vulns.co
/
GKData.io MCP

Direct vendor program · 1 min read

Fastmail Bug Bounty

Paid Bounty

Open current program Reviewed policy

What this record establishes

Reviewed policy

An individually reviewed public policy is linked to this program page.

Read the reviewed policy profile →

Published asset scope

Snapshot captured 2026-10-03. Scope status: Not Captured.

In scope · 2 published rows
AssetTypeGroup / eligibility
Fastmail-operated code and infrastructurepolicy_category
app.fastmail.comPublished location: https://app.fastmail.comwebsite
Out of scope · 3 published rows
AssetTypeGroup / eligibility
user.fmdomain
fastmailusercontent.comdomain
www.fastmailfbl.comwebsite

Capture limits

  • The reward sentence explicitly uses US$ for its minimum; the adjoining dollar maximum belongs to that same schedule.
  • No revision date, change log, age or residency criterion was established. No submission was made. Live terms prevail; no testing authorization is granted.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03

Appears in Profile. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

53796974ace8 · JSON exports & schemas · CC BY 4.0 content / MIT software