What this record establishes
Scope capture
Published asset rows were captured. The full policy and eligibility were not individually reviewed.
Directory page 4 explicitly labels this Bug bounty program; full program policy not reviewed; no active/paused status shown.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
https://business.rivian.com/api | URL | Tier 1 |
https://rivian.com/api/gql/content/graphql | URL | Tier 1 |
https://rivian.com/api/gql/gateway/graphql | URL | Tier 1 |
https://rivian.com/api/gql/orders/graphql | URL | Tier 1 |
*.rivian.com | Wildcard | Tier 2 |
Rivian iOS ApplicationPublished location: https://apps.apple.com/app/1570215232 | iOS | Tier 2 |
basecamp.rivian.comPublished location: http://basecamp.rivian.com | URL | Tier 2 |
Rivian Android ApplicationPublished location: https://play.google.com/store/apps/details?id=com.rivian.android.consumer | Android | Tier 2 |
rivian.comPublished location: http://rivian.com | URL | Tier 2 |
| Asset | Type | Group / eligibility |
|---|---|---|
assets.rivian.comPublished location: http://assets.rivian.com | URL | |
careers.rivian.comPublished location: http://careers.rivian.com | URL | |
cloud.e.rivian.comPublished location: http://cloud.e.rivian.com | URL | |
demovehicles.rivian.comPublished location: http://demovehicles.rivian.com | URL | |
feedback.rivian.comPublished location: http://feedback.rivian.com | URL | |
internalshop.rivian.comPublished location: http://internalshop.rivian.com | URL | |
media.rivian.comPublished location: http://media.rivian.com | URL | |
stories.rivian.comPublished location: http://stories.rivian.com | URL | |
view.e.rivian.comPublished location: http://view.e.rivian.com | URL |
Capture limits
- Only the published asset table was captured; program rules and eligibility still require individual review.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty. No identity match is inferred from a shared company name.