Policy and restrictions
Owned accounts only. Stop on nonpublic-data access and delete retained information. No form automation, social engineering, disruption or third-party evidence hosting. Public disclosure is prohibited.
Eligibility and submission status
Researcher identification, program-compliant accounts and concrete evidence are required. Platform first-valid-report rules apply; monetary compensation requires age 18 or the applicable age of majority.
The official brief explicitly displays In progress and an ongoing period.
Advertised rewards
Ordinary tiers advertise USD 100–7,500, 100–5,500 and 100–3,000. Impact-based increases and a minimum $500 payment-data bonus are separate; no combined ceiling established. The May–June 2026 SSO promotion expired.
Advertised schedules and exceptional ceilings are not individual award evidence.
Published scope snapshot
Captured 2026-10-03. Check the current policy for changes before participating.
| Asset | Type | Group / eligibility |
|---|---|---|
api.rapyd.net | api | Tier 3 In scope Premium |
dashboard.rapyd.netPublished location: https://dashboard.rapyd.net/ | website | Tier 2 In scope |
verify.rapyd.net | website | Tier 2 In scope |
checkout.rapyd.net | other | Tier 2 In scope |
*.rapyd.net | website | Tier 1 In scope |
*.korta.is | website | Tier 1 In scope |
jointhemoment.netPublished location: https://jointhemoment.net/ | website | Tier 1 In scope |
*.rapyd.com | other | Tier 1 In scope |
*.rapyd.org | other | Tier 1 In scope |
*.kortathjonustan.is | website | Tier 1 In scope |
| Asset | Type | Group / eligibility |
|---|---|---|
community.rapyd.net | other | Out of Scope Targets |
support.rapyd.net | website | Out of Scope Targets |
docs.rapyd.net | website | Out of Scope Targets |
sandbox.rapyd.net | other | Out of Scope Targets |
3rd party services | other | Out of Scope Targets |
ghost.rapyd.net | other | Out of Scope Targets |
*.neatcommerce.com | website | Out of Scope Targets |
*.neattest.com | website | Out of Scope Targets |
*.neat.com.hk | website | Out of Scope Targets |
*.neat.hk | website | Out of Scope Targets |
*.neat.wtf | website | Out of Scope Targets |
Review limitations
- Brief revision: June 17, 2026. Change index: page 1 of 4; diffs unreviewed.
- Announcement index reviewed; recent notices read within the brief. Attachments, linked setup documentation and authenticated eligibility unreviewed.
- USD uses platform accounting evidence. Static text omitted the brief. Inventories/instructions omitted; live terms prevail. No authorization granted.
Sources and provenance
- Rapyd Bug Bounty public brief Rapyd / Bugcrowd · reviewed 2026-10-03
- Rapyd Bug Bounty announcement archive Rapyd / Bugcrowd · reviewed 2026-10-03
- Rapyd Bug Bounty change index Rapyd / Bugcrowd · reviewed 2026-10-03
- Bugcrowd Organization Accounting Bugcrowd · reviewed 2026-10-03
- Bugcrowd Standard Disclosure Terms Bugcrowd · reviewed 2026-10-03
- Published Bugcrowd scope groups Rapyd · reviewed 2026-10-03
Record reviewed 2026-10-03. Snapshot 53796974ace8. Open the complete JSON contract.