Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

gapinc

BugcrowdView on Bugcrowd
RawAI Enhanced
11
In Scope
8
Out of Scope
In-Scope Assets (11)
AssetCategoryBountyQuick Links
https://api.gap.com/URLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://api.gap.com/credit_cards/v1/?external_customer_id=URLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://apps.apple.com/us/app/gap/id326347260IOSNo-
https://gap.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://gap.com/checkoutURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://gap.com/shopping-bagURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=USANDROIDNo
Play StoreAPKPureAPKMirror
https://secure-www.gap.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://secure-www.gap.com/checkout/place-order/URLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://secure-www.gap.com/checkout/place-order/xapi/place-order-actionURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-actionURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
Out-of-Scope Assets (8)
AssetCategoryBounty
*.gap.com.mxURLNo
*.gaptech.comURLNo
*.liverpool.com.*URLNo
IntermixURLNo
Janie & Jack URLNo
Recruiting - jobs.gapinc.com, careersblog.gapinc.comURLNo
equality.gapinc.comURLNo
investors.gapinc.comURLNo
Scope Changes (201)
Aug 12, 2026
ChangeAssetCategoryScopeTime
Addedinvestors.gapinc.comURLOut of Scope16:57
Addedhttps://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=USANDROIDIn Scope16:57
Added*.gap.com.mxWILDCARDOut of Scope16:57
Added*.gaptech.comWILDCARDOut of Scope16:57
Addedinvestors.gapinc.comURLOut of Scope16:57
Addedhttps://secure-www.gap.comURLIn Scope16:57
Addedhttps://api.gap.com/credit_cards/v1?external_customer_id=URLIn Scope16:57
Addedhttps://gap.com/shopping-bagURLIn Scope16:57
Addedhttps://gap.comURLIn Scope16:57
Addedjanie & jackURLOut of Scope16:57
Added*.liverpool.com.*WILDCARDOut of Scope16:57
Addedhttps://gap.com/checkoutURLIn Scope16:57
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope16:57
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope16:57
Addedequality.gapinc.comURLOut of Scope16:57
Addedhttps://apps.apple.com/us/app/gap/id326347260IOSIn Scope16:57
Addedhttps://api.gap.com/URLIn Scope16:57
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-actionURLIn Scope16:57
Addedhttps://secure-www.gap.com/checkout/place-orderURLIn Scope16:57
AddedintermixURLOut of Scope16:57
Addedhttps://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=USANDROIDIn Scope16:57
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/place-order-actionURLIn Scope16:57
AddedintermixURLOut of Scope16:57
Addedjanie & jackURLOut of Scope16:57
Added*.liverpool.com.*URLOut of Scope16:57
Added*.gap.com.mxURLOut of Scope16:57
Added*.gaptech.comURLOut of Scope16:57
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope16:57
Addedequality.gapinc.comURLOut of Scope16:57
Addedhttps://secure-www.gap.comURLIn Scope16:57
Addedhttps://api.gap.com/URLIn Scope16:57
Addedhttps://api.gap.com/credit_cards/v1?external_customer_id=URLIn Scope16:57
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/place-order-actionURLIn Scope16:57
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-actionURLIn Scope16:57
Addedhttps://secure-www.gap.com/checkout/place-orderURLIn Scope16:57
Addedhttps://gap.com/checkoutURLIn Scope16:57
Addedhttps://gap.com/shopping-bagURLIn Scope16:57
Addedhttps://gap.comURLIn Scope16:57
Addedhttps://apps.apple.com/us/app/gap/id326347260IOSIn Scope16:57
Program Removed———16:02
Program Removed———15:02
Program Removed———14:02
Program Removed———13:03
Jun 26, 2026
ChangeAssetCategoryScopeTime
Program Removed———06:34
Jun 17, 2026
ChangeAssetCategoryScopeTime
Added*.gap.com.mxWILDCARDOut of Scope22:36
Addedhttps://api.gap.com/credit_cards/v1?external_customer_id=URLIn Scope22:36
Addedhttps://api.gap.com/URLIn Scope22:36
Addedhttps://secure-www.gap.comURLIn Scope22:36
Addedhttps://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=USANDROIDIn Scope22:36
Addedhttps://apps.apple.com/us/app/gap/id326347260IOSIn Scope22:36
Addedequality.gapinc.comURLOut of Scope22:36
Addedinvestors.gapinc.comURLOut of Scope22:36
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope22:36
Added*.gaptech.comURLOut of Scope22:36
Added*.gap.com.mxURLOut of Scope22:36
Added*.liverpool.com.*URLOut of Scope22:36
Addedjanie & jackURLOut of Scope22:36
AddedintermixURLOut of Scope22:36
Added*.liverpool.com.*WILDCARDOut of Scope22:36
Addedhttps://gap.com/checkoutURLIn Scope22:36
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/place-order-actionURLIn Scope22:36
Addedhttps://secure-www.gap.comURLIn Scope22:36
AddedintermixURLOut of Scope22:36
Addedhttps://gap.com/shopping-bagURLIn Scope22:36
Addedinvestors.gapinc.comURLOut of Scope22:36
Addedjanie & jackURLOut of Scope22:36
Addedhttps://gap.comURLIn Scope22:36
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-actionURLIn Scope22:36
Addedhttps://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=USANDROIDIn Scope22:36
Added*.gaptech.comWILDCARDOut of Scope22:36
Addedhttps://secure-www.gap.com/checkout/place-orderURLIn Scope22:36
Addedhttps://api.gap.com/credit_cards/v1?external_customer_id=URLIn Scope22:36
Addedhttps://api.gap.com/URLIn Scope22:36
Addedhttps://apps.apple.com/us/app/gap/id326347260IOSIn Scope22:36
Addedequality.gapinc.comURLOut of Scope22:36
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope22:36
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope22:36
Addedhttps://gap.comURLIn Scope22:36
Addedhttps://gap.com/shopping-bagURLIn Scope22:36
Addedhttps://gap.com/checkoutURLIn Scope22:36
Addedhttps://secure-www.gap.com/checkout/place-orderURLIn Scope22:36
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-actionURLIn Scope22:36
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/place-order-actionURLIn Scope22:36
Program Removed———21:41
Program Removed———20:42
Program Removed———19:41
Program Removed———18:41
Program Removed———17:41
Program Removed———16:41
Program Removed———15:41
Program Removed———14:41
Program Removed———13:41
Program Removed———12:41
Program Removed———11:41
Program Removed———10:34
Mar 6, 2026
ChangeAssetCategoryScopeTime
Addedhttps://gap.com/shopping-bagURLIn Scope07:48
Addedhttps://gap.com/checkoutURLIn Scope07:48
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/place-order-actionURLIn Scope07:48
Addedhttps://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=USANDROIDIn Scope07:48
Addedhttps://gap.comURLIn Scope07:48
Addedhttps://secure-www.gap.com/checkout/place-orderURLIn Scope07:48
Addedequality.gapinc.comURLOut of Scope07:48
Added*.gaptech.comWILDCARDOut of Scope07:48
Added*.gap.com.mxWILDCARDOut of Scope07:48
Added*.liverpool.com.*WILDCARDOut of Scope07:48
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-actionURLIn Scope07:48
Addedhttps://api.gap.com/credit_cards/v1?external_customer_id=URLIn Scope07:48
Addedhttps://secure-www.gap.comURLIn Scope07:48
Addedinvestors.gapinc.comURLOut of Scope07:48
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope07:48
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope07:48
Addedjanie & jackURLOut of Scope07:48
Addedhttps://api.gap.com/URLIn Scope07:48
Addedhttps://apps.apple.com/us/app/gap/id326347260IOSIn Scope07:48
Addedhttps://api.gap.com/URLIn Scope07:48
Addedhttps://gap.comURLIn Scope07:48
Addedhttps://gap.com/shopping-bagURLIn Scope07:48
Addedhttps://gap.com/checkoutURLIn Scope07:48
Addedhttps://secure-www.gap.com/checkout/place-orderURLIn Scope07:48
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-actionURLIn Scope07:48
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/place-order-actionURLIn Scope07:48
Addedhttps://api.gap.com/credit_cards/v1?external_customer_id=URLIn Scope07:48
Addedhttps://secure-www.gap.comURLIn Scope07:48
Addedhttps://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=USANDROIDIn Scope07:48
Addedhttps://apps.apple.com/us/app/gap/id326347260IOSIn Scope07:48
Addedequality.gapinc.comURLOut of Scope07:48
Addedinvestors.gapinc.comURLOut of Scope07:48
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope07:48
Added*.gaptech.comURLOut of Scope07:48
Added*.gap.com.mxURLOut of Scope07:48
Added*.liverpool.com.*URLOut of Scope07:48
Addedjanie & jackURLOut of Scope07:48
AddedintermixURLOut of Scope07:48
AddedintermixURLOut of Scope07:48
Program Removed———06:54
Program Removed———05:54
Program Removed———04:54
Program Removed———03:54
Program Removed———02:54
Program Removed———01:54
Program Removed———00:54
Mar 5, 2026
ChangeAssetCategoryScopeTime
Program Removed———23:54
Feb 26, 2026
ChangeAssetCategoryScopeTime
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope00:04
Added*.gaptech.comWILDCARDOut of Scope00:04
Addedhttps://apps.apple.com/us/app/gap/id326347260IOSIn Scope00:04
Addedinvestors.gapinc.comURLOut of Scope00:04
Added*.gap.com.mxWILDCARDOut of Scope00:04
Addedhttps://gap.com/checkoutURLIn Scope00:04
Addedjanie & jackURLOut of Scope00:04
AddedintermixURLOut of Scope00:04
Addedhttps://gap.comURLIn Scope00:04
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/place-order-actionURLIn Scope00:04
Addedhttps://api.gap.com/URLIn Scope00:04
Addedhttps://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=USANDROIDIn Scope00:04
Addedequality.gapinc.comURLOut of Scope00:04
Added*.liverpool.com.*WILDCARDOut of Scope00:04
Addedhttps://gap.com/shopping-bagURLIn Scope00:04
Addedhttps://secure-www.gap.com/checkout/place-orderURLIn Scope00:04
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-actionURLIn Scope00:04
Addedhttps://api.gap.com/credit_cards/v1?external_customer_id=URLIn Scope00:04
Addedhttps://secure-www.gap.comURLIn Scope00:04
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope00:04
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedhttps://secure-www.gap.com/checkout/place-orderURLIn Scope17:16
Added*.gap.com.mxWILDCARDOut of Scope17:16
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope17:16
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope17:16
Addedequality.gapinc.comURLOut of Scope17:16
Addedhttps://gap.comURLIn Scope17:16
AddedintermixURLOut of Scope17:16
Addedhttps://secure-www.gap.comURLIn Scope17:16
Addedhttps://gap.com/checkoutURLIn Scope17:16
Addedhttps://gap.com/shopping-bagURLIn Scope17:16
Addedjanie & jackURLOut of Scope17:16
Added*.liverpool.com.*WILDCARDOut of Scope17:16
Addedhttps://apps.apple.com/us/app/gap/id326347260IOSIn Scope17:16
Added*.gaptech.comWILDCARDOut of Scope17:16
Addedinvestors.gapinc.comURLOut of Scope17:16
Addedhttps://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=USANDROIDIn Scope17:16
Addedhttps://api.gap.com/URLIn Scope17:16
AddedintermixURLOut of Scope17:16
Addedjanie & jackURLOut of Scope17:16
Added*.liverpool.com.*URLOut of Scope17:16
Added*.gap.com.mxURLOut of Scope17:16
Added*.gaptech.comURLOut of Scope17:16
Addedrecruiting - jobs.gapinc.com, careersblog.gapinc.comURLOut of Scope17:16
Addedhttps://gap.comURLIn Scope17:16
Addedinvestors.gapinc.comURLOut of Scope17:16
Addedequality.gapinc.comURLOut of Scope17:16
Addedhttps://apps.apple.com/us/app/gap/id326347260IOSIn Scope17:16
Addedhttps://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=USANDROIDIn Scope17:16
Addedhttps://secure-www.gap.comURLIn Scope17:16
Addedhttps://api.gap.com/URLIn Scope17:16
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/place-order-actionURLIn Scope17:16
Addedhttps://api.gap.com/credit_cards/v1?external_customer_id=URLIn Scope17:16
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-actionURLIn Scope17:16
Addedhttps://secure-www.gap.com/checkout/place-orderURLIn Scope17:16
Addedhttps://gap.com/checkoutURLIn Scope17:16
Addedhttps://gap.com/shopping-bagURLIn Scope17:16
Addedhttps://api.gap.com/credit_cards/v1?external_customer_id=URLIn Scope17:16
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/place-order-actionURLIn Scope17:16
Addedhttps://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-actionURLIn Scope17:16