Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
/engagements/anz-vdp
9
In Scope
3
Out of Scope
In-Scope Assets (9)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| https://apps.apple.com/au/app/anz-australia/id870929663 | IOS | No | - | |
| https://apps.apple.com/au/app/anz-plus/id1495738612 | IOS | No | - | |
| https://onlinestore.anz.co.nz | URL | No | ||
| https://open.anz.co.nz | URL | No | ||
| https://play.google.com/store/apps/details?id=com.anz.android.gomoney&pcampaignid=web_share | ANDROID | No | ||
| https://play.google.com/store/apps/details?id=com.anz.lotus&referrer=utm_source%3Downed%26utm_campaign%3Dall_sb_des_fy23q2_testing | ANDROID | No | ||
| https://www.anz.co.nz | URL | No | ||
| https://www.anz.com | URL | No | ||
| https://www.anz.com.au | URL | No |
Out-of-Scope Assets (3)
| Asset | Category | Bounty | |
|---|---|---|---|
| https://b2b-api.anz.co.nz | URL | No | |
| https://digital.anz.co.nz | URL | No | |
| https://secure.anz.co.nz | URL | No |