vulns.co
/
GKData.io MCP

Bugcrowd · 3 min read

Northwestern Mutual - Public Bug Bounty

Paid Bounty · $200 - $6,000

Open current program Scope capture

What this record establishes

Scope capture

Published asset rows were captured. The full policy and eligibility were not individually reviewed.

Official directory card labeled Bug Bounty. Monetary reward displayed. Program policy and submission status not reviewed.

Published asset scope

Snapshot captured 2026-10-03. Scope status: Captured.

In scope · 8 published rows
AssetTypeGroup / eligibility
Anything Owned by Northwestern Mutual on the Public Internet Not Listed as Out of Scopewebsite🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual
216.20.176.0/20website🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual
*.northwesternmutual.comPublished location: https://northwesternmutual.comwebsite🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual
*.nml.comPublished location: https://*.nml.comwebsite🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual
*.nmfn.comPublished location: https://*.nmfn.comwebsite🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual
NM Android Mobile AppPublished location: https://play.google.com/store/apps/details?id=com.nm.nm&hl=en_US&gl=USandroid🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual
NM iOS Mobile AppPublished location: https://apps.apple.com/us/app/northwestern-mutual/id1132579006ios🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual
Anything that Clearly Affects Northwestern Mutual But is Not Own by Northwestern Mutualwebsite🐞 In Scope - Other Public Targets (Vulnerability Disclosure)
Out of scope · 25 published rows
AssetTypeGroup / eligibility
northwesternmutual.com/find-a-financial-advisor/website❌ Out of Scope - General
northwesternmutual.com/financial/advisor/*website❌ Out of Scope - General
northwesternmutual.com/careers-apply/website❌ Out of Scope - General
northwesternmutual.com/report-a-death/website❌ Out of Scope - General
northwesternmutual.com/notice-of-long-term-care-form/website❌ Out of Scope - General
northwesternmutual.com/financial-professionals/?name=*website❌ Out of Scope - General
northwesternmutual.com/notice-of-disability-form/website❌ Out of Scope - General
northwesternmutual.com/notice-of-group-disability-form/website❌ Out of Scope - General
Any Domain that Follows the Pattern */webforms/nmfnForms/*website❌ Temporary Rules
servicenmfn.awms.apps.northwesternmutual.com/webforms/nmfnForms/*website❌ Temporary Rules
servicenmfnstage.awms.apps.northwesternmutual.com/webforms/nmfnForms/*website❌ Temporary Rules
servicenmfntest.awms.apps.northwesternmutual.com/webforms/nmfnForms/*website❌ Temporary Rules
service.nmfn.com/webforms/nmfnForms/*website❌ Temporary Rules
servicestage.nmfn.com/webforms/nmfnForms/*website❌ Temporary Rules
servicetest.nmfn.com/webforms/nmfnForms/*website❌ Temporary Rules
calculator.northwesternmutual.comwebsite❌ Out of Scope - Known Third Party
gbpwealth.comwebsite❌ Out of Scope - Known Third Party
mymhs.nmfn.comwebsite❌ Out of Scope - Known Third Party
nmresearchlibrary.nml.comwebsite❌ Out of Scope - Known Third Party
nwm.comwebsite❌ Out of Scope - Known Third Party
sparks-financial.comwebsite❌ Out of Scope - Known Third Party
theandersonfinancialgroupnm.comwebsite❌ Out of Scope - Known Third Party
themint.orgwebsite❌ Out of Scope - Known Third Party
21fiveca.comwebsite❌ Out of Scope - Known Third Party
Emerald Publicationsip_address❌ Out of Scope - Known Third Party

Capture limits

  • Only the published asset table was captured; program rules and eligibility still require individual review.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03
  2. Published scope source Primary source · reviewed 2026-10-03

Appears in Discovery, Bounty, Bugcrowd. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

53796974ace8 · JSON exports & schemas · CC BY 4.0 content / MIT software