "asset_type": "website", "location": "https://vg247.it/", "group": "In Scope Targets" }, { "name": "VG247 Poland", "asset_type": "website", "location": "https://vg247.pl/", "group": "In Scope Targets" }, { "name": "Fallout 4 Map", "asset_type": "website", "location": "https://fallout4map.com/", "group": "In Scope Targets" }, { "name": "Gift Cards", "asset_type": "website", "location": "https://uberusa.launchgiftcards.com/", "group": "In Scope Targets" }, { "name": "Eurogamer NET", "asset_type": "website", "location": "https://themitchverse.com/", "group": "In Scope Targets" }, { "name": "Launch Gift Cards", "asset_type": "website", "location": "https://uberusa.mothershipy.com/", "group": "In Scope Targets" }, { "name": "GTA 5 Map", "asset_type": "website", "location": "https://gta-5-map.com/", "group": "In Scope Targets" }, { "name": "Askmen Greece", "asset_type": "website", "location": "https://gr.askmen.com/", "group": "In Scope Targets" }, { "name": "Askmen Israel", "asset_type": "website", "location": "https://il.askmen.com/", "group": "In Scope Targets" }, { "name": "Askmen India", "asset_type": "website", "location": "https://in.askmen.com/", "group": "In Scope Targets" }, { "name": "Coverage Check Mosaik", "asset_type": "website", "location": "https://coveragecheck.mosaik.com", "group": "In Scope Targets" }, { "name": "Cell Rebel", "asset_type": "website", "location": "https://www.cellrebel.com/", "group": "In Scope Targets" }, { "name": "PCMag Greece", "asset_type": "website", "location": "https://gr.pcmag.com/", "group": "In Scope Targets" }, { "name": "PCMAG Israel", "asset_type": "website", "location": "https://il.pcmag.com/", "group": "In Scope Targets" }, { "name": "Mashable Pakistan", "asset_type": "website", "location": "https://pk.mashable.com/", "group": "In Scope Targets" }, { "name": "Baby Center Brasil", "asset_type": "website", "location": "https://brasil.babycenter.com", "group": "In Scope Targets" }, { "name": "Mashable Middle East", "asset_type": "website", "location": "https://me.mashable.com/", "group": "In Scope Targets" }, { "name": "Baby Center Spain", "asset_type": "website", "location": "https://espanol.babycenter.com", "group": "In Scope Targets" }, { "name": "Pregnancy Tracker & Baby App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.wte.view", "group": "In Scope Targets" }, { "name": "Mashable India", "asset_type": "website", "location": "https://in.mashable.com/", "group": "In Scope Targets" }, { "name": "Mashable Italy", "asset_type": "website", "location": "https://it.mashable.com/", "group": "In Scope Targets" }, { "name": "Pregnancy & Baby Tracker - WTE", "asset_type": "ios", "location": "https://apps.apple.com/us/app/pregnancy-baby-tracker-wte/id289560144", "group": "In Scope Targets" }, { "name": "Mashable Asia", "asset_type": "website", "location": "https://sea.mashable.com/", "group": "In Scope Targets" }, { "name": "Pregnancy App & Baby Tracker", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.babycenter.pregnancytracker", "group": "In Scope Targets" }, { "name": "Pregnancy Tracker - BabyCenter", "asset_type": "ios", "location": "https://apps.apple.com/us/app/pregnancy-tracker-babycenter/id386022579", "group": "In Scope Targets" }, { "name": "Baby Names by BabyCenter", "asset_type": "ios", "location": "https://apps.apple.com/us/app/baby-names-by-babycenter/id1336227072", "group": "In Scope Targets" }, { "name": "Full Contact", "asset_type": "website", "location": "https://fullcontact.com/", "group": "In Scope Targets" }, { "name": "DownDetector API", "asset_type": "website", "location": "https://downdetectorapi.com/", "group": "In Scope Targets" }, { "name": "CNET", "asset_type": "website", "location": "https://cnet.com/", "group": "In Scope Targets" }, { "name": "CNET France", "asset_type": "website", "location": "https://www.cnetfrance.fr/", "group": "In Scope Targets" }, { "name": "CNET Japan", "asset_type": "website", "location": "https://japan.cnet.com/", "group": "In Scope Targets" }, { "name": "ZDNET Germany", "asset_type": "website", "location": "https://www.zdnet.de/", "group": "In Scope Targets" }, { "name": "Speedtest Custom Portal", "asset_type": "website", "location": "http://speedtestcustom.com/", "group": "In Scope Targets" }, { "name": "ZDNET France", "asset_type": "website", "location": "https://www.zdnet.fr/", "group": "In Scope Targets" }, { "name": "ZDNET", "asset_type": "website", "location": "https://www.zdnet.com/", "group": "In Scope Targets" }, { "name": "ZDNET Japan", "asset_type": "website", "location": "https://japan.zdnet.com/", "group": "In Scope Targets" }, { "name": "ZDNET Korea", "asset_type": "website", "location": "https://zdnet.co.kr/", "group": "In Scope Targets" }, { "name": "Theskimm Plus", "asset_type": "website", "location": "https://skimmplus.com/", "group": "In Scope Targets" }, { "name": "Theskimm iceland", "asset_type": "website", "location": "https://www.skimmth.is", "group": "In Scope Targets" }, { "name": "Theskimm loyalty", "asset_type": "website", "location": "https://www.skimmbassadors.com/", "group": "In Scope Targets" }, { "name": "Theskimm", "asset_type": "website", "location": "https://www.theskimm.com/", "group": "In Scope Targets" }, { "name": "Maxroll Shop", "asset_type": "website", "location": "https://maxroll.shop/", "group": "In Scope Targets" }, { "name": "Maxroll", "asset_type": "website", "location": "https://maxroll.gg/", "group": "In Scope Targets" }, { "name": "Email Industries", "asset_type": "website", "location": "https://www.emailindustries.com/", "group": "In Scope Targets" }, { "name": "Alfred By Email Industries", "asset_type": "website", "location": "https://alfred.email/", "group": "In Scope Targets" }, { "name": "Blackbox By Email Industries", "asset_type": "website", "location": "https://blackbox.email/", "group": "In Scope Targets" }, { "name": "Inboxexpo By Email Industries", "asset_type": "website", "location": "https://inboxexpo.com/", "group": "In Scope Targets" }, { "name": "Alfred Knows By Emai Industries", "asset_type": "website", "location": "https://alfredknows.com/", "group": "In Scope Targets" }, { "name": "Alfred By Email Industries", "asset_type": "website", "location": "https://my.alfredknows.com/", "group": "In Scope Targets" }, { "name": "Everyday Health Care", "asset_type": "website", "location": "https://*.everydayhealth.care/", "group": "In Scope Targets" }, { "name": "Business of home", "asset_type": "website", "location": "https://*.businessofhome.com", "group": "In Scope Targets" }, { "name": "Everyday Health Group", "asset_type": "website", "location": "https://*.everydayhealthgroup.com", "group": "In Scope Targets" }, { "name": "Gamer Network Net", "asset_type": "website", "location": "https://gamer-network.net/", "group": "In Scope Targets" }, { "name": "Domino", "asset_type": "website", "location": "https://*.domino.com", "group": "In Scope Targets" }, { "name": "Read it Quik", "asset_type": "website", "location": "https://readitquik.biz/", "group": "In Scope Targets" }, { "name": "Domino Mag", "asset_type": "website", "location": "https://*.dominomag.com", "group": "In Scope Targets" }, { "name": "Speedcheck API", "asset_type": "website", "location": "https://*.speedspot.org/", "group": "In Scope Targets" }, { "name": "Domino TOGO", "asset_type": "website", "location": "https://*.dominotogo.com", "group": "In Scope Targets" }, { "name": "Dwell", "asset_type": "website", "location": "https://*.dwell.com", "group": "In Scope Targets" }, { "name": "SWZD", "asset_type": "website", "location": "https://*.swzd.com/", "group": "In Scope Targets" }, { "name": "Vipre - threattrack", "asset_type": "website", "location": "https://threattrack.com", "group": "In Scope Targets" }, { "name": "Dwell Home", "asset_type": "website", "location": "https://*.dwellhomes.com", "group": "In Scope Targets" }, { "name": "Ziff Davis Performance Marketing", "asset_type": "website", "location": "https://*.zdperformancemarketing.com/", "group": "In Scope Targets" }, { "name": "Editorat large", "asset_type": "website", "location": "https://*.editoratlarge.com", "group": "In Scope Targets" }, { "name": "Future of home", "asset_type": "website", "location": "https://*.futureofhome.com", "group": "In Scope Targets" }, { "name": "Pop Photo", "asset_type": "website", "location": "https://*.popphoto.com", "group": "In Scope Targets" }, { "name": "Pop Sci", "asset_type": "website", "location": "https://*.popsci.com", "group": "In Scope Targets" }, { "name": "Pop Sci Mag", "asset_type": "website", "location": "https://*.popscimag.com", "group": "In Scope Targets" }, { "name": "Pop Photography", "asset_type": "website", "location": "https://*.popularphotography.com", "group": "In Scope Targets" }, { "name": "Pop Science", "asset_type": "website", "location": "https://*.popularscience.com", "group": "In Scope Targets" }, { "name": "Popular Science Magazine", "asset_type": "website", "location": "https://*.popularsciencemagazine.com", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-bfd15b71beacd9c3.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] }, { "id": "bugcrowd-5e9c27f12ad0432c", "name": "Zoopla Vulnerability Disclosure Engagement", "program_url": "https://bugcrowd.com/engagements/houseful-zoopla-vdp", "program_type": "vulnerability_disclosure", "directory_category": "vdp", "directory_card": { "publisher_category": "Vulnerability Disclosure", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": null, "access_status": "open", "industry": "Real Estate", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:47Z", "scope_published_at": "2024-09-05T12:00:00.274Z", "scope_group_count": 1, "capture_error": null, "scope_source_duplicate_rows": 0, "gap_review": null, "scope_source_urls": [ "https://bugcrowd.com/engagements/houseful-zoopla-vdp/changelog/7e042a71-9e70-41a7-a74a-a8be492b7e5a.json" ], "in_scope": [ { "name": "Zoopla Web App", "asset_type": "website", "location": "https://www.zoopla.co.uk/", "group": "In Scope Targets" }, { "name": "Zoopla GraphQL Service", "asset_type": "api", "location": "https://api-graphql-lambda.prod.zoopla.co.uk/graphql ", "group": "In Scope Targets" }, { "name": "Zoopla CDN Service", "asset_type": "other", "location": "https://cdn.prod.zoopla.co.uk", "group": "In Scope Targets" }, { "name": "Zoopla IOS App", "asset_type": "ios", "location": "https://apps.apple.com/gb/app/zoopla-property-search-uk/id380932800", "group": "In Scope Targets" }, { "name": "Zoopla Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.zoopla.activity&hl=en_GB&pli=1", "group": "In Scope Targets" }, { "name": "PrimeLocation", "asset_type": "website", "location": "https://www.primelocation.com/for-sale/", "group": "In Scope Targets" } ], "out_of_scope": [], "policy_review_state": "scope_table_only", "verified_policy_id": null, "visual_page": "docs/bugcrowd-programs/vdp/bugcrowd-5e9c27f12ad0432c.md", "limitations": [ "Only the published asset table was captured; program rules and submission eligibility still require individual review." ] } ] }