Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

home-depot-vdp-pro

BugcrowdView on Bugcrowd
RawAI Enhanced
3
In Scope
15
Out of Scope
Scope Changes (18)
Sep 8, 2026
ChangeAssetCategoryScopeTime
Added*.homedepot.comURLIn Scope19:02
Added*.homedepot.com.mxURLIn Scope19:02
Added*.homedepot.caURLIn Scope19:02
Addedecooptions.homedepot.comURLOut of Scope19:02
Addedir.homedepot.comURLOut of Scope19:02
Addedcorporate.homedepot.comURLOut of Scope19:02
Addedwww.thecompanystore.comURLOut of Scope19:02
Addedwww.proreferral.comURLOut of Scope19:02
Addedwww.blinds.comURLOut of Scope19:02
Addedhomedepot.egifter.comURLOut of Scope19:02
Addedhomedepot.cashstar.comURLOut of Scope19:02
Addedhdmoving.comURLOut of Scope19:02
Addedthdloan.greenskycredit.comURLOut of Scope19:02
Addedwww.thdloanonline.comURLOut of Scope19:02
Addedcitiretailservices.citibankonline.comURLOut of Scope19:02
Addedwww.retailservicescommercial.citi.comURLOut of Scope19:02
Addedrefacing.homedepot.comURLOut of Scope19:02
Addedcareers.homedepot.comURLOut of Scope19:02