What this record establishes
Reviewed policy
An individually reviewed public policy is linked to this program page.
Read the reviewed policy profile →
Official directory card labeled Bug Bounty. Monetary reward displayed. Program policy and submission status not reviewed.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
All In Scope Targets | other | Limited Double Bounty Promotion | July 7th - July 22nd |
Moovit Android AppPublished location: https://play.google.com/store/apps/details?id=com.tranzmate&hl=en_US | android | In Scope |
Moovit iOS AppPublished location: https://apps.apple.com/us/app/moovit-all-transit-options/id498477945 | ios | In Scope |
WayFinder - Augmented Reality helper to find your stopPublished location: https://support.moovitapp.com/hc/en-us/articles/11389054527122-WayFinder-Augmented-Reality-helper-to-find-your-stop-iPhone-only | ios | In Scope |
| Asset | Type | Group / eligibility |
|---|---|---|
Every Web App is Out Of Scope. | website | Out Of Scope |
Every app not related to the Moovit mobile application. | other | Out Of Scope |
Any WebView sources or web application rendered within the mobile applications | other | Out Of Scope |
Capture limits
- Brief and reviewed change index show February 12, 2026 as the latest revision; individual diffs were not opened.
- The announcement archive and July 7, 2025 promotion notice were opened. Its end date and stated duration are not perfectly aligned; no current bonus entitlement is inferred.
- NDA signing mechanics were not available in the reviewed brief and were not tested. Other archived announcement bodies were not separately opened.
- USD normalization uses platform accounting documentation; the brief itself uses dollar signs. No individual award or payment is established.
- Public policy pages only; authenticated submission and incorporated legal documents were not exhaustively reviewed. Asset inventories and testing instructions are omitted. Live terms prevail; this summary grants no authorization.
- Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty, Bugcrowd, Profile. No identity match is inferred from a shared company name.