Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

gapinc

BugcrowdView on Bugcrowd
RawAI Enhanced
11
In Scope
8
Out of Scope
In-Scope Assets (11)
AssetCategoryBountyQuick Links
https://api.gap.com/URLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://api.gap.com/credit_cards/v1/?external_customer_id=URLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://apps.apple.com/us/app/gap/id326347260IOSNo-
https://gap.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://gap.com/checkoutURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://gap.com/shopping-bagURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=USANDROIDNo
Play StoreAPKPureAPKMirror
https://secure-www.gap.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://secure-www.gap.com/checkout/place-order/URLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://secure-www.gap.com/checkout/place-order/xapi/place-order-actionURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-actionURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
Out-of-Scope Assets (8)
AssetCategoryBounty
*.gap.com.mxURLNo
*.gaptech.comURLNo
*.liverpool.com.*URLNo
IntermixURLNo
Janie & Jack URLNo
Recruiting - jobs.gapinc.com, careersblog.gapinc.comURLNo
equality.gapinc.comURLNo
investors.gapinc.comURLNo
Scope Changes (106)
Mar 6, 2026
ChangeAssetCategoryScopeTime
Addedhttps://apps.apple.com/us/app/gap/id326347260IOSIn Scope07:48
Addedhttps://apps.apple.com/us/app/gap/id326347260IOSIn Scope07:48
Addedequality.gapinc.comURLOut of Scope07:48
Addedinvestors.gapinc.comURLOut of Scope07:48
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope07:48
Added*.gaptech.comURLOut of Scope07:48
Added*.gap.com.mxURLOut of Scope07:48
Added*.liverpool.com.*URLOut of Scope07:48
Addedjanie & jackURLOut of Scope07:48
AddedintermixURLOut of Scope07:48
AddedintermixURLOut of Scope07:48
Addedhttps://gap.com/shopping-bagURLIn Scope07:48
Addedhttps://gap.com/checkoutURLIn Scope07:48
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/place-order-actionURLIn Scope07:48
Addedhttps://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=USANDROIDIn Scope07:48
Addedhttps://gap.comURLIn Scope07:48
Addedhttps://secure-www.gap.com/checkout/place-orderURLIn Scope07:48
Addedequality.gapinc.comURLOut of Scope07:48
Added*.gaptech.comWILDCARDOut of Scope07:48
Added*.gap.com.mxWILDCARDOut of Scope07:48
Added*.liverpool.com.*WILDCARDOut of Scope07:48
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-actionURLIn Scope07:48
Addedhttps://api.gap.com/credit_cards/v1?external_customer_id=URLIn Scope07:48
Addedhttps://secure-www.gap.comURLIn Scope07:48
Addedinvestors.gapinc.comURLOut of Scope07:48
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope07:48
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope07:48
Addedjanie & jackURLOut of Scope07:48
Addedhttps://api.gap.com/URLIn Scope07:48
Addedhttps://gap.comURLIn Scope07:48
Addedhttps://gap.com/shopping-bagURLIn Scope07:48
Addedhttps://gap.com/checkoutURLIn Scope07:48
Addedhttps://secure-www.gap.com/checkout/place-orderURLIn Scope07:48
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-actionURLIn Scope07:48
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/place-order-actionURLIn Scope07:48
Addedhttps://api.gap.com/credit_cards/v1?external_customer_id=URLIn Scope07:48
Addedhttps://api.gap.com/URLIn Scope07:48
Addedhttps://secure-www.gap.comURLIn Scope07:48
Addedhttps://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=USANDROIDIn Scope07:48
Program Removed———06:54
Program Removed———05:54
Program Removed———04:54
Program Removed———03:54
Program Removed———02:54
Program Removed———01:54
Program Removed———00:54
Mar 5, 2026
ChangeAssetCategoryScopeTime
Program Removed———23:54
Feb 26, 2026
ChangeAssetCategoryScopeTime
Addedhttps://gap.com/shopping-bagURLIn Scope00:04
Addedhttps://secure-www.gap.com/checkout/place-orderURLIn Scope00:04
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-actionURLIn Scope00:04
Addedhttps://api.gap.com/credit_cards/v1?external_customer_id=URLIn Scope00:04
Addedhttps://secure-www.gap.comURLIn Scope00:04
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope00:04
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope00:04
Added*.gaptech.comWILDCARDOut of Scope00:04
Addedhttps://apps.apple.com/us/app/gap/id326347260IOSIn Scope00:04
Addedinvestors.gapinc.comURLOut of Scope00:04
Added*.gap.com.mxWILDCARDOut of Scope00:04
Addedhttps://gap.comURLIn Scope00:04
Addedjanie & jackURLOut of Scope00:04
Addedhttps://gap.com/checkoutURLIn Scope00:04
AddedintermixURLOut of Scope00:04
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/place-order-actionURLIn Scope00:04
Addedhttps://api.gap.com/URLIn Scope00:04
Addedhttps://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=USANDROIDIn Scope00:04
Addedequality.gapinc.comURLOut of Scope00:04
Added*.liverpool.com.*WILDCARDOut of Scope00:04
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedhttps://gap.comURLIn Scope17:16
Addedhttps://gap.com/shopping-bagURLIn Scope17:16
Addedhttps://gap.com/checkoutURLIn Scope17:16
Addedhttps://secure-www.gap.com/checkout/place-orderURLIn Scope17:16
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-actionURLIn Scope17:16
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/place-order-actionURLIn Scope17:16
Addedhttps://api.gap.com/credit_cards/v1?external_customer_id=URLIn Scope17:16
Addedhttps://api.gap.com/URLIn Scope17:16
Addedhttps://secure-www.gap.comURLIn Scope17:16
Addedhttps://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=USANDROIDIn Scope17:16
Addedhttps://apps.apple.com/us/app/gap/id326347260IOSIn Scope17:16
Addedequality.gapinc.comURLOut of Scope17:16
Addedinvestors.gapinc.comURLOut of Scope17:16
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope17:16
Added*.gaptech.comURLOut of Scope17:16
Added*.gap.com.mxURLOut of Scope17:16
Added*.liverpool.com.*URLOut of Scope17:16
Addedjanie & jackURLOut of Scope17:16
AddedintermixURLOut of Scope17:16
Addedhttps://api.gap.com/URLIn Scope17:16
Addedhttps://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=USANDROIDIn Scope17:16
Addedinvestors.gapinc.comURLOut of Scope17:16
Added*.gaptech.comWILDCARDOut of Scope17:16
Addedhttps://apps.apple.com/us/app/gap/id326347260IOSIn Scope17:16
Added*.liverpool.com.*WILDCARDOut of Scope17:16
Addedjanie & jackURLOut of Scope17:16
Addedhttps://gap.com/shopping-bagURLIn Scope17:16
Addedhttps://gap.com/checkoutURLIn Scope17:16
Addedhttps://secure-www.gap.comURLIn Scope17:16
AddedintermixURLOut of Scope17:16
Addedhttps://gap.comURLIn Scope17:16
Addedequality.gapinc.comURLOut of Scope17:16
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope17:16
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope17:16
Added*.gap.com.mxWILDCARDOut of Scope17:16
Addedhttps://secure-www.gap.com/checkout/place-orderURLIn Scope17:16
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-actionURLIn Scope17:16
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/place-order-actionURLIn Scope17:16
Addedhttps://api.gap.com/credit_cards/v1?external_customer_id=URLIn Scope17:16