Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

onhir-vdp

BugcrowdView on Bugcrowd

RawAI Enhanced

In Scope

Out of Scope

In-Scope Assets (2)

Asset	Category	Bounty	Quick Links
*.onhir.gov/	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://www.onhir.gov/	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Scope Changes (10)

Mar 5, 2026

Change	Asset	Category	Scope	Time
Added	https://www.onhir.gov/	URL	In Scope	22:37
Added	*.onhir.gov	URL	In Scope	22:37
Added	https://www.onhir.gov/	URL	In Scope	22:37
Added	*.onhir.gov	WILDCARD	In Scope	22:37

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	https://www.onhir.gov/	URL	In Scope	19:19
Added	*.onhir.gov	WILDCARD	In Scope	19:19
Added	https://www.onhir.gov/	URL	In Scope	17:18
Added	*.onhir.gov	URL	In Scope	17:18
Added	https://www.onhir.gov/	URL	In Scope	17:18
Added	*.onhir.gov	WILDCARD	In Scope	17:18