What this record establishes
Reviewed policy
An individually reviewed public policy is linked to this program page.
Read the reviewed policy profile →
Official directory card labeled Bug Bounty. Monetary reward displayed. Program policy and submission status not reviewed.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
www.vinted.comPublished location: https://www.vinted.com | website | Primary Target Group |
www.vinted.netPublished location: https://www.vinted.net | website | Primary Target Group |
www.vintedgo.comPublished location: https://www.vintedgo.com | website | Primary Target Group |
Vinted iOS applicationPublished location: https://apps.apple.com/us/app/vinted-pre-loved-marketplace/id632064380 | ios | Primary Target Group |
Vinted Android applicationPublished location: https://play.google.com/store/apps/details?id=fr.vinted | android | Primary Target Group |
Vinted Go SandboxPublished location: https://sandbox.vintedgo.com | website | Secondary Target Group |
Vinted SandboxPublished location: https://sandbox.vinted.com | website | Secondary Target Group |
Vinted Go Escalations testPublished location: https://test-escalations.vintedgo.com | website | Secondary Target Group |
Encryption ServicePublished location: https://badger.it.vinted.com | website | Secondary Target Group |
Vinted CareersPublished location: https://careers.vinted.com | website | Secondary Target Group |
Company VintedPublished location: https://company.vinted.com | website | Secondary Target Group |
News VintedPublished location: https://news.vinted.com | website | Secondary Target Group |
| Asset | Type | Group / eligibility |
|---|---|---|
| No rows captured. This does not establish that the program has no assets or restrictions. | ||
Capture limits
- Brief and change index show September 30, 2026 as the latest revision. The sole announcement was opened and confirms public participation.
- Change-index entries were reviewed, not individual version diffs. The brief welcomes newly disclosed issues case by case but normally excludes bounties within 14 days of a public patch.
- USD normalization uses platform accounting documentation; the brief itself uses dollar signs. No individual award or payment is established.
- Public policy pages only; authenticated submission and incorporated legal documents were not exhaustively reviewed. Asset inventories and testing instructions are omitted. Live terms prevail; this summary grants no authorization.
- Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty, Bugcrowd, Profile. No identity match is inferred from a shared company name.