Program Removed
This program is no longer available on Bugcrowd. The scope data shown below is historical and may not reflect the final state of the program.
Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
citi
2
In Scope
0
Out of Scope
In-Scope Assets (2)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| any citigroup owned asset | URL | No | - | |
| any citigroup owned asset | URL | No | - |
Scope Changes (9)
Jun 26, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 06:34 |
Jun 17, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | any citigroup owned asset | URL | In Scope | 11:38 |
| Added | any citigroup owned asset | URL | In Scope | 11:38 |
| Program Removed | — | — | — | 10:34 |
Mar 5, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | any citigroup owned asset | URL | In Scope | 22:37 |
| Added | any citigroup owned asset | URL | In Scope | 22:37 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | any citigroup owned asset | URL | In Scope | 19:19 |
| Added | any citigroup owned asset | URL | In Scope | 17:18 |
| Added | any citigroup owned asset | URL | In Scope | 17:18 |