What this record establishes
Scope capture
Published asset rows were captured. The full policy and eligibility were not individually reviewed.
Directory page 5 explicitly labels this Bug bounty program; full program policy not reviewed; no active/paused status shown.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
api.truelayer[-sandbox].comPublished location: http://api.truelayer[-sandbox].com | URL | Tier 1 |
api.mtls.truelayer[-sandbox].comPublished location: http://api.mtls.truelayer[-sandbox].com | URL | Tier 1 |
auth.truelayer[-sandbox].comPublished location: http://auth.truelayer[-sandbox].com | URL | Tier 1 |
auth.mtls.truelayer[-sandbox].comPublished location: http://auth.mtls.truelayer[-sandbox].com | URL | Tier 1 |
app.truelayer[-sandbox].comPublished location: http://app.truelayer[-sandbox].com | URL | Tier 1 |
login-api.truelayer[-sandbox].comPublished location: http://login-api.truelayer[-sandbox].com | URL | Tier 1 |
login.truelayer[-sandbox].comPublished location: http://login.truelayer[-sandbox].com | URL | Tier 1 |
onboarding-api.truelayer.comPublished location: http://onboarding-api.truelayer.com | URL | Tier 1 |
pay-api.truelayer[-sandbox].comPublished location: http://pay-api.truelayer[-sandbox].com | URL | Tier 1 |
pay.truelayer[-sandbox].comPublished location: http://pay.truelayer[-sandbox].com | URL | Tier 1 |
paydirect.truelayer[-sandbox].comPublished location: http://paydirect.truelayer[-sandbox].com | URL | Tier 1 |
payment.truelayer[-sandbox].comPublished location: http://payment.truelayer[-sandbox].com | URL | Tier 1 |
payments-experience-api.truelayer[-sandbox].comPublished location: http://payments-experience-api.truelayer[-sandbox].com | URL | Tier 1 |
user-authentication-api.truelayer[-sandbox].comPublished location: http://user-authentication-api.truelayer[-sandbox].com | URL | Tier 1 |
users-api.truelayer.comPublished location: http://users-api.truelayer.com | URL | Tier 1 |
C# SDK | Other | Tier 2 |
console-backend.truelayer[-sandbox].comPublished location: http://console-backend.truelayer[-sandbox].com | URL | Tier 2 |
console.truelayer[-sandbox].comPublished location: http://console.truelayer[-sandbox].com | URL | Tier 2 |
sftp.reports.truelayer.comPublished location: http://sftp.reports.truelayer.com | URL | Tier 2 |
Java SDK | Other | Tier 2 |
PHP SDK | Other | Tier 2 |
TrueLayer for Magento (Magento plugin) | Other | Tier 2 |
shopify-admin.truelayer.comPublished location: http://shopify-admin.truelayer.com | URL | Tier 2 |
shop-pay-app-api.truelayer.comPublished location: http://shop-pay-app-api.truelayer.com | URL | Tier 2 |
truelayer-signing | Other | Tier 2 |
webhooks.truelayer[-sandbox].comPublished location: http://webhooks.truelayer[-sandbox].com | URL | Tier 2 |
*.truelayer.cloud | Wildcard | Tier 3 |
*.truelayer.com | Wildcard | Tier 3 |
*.truelayer.io | Wildcard | Tier 3 |
iOS SDK | Other | Tier 3 |
React Native SDK | Other | Tier 3 |
Web SDK | Other | Tier 3 |
Rust SDK | Other | No bounty |
| Asset | Type | Group / eligibility |
|---|---|---|
trust.truelayer.comPublished location: http://trust.truelayer.com | URL | |
TrueLayer for WooCommerce (WordPress plugin) | Other | |
banks.truelayer.comPublished location: http://banks.truelayer.com | URL | |
careers.truelayer.comPublished location: http://careers.truelayer.com | URL | |
docs.truelayer.comPublished location: http://docs.truelayer.com | URL | |
docs.houston.truelayer.comPublished location: http://docs.houston.truelayer.com | URL | |
https://truelayer.com/contact/ | URL | |
index.truelayer.comPublished location: http://index.truelayer.com | URL | |
info.truelayer.comPublished location: http://info.truelayer.com | URL | |
signin.truelayer.comPublished location: http://signin.truelayer.com | URL | |
support.truelayer.comPublished location: http://support.truelayer.com | URL | |
status.truelayer.comPublished location: http://status.truelayer.com | URL | |
truelayer.zendesk.comPublished location: http://truelayer.zendesk.com | URL |
Capture limits
- Only the published asset table was captured; program rules and eligibility still require individual review.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty. No identity match is inferred from a shared company name.