Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
gapinc
11
In Scope
6
Out of Scope
In-Scope Assets (11)
Out-of-Scope Assets (6)
Scope Changes (237)
Oct 9, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | equality.gapinc.com | URL | Out of Scope | 10:13 |
| Removed | *.gaptech.com | URL | Out of Scope | 10:13 |
| Removed | https://apps.apple.com/us/app/gap/id326347260 | IOS | In Scope | 10:13 |
| Added | ██████████ | URL | In Scope | 10:13 |
| Added | ████████████████████████████ | URL | In Scope | 10:13 |
| Added | ████████████████████████ | URL | In Scope | 10:13 |
| Added | ████████████████████████████████████████████████ | URL | In Scope | 10:13 |
| Added | █████████████████████████████████████████████████████████████████████████████████ | URL | In Scope | 10:13 |
| Added | ███████████████████████████████████████████████████████████████████████ | URL | In Scope | 10:13 |
| Added | ██████████████████████████████████████████████████████████ | URL | In Scope | 10:13 |
| Added | ████████████████████ | URL | In Scope | 10:13 |
| Added | ██████████████████████████ | URL | In Scope | 10:13 |
| Added | ██████████████ | ANDROID | In Scope | 10:13 |
| Added | █████████ | IOS | In Scope | 10:13 |
| Added | ███████████████████ | URL | Out of Scope | 10:13 |
| Added | ████████████████████████████████████████████████████ | URL | Out of Scope | 10:13 |
| Added | █████████████ | URL | Out of Scope | 10:13 |
| Added | ████████████ | URL | Out of Scope | 10:13 |
| Added | █████████████████ | URL | Out of Scope | 10:13 |
| Added | ████████ | URL | Out of Scope | 10:13 |
| Removed | https://gap.com/shopping-bag | URL | In Scope | 10:13 |
| Removed | *.gap.com.mx | URL | Out of Scope | 10:13 |
| Removed | https://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-action | URL | In Scope | 10:13 |
| Removed | https://gap.com | URL | In Scope | 10:13 |
| Removed | https://gap.com/checkout | URL | In Scope | 10:13 |
| Removed | intermix | URL | Out of Scope | 10:13 |
| Removed | recruiting - jobs.gapinc.com, careersblog.gapinc.com | URL | Out of Scope | 10:13 |
| Removed | janie & jack | URL | Out of Scope | 10:13 |
| Removed | investors.gapinc.com | URL | Out of Scope | 10:13 |
| Removed | https://secure-www.gap.com/checkout/place-order/xapi/place-order-action | URL | In Scope | 10:13 |
| Removed | https://api.gap.com/credit_cards/v1?external_customer_id= | URL | In Scope | 10:13 |
| Removed | https://secure-www.gap.com/checkout/place-order | URL | In Scope | 10:13 |
| Removed | https://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=US | ANDROID | In Scope | 10:13 |
| Removed | *.liverpool.com.* | URL | Out of Scope | 10:13 |
| Removed | https://secure-www.gap.com | URL | In Scope | 10:13 |
| Removed | https://api.gap.com/ | URL | In Scope | 10:13 |
Aug 12, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | investors.gapinc.com | URL | Out of Scope | 16:57 |
| Added | https://secure-www.gap.com | URL | In Scope | 16:57 |
| Added | https://gap.com/shopping-bag | URL | In Scope | 16:57 |
| Added | https://gap.com | URL | In Scope | 16:57 |
| Added | janie & jack | URL | Out of Scope | 16:57 |
| Added | https://gap.com/checkout | URL | In Scope | 16:57 |
| Added | *.liverpool.com.* | WILDCARD | Out of Scope | 16:57 |
| Added | *.gap.com.mx | WILDCARD | Out of Scope | 16:57 |
| Added | *.gaptech.com | WILDCARD | Out of Scope | 16:57 |
| Added | https://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=US | ANDROID | In Scope | 16:57 |
| Added | https://apps.apple.com/us/app/gap/id326347260 | IOS | In Scope | 16:57 |
| Added | recruiting - jobs.gapinc.com, careersblog.gapinc.com | URL | Out of Scope | 16:57 |
| Added | investors.gapinc.com | URL | Out of Scope | 16:57 |
| Added | https://api.gap.com/credit_cards/v1?external_customer_id= | URL | In Scope | 16:57 |
| Added | https://gap.com | URL | In Scope | 16:57 |
| Added | https://gap.com/shopping-bag | URL | In Scope | 16:57 |
| Added | https://gap.com/checkout | URL | In Scope | 16:57 |
| Added | https://secure-www.gap.com/checkout/place-order | URL | In Scope | 16:57 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-action | URL | In Scope | 16:57 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/place-order-action | URL | In Scope | 16:57 |
| Added | https://api.gap.com/credit_cards/v1?external_customer_id= | URL | In Scope | 16:57 |
| Added | https://api.gap.com/ | URL | In Scope | 16:57 |
| Added | https://secure-www.gap.com | URL | In Scope | 16:57 |
| Added | equality.gapinc.com | URL | Out of Scope | 16:57 |
| Added | recruiting - jobs.gapinc.com, careersblog.gapinc.com | URL | Out of Scope | 16:57 |
| Added | *.gaptech.com | URL | Out of Scope | 16:57 |
| Added | *.gap.com.mx | URL | Out of Scope | 16:57 |
| Added | *.liverpool.com.* | URL | Out of Scope | 16:57 |
| Added | janie & jack | URL | Out of Scope | 16:57 |
| Added | intermix | URL | Out of Scope | 16:57 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/place-order-action | URL | In Scope | 16:57 |
| Added | https://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=US | ANDROID | In Scope | 16:57 |
| Added | intermix | URL | Out of Scope | 16:57 |
| Added | https://secure-www.gap.com/checkout/place-order | URL | In Scope | 16:57 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-action | URL | In Scope | 16:57 |
| Added | https://api.gap.com/ | URL | In Scope | 16:57 |
| Added | https://apps.apple.com/us/app/gap/id326347260 | IOS | In Scope | 16:57 |
| Added | equality.gapinc.com | URL | Out of Scope | 16:57 |
| Added | recruiting - jobs.gapinc.com, careersblog.gapinc.com | URL | Out of Scope | 16:57 |
| Program Removed | — | — | — | 16:02 |
| Program Removed | — | — | — | 15:02 |
| Program Removed | — | — | — | 14:02 |
| Program Removed | — | — | — | 13:03 |
Jun 26, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 06:34 |
Jun 17, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://apps.apple.com/us/app/gap/id326347260 | IOS | In Scope | 22:36 |
| Added | https://gap.com | URL | In Scope | 22:36 |
| Added | https://gap.com/shopping-bag | URL | In Scope | 22:36 |
| Added | https://gap.com/checkout | URL | In Scope | 22:36 |
| Added | https://secure-www.gap.com/checkout/place-order | URL | In Scope | 22:36 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-action | URL | In Scope | 22:36 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/place-order-action | URL | In Scope | 22:36 |
| Added | https://api.gap.com/credit_cards/v1?external_customer_id= | URL | In Scope | 22:36 |
| Added | https://api.gap.com/ | URL | In Scope | 22:36 |
| Added | https://secure-www.gap.com | URL | In Scope | 22:36 |
| Added | https://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=US | ANDROID | In Scope | 22:36 |
| Added | https://apps.apple.com/us/app/gap/id326347260 | IOS | In Scope | 22:36 |
| Added | equality.gapinc.com | URL | Out of Scope | 22:36 |
| Added | investors.gapinc.com | URL | Out of Scope | 22:36 |
| Added | recruiting - jobs.gapinc.com, careersblog.gapinc.com | URL | Out of Scope | 22:36 |
| Added | *.gaptech.com | URL | Out of Scope | 22:36 |
| Added | *.gap.com.mx | URL | Out of Scope | 22:36 |
| Added | *.liverpool.com.* | URL | Out of Scope | 22:36 |
| Added | janie & jack | URL | Out of Scope | 22:36 |
| Added | intermix | URL | Out of Scope | 22:36 |
| Added | *.liverpool.com.* | WILDCARD | Out of Scope | 22:36 |
| Added | https://gap.com/checkout | URL | In Scope | 22:36 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/place-order-action | URL | In Scope | 22:36 |
| Added | https://secure-www.gap.com | URL | In Scope | 22:36 |
| Added | intermix | URL | Out of Scope | 22:36 |
| Added | https://gap.com/shopping-bag | URL | In Scope | 22:36 |
| Added | investors.gapinc.com | URL | Out of Scope | 22:36 |
| Added | janie & jack | URL | Out of Scope | 22:36 |
| Added | https://gap.com | URL | In Scope | 22:36 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-action | URL | In Scope | 22:36 |
| Added | https://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=US | ANDROID | In Scope | 22:36 |
| Added | *.gaptech.com | WILDCARD | Out of Scope | 22:36 |
| Added | *.gap.com.mx | WILDCARD | Out of Scope | 22:36 |
| Added | https://secure-www.gap.com/checkout/place-order | URL | In Scope | 22:36 |
| Added | https://api.gap.com/credit_cards/v1?external_customer_id= | URL | In Scope | 22:36 |
| Added | https://api.gap.com/ | URL | In Scope | 22:36 |
| Added | equality.gapinc.com | URL | Out of Scope | 22:36 |
| Added | recruiting - jobs.gapinc.com, careersblog.gapinc.com | URL | Out of Scope | 22:36 |
| Added | recruiting - jobs.gapinc.com, careersblog.gapinc.com | URL | Out of Scope | 22:36 |
| Program Removed | — | — | — | 21:41 |
| Program Removed | — | — | — | 20:42 |
| Program Removed | — | — | — | 19:41 |
| Program Removed | — | — | — | 18:41 |
| Program Removed | — | — | — | 17:41 |
| Program Removed | — | — | — | 16:41 |
| Program Removed | — | — | — | 15:41 |
| Program Removed | — | — | — | 14:41 |
| Program Removed | — | — | — | 13:41 |
| Program Removed | — | — | — | 12:41 |
| Program Removed | — | — | — | 11:41 |
| Program Removed | — | — | — | 10:34 |
Mar 6, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | recruiting - jobs.gapinc.com, careersblog.gapinc.com | URL | Out of Scope | 07:48 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-action | URL | In Scope | 07:48 |
| Added | https://api.gap.com/credit_cards/v1?external_customer_id= | URL | In Scope | 07:48 |
| Added | https://secure-www.gap.com | URL | In Scope | 07:48 |
| Added | investors.gapinc.com | URL | Out of Scope | 07:48 |
| Added | recruiting - jobs.gapinc.com, careersblog.gapinc.com | URL | Out of Scope | 07:48 |
| Added | janie & jack | URL | Out of Scope | 07:48 |
| Added | https://api.gap.com/ | URL | In Scope | 07:48 |
| Added | https://apps.apple.com/us/app/gap/id326347260 | IOS | In Scope | 07:48 |
| Added | https://gap.com | URL | In Scope | 07:48 |
| Added | https://gap.com/shopping-bag | URL | In Scope | 07:48 |
| Added | https://gap.com/checkout | URL | In Scope | 07:48 |
| Added | https://secure-www.gap.com/checkout/place-order | URL | In Scope | 07:48 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-action | URL | In Scope | 07:48 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/place-order-action | URL | In Scope | 07:48 |
| Added | https://api.gap.com/credit_cards/v1?external_customer_id= | URL | In Scope | 07:48 |
| Added | https://api.gap.com/ | URL | In Scope | 07:48 |
| Added | https://secure-www.gap.com | URL | In Scope | 07:48 |
| Added | https://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=US | ANDROID | In Scope | 07:48 |
| Added | https://apps.apple.com/us/app/gap/id326347260 | IOS | In Scope | 07:48 |
| Added | equality.gapinc.com | URL | Out of Scope | 07:48 |
| Added | investors.gapinc.com | URL | Out of Scope | 07:48 |
| Added | recruiting - jobs.gapinc.com, careersblog.gapinc.com | URL | Out of Scope | 07:48 |
| Added | *.gaptech.com | URL | Out of Scope | 07:48 |
| Added | *.gap.com.mx | URL | Out of Scope | 07:48 |
| Added | *.liverpool.com.* | URL | Out of Scope | 07:48 |
| Added | janie & jack | URL | Out of Scope | 07:48 |
| Added | intermix | URL | Out of Scope | 07:48 |
| Added | intermix | URL | Out of Scope | 07:48 |
| Added | https://gap.com/shopping-bag | URL | In Scope | 07:48 |
| Added | https://gap.com/checkout | URL | In Scope | 07:48 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/place-order-action | URL | In Scope | 07:48 |
| Added | https://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=US | ANDROID | In Scope | 07:48 |
| Added | https://gap.com | URL | In Scope | 07:48 |
| Added | https://secure-www.gap.com/checkout/place-order | URL | In Scope | 07:48 |
| Added | equality.gapinc.com | URL | Out of Scope | 07:48 |
| Added | *.gaptech.com | WILDCARD | Out of Scope | 07:48 |
| Added | *.gap.com.mx | WILDCARD | Out of Scope | 07:48 |
| Added | *.liverpool.com.* | WILDCARD | Out of Scope | 07:48 |
| Program Removed | — | — | — | 06:54 |
| Program Removed | — | — | — | 05:54 |
| Program Removed | — | — | — | 04:54 |
| Program Removed | — | — | — | 03:54 |
| Program Removed | — | — | — | 02:54 |
| Program Removed | — | — | — | 01:54 |
| Program Removed | — | — | — | 00:54 |
Mar 5, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 23:54 |
Feb 26, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *.gap.com.mx | WILDCARD | Out of Scope | 00:04 |
| Added | janie & jack | URL | Out of Scope | 00:04 |
| Added | https://gap.com | URL | In Scope | 00:04 |
| Added | https://gap.com/checkout | URL | In Scope | 00:04 |
| Added | intermix | URL | Out of Scope | 00:04 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/place-order-action | URL | In Scope | 00:04 |
| Added | https://api.gap.com/ | URL | In Scope | 00:04 |
| Added | https://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=US | ANDROID | In Scope | 00:04 |
| Added | equality.gapinc.com | URL | Out of Scope | 00:04 |
| Added | *.liverpool.com.* | WILDCARD | Out of Scope | 00:04 |
| Added | https://gap.com/shopping-bag | URL | In Scope | 00:04 |
| Added | https://secure-www.gap.com/checkout/place-order | URL | In Scope | 00:04 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-action | URL | In Scope | 00:04 |
| Added | https://api.gap.com/credit_cards/v1?external_customer_id= | URL | In Scope | 00:04 |
| Added | https://secure-www.gap.com | URL | In Scope | 00:04 |
| Added | recruiting - jobs.gapinc.com, careersblog.gapinc.com | URL | Out of Scope | 00:04 |
| Added | recruiting - jobs.gapinc.com, careersblog.gapinc.com | URL | Out of Scope | 00:04 |
| Added | *.gaptech.com | WILDCARD | Out of Scope | 00:04 |
| Added | https://apps.apple.com/us/app/gap/id326347260 | IOS | In Scope | 00:04 |
| Added | investors.gapinc.com | URL | Out of Scope | 00:04 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=US | ANDROID | In Scope | 17:16 |
| Added | investors.gapinc.com | URL | Out of Scope | 17:16 |
| Added | *.gaptech.com | WILDCARD | Out of Scope | 17:16 |
| Added | https://apps.apple.com/us/app/gap/id326347260 | IOS | In Scope | 17:16 |
| Added | *.liverpool.com.* | WILDCARD | Out of Scope | 17:16 |
| Added | janie & jack | URL | Out of Scope | 17:16 |
| Added | https://gap.com/shopping-bag | URL | In Scope | 17:16 |
| Added | https://gap.com/checkout | URL | In Scope | 17:16 |
| Added | https://secure-www.gap.com | URL | In Scope | 17:16 |
| Added | intermix | URL | Out of Scope | 17:16 |
| Added | https://gap.com | URL | In Scope | 17:16 |
| Added | equality.gapinc.com | URL | Out of Scope | 17:16 |
| Added | recruiting - jobs.gapinc.com, careersblog.gapinc.com | URL | Out of Scope | 17:16 |
| Added | recruiting - jobs.gapinc.com, careersblog.gapinc.com | URL | Out of Scope | 17:16 |
| Added | *.gap.com.mx | WILDCARD | Out of Scope | 17:16 |
| Added | https://secure-www.gap.com/checkout/place-order | URL | In Scope | 17:16 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-action | URL | In Scope | 17:16 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/place-order-action | URL | In Scope | 17:16 |
| Added | https://api.gap.com/credit_cards/v1?external_customer_id= | URL | In Scope | 17:16 |
| Added | https://gap.com | URL | In Scope | 17:16 |
| Added | https://gap.com/shopping-bag | URL | In Scope | 17:16 |
| Added | https://gap.com/checkout | URL | In Scope | 17:16 |
| Added | https://secure-www.gap.com/checkout/place-order | URL | In Scope | 17:16 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/update-payment-method-action | URL | In Scope | 17:16 |
| Added | https://secure-www.gap.com/checkout/place-order/xapi/place-order-action | URL | In Scope | 17:16 |
| Added | https://api.gap.com/credit_cards/v1?external_customer_id= | URL | In Scope | 17:16 |
| Added | https://api.gap.com/ | URL | In Scope | 17:16 |
| Added | https://secure-www.gap.com | URL | In Scope | 17:16 |
| Added | https://play.google.com/store/apps/details?id=com.skava.hybridapp.gap&hl=en_US&gl=US | ANDROID | In Scope | 17:16 |
| Added | https://apps.apple.com/us/app/gap/id326347260 | IOS | In Scope | 17:16 |
| Added | equality.gapinc.com | URL | Out of Scope | 17:16 |
| Added | investors.gapinc.com | URL | Out of Scope | 17:16 |
| Added | recruiting - jobs.gapinc.com, careersblog.gapinc.com | URL | Out of Scope | 17:16 |
| Added | *.gaptech.com | URL | Out of Scope | 17:16 |
| Added | *.gap.com.mx | URL | Out of Scope | 17:16 |
| Added | *.liverpool.com.* | URL | Out of Scope | 17:16 |
| Added | janie & jack | URL | Out of Scope | 17:16 |
| Added | intermix | URL | Out of Scope | 17:16 |
| Added | https://api.gap.com/ | URL | In Scope | 17:16 |