GoCardless Bug Bounty Program
GoCardless Bug Bounty Program · HackerOne · added Jul 15, 2019
High competitionWebApi
Disclosure Policy The policy covers any public-facing website owned, operated, or controlled by GoCardless, including web applications hosted on those sites. Pl…
Metrics
Bounty range—
Paid this month$0
Reports0/mo
Hunters0
Beginner fit
54/100
Estimated: this program accepts low-severity findings worth reporting.
Time to triage3d
Time to first bounty21d
Activity metrics for this program aren't exposed by the platform API, so the scores above are conservative estimates. Always verify on the program page before submitting.
Engage
Open on HackerOne →Always read the full policy on the platform before submitting. Scope below is a summary only.
Scope assets18
Bounty floor$0
In-scope assets
- www.gocardless.com
- pay-sandbox.gocardless.com
- api-sandbox.gocardless.com
- connect-sandbox.gocardless.com
- *.gocardless.io,*.gocardless-banking.io
- *.gocardless-cicd.io
- *.gocardless.dev
- oauth-sandbox.gocardless.com
- *.gocardless-lab.io
- ob.gocardless.com
- bankaccountdata.gocardless.com
- auth0.gocardless.com
- https://ob-sandbox.gocardless.io
- payer-details-sandbox.gocardless.com
- http://sso-demo.gocardless-staging.io
Fetched live from the HackerOne API.
Wanted categories
General