What this record establishes
Reviewed policy
An individually reviewed public policy is linked to this program page.
Read the reviewed policy profile →
Official directory card labeled Bug Bounty. Monetary reward displayed. Program policy and submission status not reviewed.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
https://pentest-app.onetrust.com/ | website | In-Scope Targets |
| Asset | Type | Group / eligibility |
|---|---|---|
https://*.onetrust.com | website | Out-of-Scope Targets |
https://store.onetrust.com | website | Out-of-Scope Targets |
https://*.convercent.com | website | Out-of-Scope Targets |
https://*.dataguidance.com | website | Out-of-Scope Targets |
https://app.vendorpedia.com | website | Out-of-Scope Targets |
https://*.preferencechoice.com | website | Out-of-Scope Targets |
https://*.redacted.ai | website | Out-of-Scope Targets |
https://*.sharedassessments.org | website | Out-of-Scope Targets |
https://developer.onetrust.com | website | Out-of-Scope Targets |
https://my.onetrust.com | website | Out-of-Scope Targets |
https://*.vendorpedia.com | website | Out-of-Scope Targets |
https://*.onetrustgrc.com | website | Out-of-Scope Targets |
https://*.cookiepro.com | website | Out-of-Scope Targets |
https://tv.onetrust.com/ | website | Out-of-Scope Targets |
https://*.cookielaw.org | website | Out-of-Scope Targets |
https://*.onetrustpro.com | website | Out-of-Scope Targets |
https://*.privacyconnect.com | website | Out-of-Scope Targets |
https://*.onetrust.de | website | Out-of-Scope Targets |
https://*.onetrust.se | website | Out-of-Scope Targets |
https://*.onetrust.es | website | Out-of-Scope Targets |
https://*.onetrust.fr | website | Out-of-Scope Targets |
https://*.onetrust.it | website | Out-of-Scope Targets |
https://*.privacytech.com | website | Out-of-Scope Targets |
https://*.privacypedia.com | website | Out-of-Scope Targets |
https://*.esgiq.com | website | Out-of-Scope Targets |
https://*.trustweek2021.com | website | Out-of-Scope Targets |
Capture limits
- Brief revision: December 22, 2025; newer announcements exist. Change index: page 1 of 2; diffs unreviewed.
- April 21, 2026 exposure notice opened separately. No broader active-testing permission is inferred.
- USD uses platform accounting evidence. Browser-only recovery; attachment, authenticated credential access and complete legal terms unreviewed. Inventories/instructions omitted; live terms prevail. No authorization granted.
- Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty, Bugcrowd, Profile. No identity match is inferred from a shared company name.