Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
northwestern-vdp
2
In Scope
13
Out of Scope
In-Scope Assets (2)
Out-of-Scope Assets (13)
Scope Changes (75)
Mar 5, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | nmresearchlibrary.nml.com (3rd party, not owned/managed by us) | URL | Out of Scope | 22:35 |
| Added | nmresearchlibrary.nml.com (3rd party, not owned/managed by us) | URL | Out of Scope | 22:35 |
| Added | https://northwesternmutual.com | URL | In Scope | 22:35 |
| Added | northwesternmutual.com/careers-apply | URL | Out of Scope | 22:35 |
| Added | northwesternmutual.com/notice-of-long-term-care-form | URL | Out of Scope | 22:35 |
| Added | northwesternmutual.com/financial-professionals/?name=* | URL | Out of Scope | 22:35 |
| Added | northwesternmutual.com/notice-of-group-disability-form | URL | Out of Scope | 22:35 |
| Added | any third-party assets on *.nm.com | WILDCARD | Out of Scope | 22:35 |
| Added | clientwise.com | URL | Out of Scope | 22:35 |
| Added | northwesternmutual.com/find-a-financial-advisor | URL | Out of Scope | 22:35 |
| Added | northwesternmutual.com/notice-of-disability-form | URL | Out of Scope | 22:35 |
| Added | anything owned by northwestern mutual on the public internet not listed as out of scope | URL | In Scope | 22:35 |
| Added | northwesternmutual.com/financial/advisor/* | URL | Out of Scope | 22:35 |
| Added | northwesternmutual.com/report-a-death | URL | Out of Scope | 22:35 |
| Added | emerald publications - anything that resolves to 199.59.136.0 - 199.59.139.255 (cidr: 199.59.136.0/22) | CIDR | Out of Scope | 22:35 |
| Added | events.nmfn.com (3rd party tool not owned/managed by us) | URL | Out of Scope | 22:35 |
| Added | https://northwesternmutual.com | URL | In Scope | 22:35 |
| Added | anything owned by northwestern mutual on the public internet not listed as out of scope | URL | In Scope | 22:35 |
| Added | northwesternmutual.com/find-a-financial-advisor | URL | Out of Scope | 22:35 |
| Added | northwesternmutual.com/financial/advisor/* | URL | Out of Scope | 22:35 |
| Added | northwesternmutual.com/careers-apply | URL | Out of Scope | 22:35 |
| Added | northwesternmutual.com/report-a-death | URL | Out of Scope | 22:35 |
| Added | northwesternmutual.com/notice-of-long-term-care-form | URL | Out of Scope | 22:35 |
| Added | northwesternmutual.com/financial-professionals/?name=* | URL | Out of Scope | 22:35 |
| Added | northwesternmutual.com/notice-of-disability-form | URL | Out of Scope | 22:35 |
| Added | northwesternmutual.com/notice-of-group-disability-form | URL | Out of Scope | 22:35 |
| Added | emerald publications - anything that resolves to 199.59.136.0 - 199.59.139.255 (cidr: 199.59.136.0/22) | URL | Out of Scope | 22:35 |
| Added | any third-party assets on *.nm.com | URL | Out of Scope | 22:35 |
| Added | clientwise.com | URL | Out of Scope | 22:35 |
| Added | events.nmfn.com (3rd party tool not owned/managed by us) | URL | Out of Scope | 22:35 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | northwesternmutual.com/report-a-death | URL | Out of Scope | 19:22 |
| Added | northwesternmutual.com/financial-professionals/?name=* | URL | Out of Scope | 19:22 |
| Added | northwesternmutual.com/notice-of-group-disability-form | URL | Out of Scope | 19:22 |
| Added | northwesternmutual.com/notice-of-long-term-care-form | URL | Out of Scope | 19:22 |
| Added | emerald publications - anything that resolves to 199.59.136.0 - 199.59.139.255 (cidr: 199.59.136.0/22) | CIDR | Out of Scope | 19:22 |
| Added | events.nmfn.com (3rd party tool not owned/managed by us) | URL | Out of Scope | 19:22 |
| Added | nmresearchlibrary.nml.com (3rd party, not owned/managed by us) | URL | Out of Scope | 19:22 |
| Added | anything owned by northwestern mutual on the public internet not listed as out of scope | URL | In Scope | 19:22 |
| Added | northwesternmutual.com/notice-of-disability-form | URL | Out of Scope | 19:22 |
| Added | any third-party assets on *.nm.com | WILDCARD | Out of Scope | 19:22 |
| Added | https://northwesternmutual.com | URL | In Scope | 19:22 |
| Added | northwesternmutual.com/financial/advisor/* | URL | Out of Scope | 19:22 |
| Added | northwesternmutual.com/careers-apply | URL | Out of Scope | 19:22 |
| Added | clientwise.com | URL | Out of Scope | 19:22 |
| Added | northwesternmutual.com/find-a-financial-advisor | URL | Out of Scope | 19:22 |
| Added | https://northwesternmutual.com | URL | In Scope | 17:21 |
| Added | anything owned by northwestern mutual on the public internet not listed as out of scope | URL | In Scope | 17:21 |
| Added | northwesternmutual.com/find-a-financial-advisor | URL | Out of Scope | 17:21 |
| Added | northwesternmutual.com/financial/advisor/* | URL | Out of Scope | 17:21 |
| Added | northwesternmutual.com/careers-apply | URL | Out of Scope | 17:21 |
| Added | northwesternmutual.com/report-a-death | URL | Out of Scope | 17:21 |
| Added | northwesternmutual.com/notice-of-long-term-care-form | URL | Out of Scope | 17:21 |
| Added | northwesternmutual.com/financial-professionals/?name=* | URL | Out of Scope | 17:21 |
| Added | northwesternmutual.com/notice-of-disability-form | URL | Out of Scope | 17:21 |
| Added | northwesternmutual.com/notice-of-group-disability-form | URL | Out of Scope | 17:21 |
| Added | emerald publications - anything that resolves to 199.59.136.0 - 199.59.139.255 (cidr: 199.59.136.0/22) | URL | Out of Scope | 17:21 |
| Added | any third-party assets on *.nm.com | URL | Out of Scope | 17:21 |
| Added | clientwise.com | URL | Out of Scope | 17:21 |
| Added | events.nmfn.com (3rd party tool not owned/managed by us) | URL | Out of Scope | 17:21 |
| Added | nmresearchlibrary.nml.com (3rd party, not owned/managed by us) | URL | Out of Scope | 17:21 |
| Added | northwesternmutual.com/careers-apply | URL | Out of Scope | 17:21 |
| Added | northwesternmutual.com/notice-of-disability-form | URL | Out of Scope | 17:21 |
| Added | anything owned by northwestern mutual on the public internet not listed as out of scope | OTHER | In Scope | 17:21 |
| Added | northwesternmutual.com/find-a-financial-advisor | URL | Out of Scope | 17:21 |
| Added | northwesternmutual.com/notice-of-long-term-care-form | URL | Out of Scope | 17:21 |
| Added | northwesternmutual.com/financial-professionals/?name=* | URL | Out of Scope | 17:21 |
| Added | emerald publications - anything that resolves to 199.59.136.0 - 199.59.139.255 (cidr: 199.59.136.0/22) | CIDR | Out of Scope | 17:21 |
| Added | https://northwesternmutual.com | URL | In Scope | 17:21 |
| Added | northwesternmutual.com/financial/advisor/* | URL | Out of Scope | 17:21 |
| Added | northwesternmutual.com/report-a-death | URL | Out of Scope | 17:21 |
| Added | northwesternmutual.com/notice-of-group-disability-form | URL | Out of Scope | 17:21 |
| Added | nmresearchlibrary.nml.com (3rd party, not owned/managed by us) | URL | Out of Scope | 17:21 |
| Added | any third-party assets on *.nm.com | WILDCARD | Out of Scope | 17:21 |
| Added | clientwise.com | URL | Out of Scope | 17:21 |
| Added | events.nmfn.com (3rd party tool not owned/managed by us) | URL | Out of Scope | 17:21 |