Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

lucidmotors-vdp

BugcrowdView on Bugcrowd

RawAI Enhanced

In Scope

Out of Scope

In-Scope Assets (1)

Asset	Category	Bounty	Quick Links
https://www.lucidmotors.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (1)

Asset	Category	Bounty
All Internal Applications	URL	No

Scope Changes (20)

Aug 12, 2026

Change	Asset	Category	Scope	Time
Added	https://www.lucidmotors.com	URL	In Scope	12:58
Added	all internal applications	URL	Out of Scope	12:58
Added	https://www.lucidmotors.com	URL	In Scope	12:58
Added	all internal applications	URL	Out of Scope	12:58

Jun 26, 2026

Change	Asset	Category	Scope	Time
Program Removed	—	—	—	06:34

Jun 17, 2026

Change	Asset	Category	Scope	Time
Added	https://www.lucidmotors.com	URL	In Scope	11:37
Added	https://www.lucidmotors.com	URL	In Scope	11:37
Added	all internal applications	URL	Out of Scope	11:37
Added	all internal applications	URL	Out of Scope	11:37
Program Removed	—	—	—	10:34

Mar 5, 2026

Change	Asset	Category	Scope	Time
Added	all internal applications	URL	Out of Scope	22:34
Added	https://www.lucidmotors.com	URL	In Scope	22:34
Added	all internal applications	URL	Out of Scope	22:34
Added	https://www.lucidmotors.com	URL	In Scope	22:34

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	https://www.lucidmotors.com	URL	In Scope	19:17
Added	all internal applications	URL	Out of Scope	19:17
Added	https://www.lucidmotors.com	URL	In Scope	17:17
Added	all internal applications	URL	Out of Scope	17:17
Added	all internal applications	URL	Out of Scope	17:17
Added	https://www.lucidmotors.com	URL	In Scope	17:17