vulns.co
/
GKData.io MCP

Retained public-record differences

Scope changes, with the signal separated.

Each batch compares saved public records. It separates asset-row and limitation text changes from routine source and timestamp updates.

Read this before acting. Retained semantic differences between saved public records, not live verification. recorded_at is the recording time, not the effective date of a scope change. History starts when explicitly recorded; earlier changes are not automatically backfilled.

2Retained batches
143Scope-related program records
188Source or timestamp-only records
331Changed program records

143 matching scope-related records

2026-11-0732 scope-related32 program records2026-11-07111 scope-related299 program records

Recorded 2026-11-07

32 program records include scope-related fields.

Raw JSON ↓

0 records contain asset-row or scope-group changes. 32 contain limitation text only. The remaining 0 changed program records only update provenance, timestamps, or another non-scope field in this retained comparison.

0added in-scope rows0removed in-scope rows0added excluded rows0removed excluded rows
OpenAIBugcrowd · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research.AfterPublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
Nubank Brasil Managed Bug Bounty ProgramBugcrowd · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research.AfterPublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
AtlassianBugcrowd · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research.AfterPublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
Web.com Bug BountyBugcrowd · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research.AfterPublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
OktaBugcrowd · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research.AfterPublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
HostGator LATAM Bug BountyBugcrowd · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research.AfterPublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
Vinted Bug BountyBugcrowd · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research.AfterPublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
LaunchDarkly Managed Bug Bounty EngagementBugcrowd · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research.AfterPublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
RapydBugcrowd · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research.AfterPublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
MATLAB Online - Ongoing Bug Bounty EngagementBugcrowd · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research.AfterPublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
OneTrustBugcrowd · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research.AfterPublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
Moovit Managed Bug Bounty ProgramBugcrowd · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research.AfterPublished target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
GitLabHackerOne · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control.AfterPublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions…
HackerOneHackerOne · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control.AfterPublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions…
VercelHackerOne · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control.AfterPublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions…
ArcHackerOne · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control.AfterPublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions…
1Password - Enterprise Password ManagerHackerOne · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control.AfterPublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions…
curlHackerOne · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control.AfterPublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions…
Dashlane Vulnerability Disclosure ProgramIntigriti · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope.AfterPublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
NxtPort VDPIntigriti · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope.AfterPublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
Exoscale Bug BountyIntigriti · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope.AfterPublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
Trusted FirmwareIntigriti · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope.AfterPublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
NVIDIA Public Bug BountyIntigriti · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope.AfterPublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
Intel® Vulnerability Disclosure ProgramIntigriti · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope.AfterPublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
Dropbox Bug BountyIntigriti · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope.AfterPublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
Ivo: AI VDPIntigriti · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope.AfterPublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
Spacelift VDPIntigriti · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope.AfterPublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
Grafana Labs - Vulnerability Disclosure Program (VDP)Intigriti · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope.AfterPublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
TrueLayer VDPIntigriti · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope.AfterPublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
ADAC Vulnerability Disclosure ProgramIntigriti · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope.AfterPublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
Dutch Lottery VDPIntigriti · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope.AfterPublished asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions were not refreshed. Live program rules prevail; this snapshot is not testing authorization.
Mozilla Web Bug BountyHackerOne · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control.AfterPublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control. Only public asset identifiers and explicit scope/bounty flags were refreshed automatically. Per-asset instruction prose, severity, group descriptions and rules may further restrict permission and are not reproduced. Whole-policy review dates, eligibility and restrictions…

Recorded 2026-11-07

111 program records include scope-related fields.

Raw JSON ↓

105 records contain asset-row or scope-group changes. 6 contain limitation text only. The remaining 188 changed program records only update provenance, timestamps, or another non-scope field in this retained comparison.

338added in-scope rows279removed in-scope rows149added excluded rows73removed excluded rows
Magic Apps Marketplace Bug BountyBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 rowAdded: app.magicestimations.com
OpenAIBugcrowd · Reviewed-policy in-scope rows
Open current program
  • Reviewed-policy in-scope rows+7 / −7 rowsAdded: ChatGPT Plugins · ChatGPT Desktop · Codex CLI · Developer Platform Playground · ChatGPT Web +2 moreRemoved: ChatGPT Plugins · *.openai.org · Codex Desktop · *.openai.com · ChatGPT +2 more
FivetranBugcrowd · Captured in-scope rows; Captured scope groups
Open current program
  • Captured in-scope rows+4 / −1 rowsAdded: *.fivetran.com · https://*.dbt.com · https://*.dbtlabs.com · https://*.getdbt.comRemoved: *.fivetran.com
  • Captured scope groupsText or source changed
Retool Vulnerability Disclosure ProgramBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 / −1 rowsAdded: ████████████████Removed: login.retool.com
Kantega SSOBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows−4 rowsRemoved: K-SSO SAML SSO OAuth Kerberos User Management for FeCru - Server - https://marketplace.atlassian.com/apps/1215263/k-sso-saml-sso-oauth-kerberos-user-management-for-fecru?hosting=server&tab=overview · Kantega User Management & License Optimizer for Jira - Data Center - https://marketplace.atlassian.com/apps/1230481/kantega-user-management-license-optimizer-for-jira?hosting=datacenter · Kantega User Management & License Optimizer for Confluence - Data Center - https://marketplace.atlassian.com/apps/1233591/kantega-user-management-license-optimizer-for-confluence?hosting=datacenter&tab=overview · Kantega User Management & License Optimizer for Bitbucket - Data Center - https://marketplace.atlassian.com/apps/2121739236/kantega-user-management-license-optimizer-for-bitbucket?hosting=datacenter
Caelor GroupBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 / −4 rowsAdded: https://marketplace.atlassian.com/apps/974024200/radar-assets-inventory-for-jsm?hosting=cloud&tab=overviewRemoved: https://marketplace.atlassian.com/apps/1224724/todo-checklist-with-forge?hosting=cloud&tab=overview · https://marketplace.atlassian.com/apps/1225145/image-editor-for-jira?hosting=cloud&tab=overview · https://marketplace.atlassian.com/apps/1225724/email-confluence-page?tab=overview&hosting=cloud · https://marketplace.atlassian.com/apps/1227112/eisenhower-task-management-todo-priority-matrix-for-jira?hosting=cloud&tab=overview
Gap Inc.Bugcrowd · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows+11 / −11 rowsAdded: ██████████████ · ████████████████████ · █████████ · ██████████ · ████████████████████████ +6 moreRemoved: Gap (Android) · https://api.gap.com/ · Gap (iOS) · *.gap.com · https://gap.com/checkout +6 more
  • Captured excluded rows+7 / −8 rowsAdded: ████████ · ████████████ · █████████████ · █████████████████ · ███████████████████ +2 moreRemoved: *.gap.com.mx · *.gaptech.com · *.liverpool.com.* · Intermix · Janie & Jack +3 more
Majid Al Futtaim LifestyleBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 / −1 rowsAdded: www.pacsun.meRemoved: fashion4less.me
Moneytree KKBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows+2 rowsAdded: MCP Server · fitbit-lottery (temporary)
StonikByteBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows+7 rowsAdded: Countdown & Regional Clock - https://marketplace.atlassian.com/apps/1157161318/countdown-regional-clock?hosting=cloud&tab=overview · Pivot Tables, Charts & Heatmaps for Jira Agile Reporting - https://marketplace.atlassian.com/apps/1855294554/pivot-tables-charts-heatmaps-for-jira-agile-reporting?hosting=cloud&tab=overview · Formula Cards, Gauge Charts, RAG Reports & Custom KPIs - https://marketplace.atlassian.com/apps/2113139725/formula-cards-gauge-charts-rag-reports-custom-kpis?hosting=cloud&tab=overview · Cycle Time, Lead Time & Time in Status Charts for Agile - https://marketplace.atlassian.com/apps/2194903109/cycle-time-lead-time-time-in-status-charts-for-agile?hosting=cloud&tab=overview · Team Wallboard for Agile, Scrum, Kanban & ITSM Dashboards - https://marketplace.atlassian.com/apps/3937617820/team-wallboard-for-agile-scrum-kanban-itsm-dashboards?hosting=cloud&tab=overview +2 more
Centers for Medicare & Medicaid Services - Public Bug Bounty Program 2026Bugcrowd · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows+5 / −1 rowsAdded: █████████████████ · ███████████████████ · ██████████████████████ · ████████████████████████████ · ██████████████████████████████Removed: █████████████
  • Captured excluded rows+5 / −2 rowsAdded: ██████████████████████ · ███████████████████████ · ████████████████████████ · █████████████████████████ · ████████████████████████████Removed: ██████████████████████████████████ · ████████████████████████████████████████████████████████████████████████████████████
Auth0 by OktaBugcrowd · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows+1 rowAdded: webtask.run
  • Captured excluded rows−1 rowRemoved: webtask.io
NemetschekBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows−1 rowRemoved: Self-Service Portal Report - Cloud Hosted | https://marketplace.atlassian.com/apps/1238203/self-service-portal-report?hosting=cloud&tab=overview
Lumen VDPBugcrowd · Captured in-scope rows; Captured excluded rows; Captured scope groups
Open current program
  • Captured in-scope rows+2 rowsAdded: https://alpha.preprod.alkira3.net · https://beta.preprod.alkira3.net
  • Captured excluded rows+2 rowsAdded: businessvoip.centurylink.com · test2.mynotify.centurylink.com
  • Captured scope groupsText or source changed
Imperva - Thales Bug BountyBugcrowd · Captured in-scope rows; Captured excluded rows; Captured scope groups
Open current program
  • Captured in-scope rows+4 / −5 rowsAdded: Thales Cyber Security Products · cpl.thalesgroup.com · https://supportportal.thalesgroup.com · www.imperva.comRemoved: https://*.incapsula.com · https://*.imperva.com · https://supportportal.thalesgroup.com · https://*.cloudvector.com/ · PTaaS Reference
  • Captured excluded rows−2 rowsRemoved: http://docs-be.imperva.com/ · http://docs.imperva.com/
  • Captured scope groupsText or source changed
AI | Apps+ Marketplace Bug Bounty ProgramBugcrowd · Captured excluded rows; Captured scope groups
Open current program
  • Captured excluded rows+19 rowsAdded: appsplus.co · broken-links.appsplus.co · countdown-timer.appsplus.co · docs.appsplus.co · gender-bias.appsplus.co +14 more
  • Captured scope groupsText or source changed
City of Vienna Managed Bug BountyBugcrowd · Captured excluded rows
Open current program
  • Captured excluded rows+4 / −2 rowsAdded: https://*/advuew/* · https://*/agsinspire/* · https://*/arcgis/* · https://*/umfrage/*Removed: https://www.wien.gv.at/advuew/* · https://www.wien.gv.at/umfrage/*
CoStar Vulnerability Disclosure EngagementBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows+3 rowsAdded: Dev Auth Matterport · Dev CaptureServices Matterport · Deal Navigator
Bolt Technology OÜBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 rowAdded: new-food.bolt.eu
Vinted Bug BountyBugcrowd · Reviewed-policy in-scope rows
Open current program
  • Reviewed-policy in-scope rows−1 rowRemoved: Vinted Sandbox
T-MobileBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 / −1 rowsAdded: T&P Servers (Temporarily Out of Scope)Removed: T&P Servers (Temporarily Out of Scope)
HotDocBugcrowd · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows+3 / −3 rowsAdded: https://bugcrowd.hotdoc.com.au/api · https://bugcrowd.hotdoc.com.au (Patients) · https://bugcrowd.hotdoc.com.au/dashboard (Clinic Dashboard)Removed: ██████████████████████████████████ · █████████████████████████████████████████ · ███████████████████████████████████████████████████████████
  • Captured excluded rows+3 / −3 rowsAdded: Android App · IoS App · https://try.hotdoc.com.au/hotdoc-profilesRemoved: ███████████ · ███████ · ██████████████████████████████████████████
ResolutionBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 / −20 rowsAdded: https://marketplace.atlassian.com/apps/1228240/hubspot-jira-crm-issue-link-integration-collaboration?hosting=cloud&tab=overviewRemoved: https://marketplace.atlassian.com/apps/1211109/user-deactivator-jira?hosting=server&tab=overview · https://marketplace.atlassian.com/apps/1212129/saml-single-sign-on-sso-confluence?hosting=server&tab=overview · https://marketplace.atlassian.com/apps/1212130/saml-single-sign-on-sso-jira-saml-sso?hosting=server&tab=overview · https://marketplace.atlassian.com/apps/1217045/saml-single-sign-on-sso-bitbucket?hosting=server&tab=overview · https://marketplace.atlassian.com/apps/1217672/saml-single-sign-on-sso-bamboo?hosting=server&tab=overview +15 more
Mastercard Public Bug BountyBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows−1 rowRemoved: donate.mastercard.com
Raley AppsBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows−1 rowRemoved: https://marketplace.atlassian.com/apps/1223409/raley-purchase-orders?hosting=cloud&tab=overview
Centers for Medicare & Medicaid Services (CMS) - Vulnerability Disclosure ProgramBugcrowd · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows−2 rowsRemoved: https://mymedicare.gov/ · https://www.medicare.gov/
  • Captured excluded rows+2 rowsAdded: https://mymedicare.gov/ · https://www.medicare.gov/
The Hut Group: Public Managed Bug Bounty EngagementBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows−2 rowsRemoved: https://*.enjoyselfish.com · https://*.illamasqua.com/
Ziff Davis Vulnerability Disclosure ProgramBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows+5 / −38 rowsAdded: Bring over · Diabetes Daily · Read it quik · Speedtest Custom Portal · ziffdavis.comRemoved: Campaigner SMTPService · Read it quik · Speedtest Custom Portal · Guess the retro game sounds video quiz · Esports By Omen +33 more
iRobotBugcrowd · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows−16 rowsRemoved: https://answers.irobot.com · https://investor.irobot.com · https://media.irobot.com · https://www.homesupport.irobot.com · https://www.irobot.at/ +11 more
  • Captured excluded rows+16 rowsAdded: https://answers.irobot.com · https://investor.irobot.com · https://media.irobot.com · https://www.homesupport.irobot.com · https://www.irobot.at/ +11 more
Chemist Warehouse Vulnerability Disclosure EngagementBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows−1 rowRemoved: rsvp.chemistwarehouse.com.au
ViatorBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows−3 rowsRemoved: https://www.toursgds.com/ · https://www.toursgds.com/SupplierService?wsdl · https://www.toursgds.com/ToursGdsService?wsdl
DevAcrobatsBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows+2 / −2 rowsAdded: Performance Charts and Reports for Jira Dashboards- Data Center -- https://marketplace.atlassian.com/apps/1218655/performance-charts-and-reports-for-jira-dashboards?hosting=datacenter&tab=overview · Performance Charts and Reports for Jira Dashboards - Cloud -- https://marketplace.atlassian.com/apps/1218655/performance-charts-and-reports-for-jira-dashboards?hosting=cloud&tab=overviewRemoved: Performance Objectives: Charts & Reports for Jira Dashboards - Data Center -- https://marketplace.atlassian.com/apps/1218655/performance-objectives-charts-reports?hosting=datacenter&tab=overview · Performance Objectives: Charts & Reports for Jira Dashboards - Cloud -- https://marketplace.atlassian.com/apps/1218655/performance-objectives-charts-reports?hosting=cloud&tab=overview
BNZ Responsible Disclosure ProgramBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows+2 rowsAdded: ma.secure.bnz.co.nz · secure.bnz.co.nz
BinanceBugcrowd · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 rowAdded: https://binance.th/
PayPalHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 rowAdded: Account restrictions and control bypasses - campaign
DatabricksHackerOne · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows+3 rowsAdded: login.databricks.com · ui-assets.cloud.databricks.com · https://github.com/databricks/*
  • Captured excluded rows+1 rowAdded: https://github.com/databrickslabs/*
d-you App & German EUDI Wallet EcosystemHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 / −1 rowsAdded: https://wallet-backend-sandbox.apps.sandbox.nwb.youniqx.com/status-listsRemoved: https://wallet-backend-sandbox.apps.sandbox.nwb.youniqx.com/v1/status-lists
MercadoLibreHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+3 / −1 rowsAdded: *.modoblack.mercadolivre.com.br · fullbarhomologa.modoblackfullbar.com.br · mercadolivreexperience.mercadolivre.com.brRemoved: Leaked Credentials
GitLabHackerOne · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished structured-scope rows were captured. Submission eligibility and bounty eligibility differ; program policy text may add restrictions.AfterPublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control.
XiaomiHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+3 / −3 rowsAdded: Mi Electric Scooter · Mi Home Webcam · Mi TV Removed: Mi Electric Scooter · Mi Home Webcam · Mi TV
Marriott Bug Bounty ProgramHackerOne · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows+3 / −25 rowsAdded: reservations.all-inclusive.marriott.com · uat.marriott.com · *uat.marriott.comRemoved: giftcards.marriott.com · *uat.marriott.com · activities.marriott.com · all-inclusive.marriott.com · cache.marriott.com +20 more
  • Captured excluded rows+12 / −3 rowsAdded: all-inclusive.marriott.com · gifts.marriott.com · hotel-deals.marriott.com · hotel-development.marriott.com · http://www.shopmarriott.com +7 moreRemoved: Phoenix Platform · *moxymix*.marriott.com · eswebdev.marriott.com
NintendoHackerOne · Captured excluded rows
Open current program
  • Captured excluded rows+1 / −1 rowsAdded: Nintendo 3DS applications for which Nintendo is the publisher worldwide Removed: Nintendo 3DS applications for which Nintendo is the publisher worldwide
Kiwi.comHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows−10 rowsRemoved: https://github.com/kiwicom/js-iam-middleware · https://github.com/kiwicom/k8s-vault-operator · https://github.com/kiwicom/kiwi-cache · https://github.com/kiwicom/kiwi-json · https://github.com/kiwicom/kiwi-structlog-config +5 more
The Browser Company of NYCHackerOne · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows−5 rowsRemoved: id6472513080 · Arc on Mac · Arc on Windows · company.thebrowser.arc · arc.net
  • Captured excluded rows+5 rowsAdded: id6472513080 · Arc on Mac · Arc on Windows · company.thebrowser.arc · arc.net
Early WarningHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+8 rowsAdded: accountinfodirect-snd.earlywarning.com · accountinfodirect.earlywarning.com · aoa-ws-fis.earlywarning.com · https://accountinfo.earlywarning.com · https://aoa-ws-direct-snd.earlywarning.com/aoainquiryservice/services/aoainquiryservice +3 more
EXNESSHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 / −1 rowsAdded: External service data leakage Removed: External service data leakage
WordPressHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+2 / −2 rowsAdded: Create Block Theme · Other github.com/wordpress reposRemoved: Create Block Theme · github.com/wordpress
RemitlyHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 rowAdded: api.remitly.com
Judge.me HackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 / −2 rowsAdded: emails.judge.meRemoved: bigcommerce-adapter.judge.me · woocommerce-adapter.judge.me
HackerOneHackerOne · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished structured-scope rows were captured. Submission eligibility and bounty eligibility differ; program policy text may add restrictions.AfterPublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control.
Palantir PublicHackerOne · Captured excluded rows
Open current program
  • Captured excluded rows+1 rowAdded: https://github.com/palantir/*
X / xAIHackerOne · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows−1 rowRemoved: grok-build
  • Captured excluded rows+1 rowAdded: grok-build
Goldman SachsHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows−6 rowsRemoved: com.gs.gstrader.external · com.gs.mobile.trader · *.foliodigitalwealth.com · *.foliofirst.com · *.folioinvesting.com +1 more
VercelHackerOne · Reviewed-policy in-scope rows; Scope limitations
Open current program
  • Reviewed-policy in-scope rows+2 rowsAdded: https://github.com/better-auth/better-auth · https://github.com/sveltejs/kit
  • Scope limitationsText or source changedBeforePublished structured-scope rows were captured. Submission eligibility and bounty eligibility differ; program policy text may add restrictions.AfterPublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control.
StripeHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+3 rowsAdded: files.stripe.com · stripe.com · stripe.dev
PricelineHackerOne · Captured excluded rows
Open current program
  • Captured excluded rows+1 / −1 rowsAdded: www.priceline.com/vp-web/* Removed: www.priceline.com/vp-web/*
Expedia Group Bug BountyHackerOne · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows+3 / −3 rowsAdded: https://apps.apple.com/in/app/expedia-group-partner-central/id987675995 · https://play.google.com/store/apps/datasafety?id=com.expediapartnercentral&hl=en · *.expedia.bizRemoved: www.expediacruises.com · *.expediaagents.com · *.expediacruises.com
  • Captured excluded rows+3 rowsAdded: www.expediacruises.com · *.expediaagents.com · *.expediacruises.com
Ubiquiti Inc.HackerOne · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows+2 / −1 rowsAdded: UniFi OS Server · WiFimanRemoved: UniFi OS Server
  • Captured excluded rows+1 / −1 rowsAdded: UniFi Talk Conference Speaker - UT-Conference Removed: UniFi Talk Conference Speaker - UT-Conference
MeeshoHackerOne · Captured excluded rows
Open current program
  • Captured excluded rows−2 rowsRemoved: com.valmo.ops · Rider App
HiltonHackerOne · Captured excluded rows
Open current program
  • Captured excluded rows+1 rowAdded: hhibeachandtennis.com
AutomatticHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows−1 rowRemoved: Texts
MalwarebytesHackerOne · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows−13 rowsRemoved: Any other ThreatDown asset · ThreatDown Browser Phishing Protection · ThreatDown Device Control · ThreatDown Endpoint Detection & Response (EDR) · ThreatDown Endpoint Protection +8 more
  • Captured excluded rows−1 rowRemoved: store.threatdown.com
ArcHackerOne · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished structured-scope rows were captured. Submission eligibility and bounty eligibility differ; program policy text may add restrictions.AfterPublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control.
Epic GamesHackerOne · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows+3 / −2 rowsAdded: EpicGamesLauncher.exe · Zenserver · v1staging.kidswebservices.com Removed: EpicGamesLauncher.exe · v1staging.kidswebservices.com
  • Captured excluded rows+1 rowAdded: Not owned/managed by Epic Games
Banco PlataHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+3 rowsAdded: prime.plata.co · people.plata.team · plata.co
Chia NetworkHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 / −1 rowsAdded: https://apps.apple.com/app/chia-signer/id6504493785 Removed: https://apps.apple.com/app/chia-signer/id6504493785
TwilioHackerOne · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows+74 / −14 rowsAdded: accounts.twilio.com · api.authy.com · api.segmentapis.com · api.sendgrid.com · api.stytch.com +69 moreRemoved: Twilio APIs · https://www.twilio.com/docs/authy/api · https://www.twilio.com/docs/verify/api · https://www.authy.com/download/ · https://www.authy.com/download/ +9 more
  • Captured excluded rows+11 / −15 rowsAdded: All Twilio acquisitions unless explicitly listed as in-scope · github.com/stytchauth/sqx · apjevents.twilio.com · cdpweek.com · chatagotchi.app +6 moreRemoved: All Kurento domains · All Twilio acquisitions until explicitly noted under the in-scope targets · Electric Imp and its assets · Third-party services · Twilio Quest +10 more
FanDuelHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 rowAdded: FanDuel Customer Support Sites
AT&THackerOne · Captured excluded rows
Open current program
  • Captured excluded rows+1 rowAdded: http://accesspro.att.com
VisaHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+3 rowsAdded: http://test.payworks.io/uis/mngr/ · https://ebc2test.cybersource.com/settings · https://ebctest.cybersource.com/varm
NetflixHackerOne · Captured excluded rows
Open current program
  • Captured excluded rows+1 / −1 rowsAdded: Assets associated with ReadyPlayerMe Removed: Assets associated with ReadyPlayerMe
ExodusHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 rowAdded: agents.exodus.com
Hyatt HotelsHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows−2 rowsRemoved: book.booktandl.com · hyatt.com
Anduril IndustriesHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 / −3 rowsAdded: anduril.comRemoved: *.anduril.au · *.anduril.com · *.anduril.com.au
MongoDBHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 / −1 rowsAdded: MongoDB Atlas Agent Engine Removed: MongoDB Atlas Agent Engine
CoinbaseHackerOne · Captured excluded rows
Open current program
  • Captured excluded rows+2 rowsAdded: https://github.com/coinbase/x402 · https://github.com/x402-foundation/
Superhuman (formerly Grammarly)HackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 / −2 rowsAdded: com.superhuman.mail Removed: com.superhuman.mail · Superhuman Mail
InspectorioHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 / −1 rowsAdded: https://app.bitrise.io/app/51a95edaab331ec5/installable-artifacts/48548bd7878361ab/public-install-page/82f78f6dddbebab09e2f4ac3c0081984Removed: https://app.bitrise.io/app/51a95edaab331ec5/installable-artifacts/e5213e1a814bf0ba/public-install-page/bed0d33f048271d6828c5a4a979ecc96
hostinger HackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 rowAdded: ai-builder.hostinger.com
REI BBPHackerOne · Captured excluded rows
Open current program
  • Captured excluded rows+1 rowAdded: catalogs.rei.com
ViaHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 / −1 rowsAdded: com.citymapper.app.releaseRemoved: com.citymapper.app.release
Polygon TechnologyHackerOne · Captured excluded rows
Open current program
  • Captured excluded rows+1 / −1 rowsAdded: https://github.com/maticnetwork/matic-cli Removed: https://github.com/maticnetwork/matic-cli
NBA Public Bug BountyHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+19 rowsAdded: comets-dev.wnba.com · comets-qa.wnba.com · comets-uat.wnba.com · comets.wnba.com · cweb-ott-uat.nba.com +14 more
InstacartHackerOne · Captured excluded rows
Open current program
  • Captured excluded rows+5 / −6 rowsAdded: affiliate.instacart.com · company.instacart.com · company.instacart.dev · heyitsinstacart.com · *.unatalabs.comRemoved: corporate.instacart.com · covidresponse.instacart.com · design.instacart.com · life.instacart.com · news.instacart.com +1 more
1winHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+8 rowsAdded: https://solscan.io/account/B2RFzpckwjtHXHMrPMKarg6Cj6xkSdT6mru4gJiJE87L · https://solscan.io/account/GWvQinGBRa7ZUzhXY23MrLjdsx3KfRGxH8yXURBwrz1R · https://solscan.io/account/sxzuA7TuRvjVbrXkJUgrYq2hfjVf3RFd8WFaSxt2rYm · 1win-partners.com · 1win.io +3 more
1Password - Enterprise Password ManagerHackerOne · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished structured-scope rows were captured. Submission eligibility and bounty eligibility differ; program policy text may add restrictions.AfterPublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control.
curlHackerOne · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished structured-scope rows were captured. Submission eligibility and bounty eligibility differ; program policy text may add restrictions.AfterPublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control.
CompassHackerOne · Captured excluded rows
Open current program
  • Captured excluded rows+4 / −4 rowsAdded: @properties · Consumer’s Title of California · Glide · KVS Title Removed: @properties · Consumer’s Title of California · Glide · KVS Title
MoonPay HackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 rowAdded: *.dflow.net
Braze, Inc.HackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 rowAdded: https://bug-bounty-mcp.k8s.tools-001.d-use-1.braze-dev.com/mcp
inDriveHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+34 rowsAdded: ps-gw-cf.euce1.indriverapp.com · ra-cf.euce1.indriverapp.com · ra-gw-cf.euce1.indriverapp.com · ra-gw-scf.euce1.indriverapp.com · rc-cf.africa.afso1.aws.indriverapp.com +29 more
EnjinHackerOne · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows+1 rowAdded: platform.enjin.io
  • Captured excluded rows−3 rowsRemoved: faucet.canary.enjin.io · platform.enjin.io · support.nft.io
Capital One Bug BountyHackerOne · Captured excluded rows
Open current program
  • Captured excluded rows+2 rowsAdded: api-an.capitalone.com/private​/1289118​/sdu​/* · http://api-an.capitalone.com/private/907765/digital-intake/
Cloudflare Public Bug BountyHackerOne · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows+2 / −1 rowsAdded: Cloudflare Cache · https://php-rce.cloudflare.app/Removed: Cloudflare Cache
  • Captured excluded rows+6 / −2 rowsAdded: 172.65.0.0/16 · https://github.com/cloudflare/realtimekit-web-examples · https://github.com/cloudflare/security-audit-skill · https://github.com/cloudflare/vibesdk · https://playground.ai.cloudflare.com/ +1 moreRemoved: 172.65.0.0/16 · https://github.com/cloudflare/realtimekit-web-examples
Bybit Fintech LtdHackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+6 rowsAdded: https://testnet.bybit.com/en/earn/rwa/ · https://testnet.bybit.com/en/trade/odds/ · https://testnet.bybit.com/en/trade/option/usdt/spcx · https://testnet.bybit.com/en/trade/usdt/btcusdt · https://www.bybit.com/en/ai-bot/home +1 more
Notion Labs, Inc.HackerOne · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 rowAdded: Notion MCP
VismaIntigriti · Captured in-scope rows
Open current program
  • Captured in-scope rows−7 rowsRemoved: ai-testing.maventa.com · api.workbox.dk · app.workbox.dk · authz.workbox.dk · autointerface.stag.visma.net +2 more
Nexuzhealth Web PACSIntigriti · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 rowAdded: idp-url.nexuzhealth.be
Water-LinkIntigriti · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows+18 / −6 rowsAdded: desktop.water-link.be · pit.water-link.be · aquawardsoperate.water-link.be · aquawardsspatial.water-link.be · indussiibis.water-link.be +13 moreRemoved: https://desktop.water-link.be/ · https://pit.water-link.be/ · https://www.water-link-jaarverslag.be · https://www.water-link.be · https://www.waterstoring.be/ +1 more
  • Captured excluded rows+11 / −10 rowsAdded: aquawardsoperateacc.water-link.be · aquawise.be · feedback.water-link.be · jobs.water-link.be · oxum.be +6 moreRemoved: aquawardsspatial.water-link.be · https://aquawardsoperate.water-link.be/ · https://aquawardsoperateacc.water-link.be · https://feedback.water-link.be · https://gis.water-link.be +5 more
NxtPort VDPIntigriti · Reviewed-policy in-scope rows
Open current program
  • Reviewed-policy in-scope rows+2 rowsAdded: *.certifiedpickup.com · *.inboundrelease.com
Axel Springer National Media & TechIntigriti · Captured in-scope rows
Open current program
  • Captured in-scope rows−1 rowRemoved: emarketer.com
Social DealIntigriti · Captured in-scope rows
Open current program
  • Captured in-scope rows+5 / −3 rowsAdded: app.nl.socialdeal · www.socialdeal.nl · www.socialdeal.nl/blog/ · https://www.spontaan.nl/ · Social Deal IOS APPRemoved: app.nl.socialdeal · www.socialdeal.nl · 910898851
Veriff Bug BountyIntigriti · Captured in-scope rows
Open current program
  • Captured in-scope rows+2 / −2 rowsAdded: com.veriff.demo · 1467907532Removed: com.veriff.demo · 1467907532
RIPE NCCIntigriti · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows+2 / −2 rowsAdded: https://github.com/RIPE-NCC/rpki-commons · https://access.ripe.netRemoved: https://github.com/RIPE-NCC/rpki-commons · access.ripe.net
  • Captured excluded rows+4 / −4 rowsAdded: ripe[1-100].ripe.net · https://exams.ripe.net · *aso.ripe.net · *nro.ripe.netRemoved: exams.ripe.net · ripe(1to87).ripe.net · *aso*ripe.net · *nro*ripe.net
DigitalOceanIntigriti · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows−1 rowRemoved: https://github.com/digitalocean/terraform-provider-digitalocean
  • Captured excluded rows+2 rowsAdded: https://github.com/digitalocean/terraform-provider-digitalocean · *.agents-internal.do-ai.run
Dropbox Bug BountyIntigriti · Reviewed-policy in-scope rows; Reviewed-policy excluded rows
Open current program
  • Reviewed-policy in-scope rows+5 / −5 rowsAdded: com.dropbox.dash · dash.dropbox.com · dash.ai · *.dash.ai · 6450553960Removed: com.dropbox.dash · dash.dropbox.com · dash.ai · *.dash.ai · 6450553960
  • Reviewed-policy excluded rows+4 rowsAdded: community-dev.dropbox.com · community-stage.dropbox.com · *.tigrisdata.com · *.tigrisdata.io
Here TechnologiesIntigriti · Captured in-scope rows
Open current program
  • Captured in-scope rows+18 / −8 rowsAdded: HERE WeGo Android · Leaked Service Credentials · Leaked/Compromised Employee Credentials · All other related services owned by HERE · account.api.here.com +13 moreRemoved: com.here.app.maps · Leaked/compromised employee accounts *.here.com · https://jaguar.here.com · https://landrover.here.com · *.account.api.here.com +3 more
UpholdIntigriti · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows+16 / −12 rowsAdded: docs.optimuscards.com · www.optimuscards.com · https://api.enterprise.sandbox.uphold.com/core · https://api.enterprise.sandbox.uphold.com/kyc-connector · https://api.enterprise.sandbox.uphold.com/market-pulse +11 moreRemoved: uatcms.optimuscards.com · docs.api.enterprise.uphold.com · docs.optimuscards.com · docs.topperpay.com · docs.uphold.com +7 more
  • Captured excluded rows+7 rowsAdded: status.uphold.com · https://api.enterprise.uphold.com/core · https://api.enterprise.uphold.com/kyc-connector · https://api.enterprise.uphold.com/market-pulse · https://api.enterprise.uphold.com/topper +2 more
Yahoo Bug BountyIntigriti · Captured in-scope rows; Captured excluded rows
Open current program
  • Captured in-scope rows−1 rowRemoved: Yahoo Open Source Projects
  • Captured excluded rows+1 rowAdded: Yahoo Open Source Projects
PersonioIntigriti · Captured in-scope rows
Open current program
  • Captured in-scope rows+1 / −1 rowsAdded: - .personio.de" style="overflow: hidden; white-space: nowrap; text-overflow: ellipsis; position: relative;"> https://sec-test-<intigriti handle>-<nn>.personio.deRemoved: https://sec-test-<intigriti handle>-<nn>.personio.de
Mozilla Web Bug BountyHackerOne · Scope limitations
Open current program
  • Scope limitationsText or source changedBeforePublished structured-scope rows were captured. Submission eligibility and bounty eligibility differ; program policy text may add restrictions.AfterPublished asset identifiers, types, submission eligibility and bounty eligibility were refreshed from the official CSV export. Policy prose, row-specific instructions and other restrictions were not re-reviewed; current official terms control.

Use the current policy before participating.

These comparisons help you notice where a saved public record changed. They do not establish when a change took effect, whether it is still current, eligibility, or permission to test. Open the linked program and follow its current rules.

Download the complete scope-change history ↓

GitHub snapshot 2026-10-12

428ebbc8ffdb · JSON exports & schemas · CC BY 4.0 content / MIT software