Program Removed
This program is no longer available on Bugcrowd. The scope data shown below is historical and may not reflect the final state of the program.
Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
sunrun-vdp-pro
14
In Scope
4
Out of Scope
In-Scope Assets (14)
Out-of-Scope Assets (4)
| Asset | Category | Bounty | |
|---|---|---|---|
| third-party saas services not owned or managed by sunrun | OTHER | No | |
| third-party saas services not owned or managed by sunrun | OTHER | No | |
| vendor-hosted platforms outside direct sunrun control | OTHER | No | |
| vendor-hosted platforms outside direct sunrun control | OTHER | No |
Scope Changes (65)
Jun 26, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 06:34 |
Jun 17, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://ai.sunrun.com/ | URL | In Scope | 11:35 |
| Added | https://sunrunone.com/dashboard | URL | In Scope | 11:35 |
| Added | https://www.valuereport.ai.sunrun.com/ | URL | In Scope | 11:35 |
| Added | https://elephant.ai.sunrun.com/ | URL | In Scope | 11:35 |
| Added | https://www.affiliates.ai.sunrun.com/ | URL | In Scope | 11:35 |
| Added | https://servicetransfer.staging.ai.sunrun.com/ | URL | In Scope | 11:35 |
| Added | https://ipa.ai.sunrun.com/ | URL | In Scope | 11:35 |
| Added | third-party saas services not owned or managed by sunrun | OTHER | Out of Scope | 11:35 |
| Added | vendor-hosted platforms outside direct sunrun control | OTHER | Out of Scope | 11:35 |
| Added | https://www.valuereport.ai.sunrun.com/ | URL | In Scope | 11:35 |
| Added | https://www.affiliates.ai.sunrun.com/ | URL | In Scope | 11:35 |
| Added | https://servicetransfer.staging.ai.sunrun.com/ | URL | In Scope | 11:35 |
| Added | https://ipa.ai.sunrun.com/ | URL | In Scope | 11:35 |
| Added | third-party saas services not owned or managed by sunrun | OTHER | Out of Scope | 11:35 |
| Added | vendor-hosted platforms outside direct sunrun control | OTHER | Out of Scope | 11:35 |
| Added | https://ai.sunrun.com/ | URL | In Scope | 11:35 |
| Added | https://sunrunone.com/dashboard | URL | In Scope | 11:35 |
| Added | https://elephant.ai.sunrun.com/ | URL | In Scope | 11:35 |
| Program Removed | — | — | — | 10:34 |
Mar 5, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | vendor-hosted platforms outside direct sunrun control | OTHER | Out of Scope | 22:32 |
| Added | vendor-hosted platforms outside direct sunrun control | OTHER | Out of Scope | 22:32 |
| Added | https://ai.sunrun.com/ | URL | In Scope | 22:32 |
| Added | https://www.valuereport.ai.sunrun.com/ | URL | In Scope | 22:32 |
| Added | https://elephant.ai.sunrun.com/ | URL | In Scope | 22:32 |
| Added | https://www.affiliates.ai.sunrun.com/ | URL | In Scope | 22:32 |
| Added | https://servicetransfer.staging.ai.sunrun.com/ | URL | In Scope | 22:32 |
| Added | third-party saas services not owned or managed by sunrun | OTHER | Out of Scope | 22:32 |
| Added | https://sunrunone.com/dashboard | URL | In Scope | 22:32 |
| Added | https://ipa.ai.sunrun.com/ | URL | In Scope | 22:32 |
| Added | https://ai.sunrun.com/ | URL | In Scope | 22:32 |
| Added | https://sunrunone.com/dashboard | URL | In Scope | 22:32 |
| Added | https://www.valuereport.ai.sunrun.com/ | URL | In Scope | 22:32 |
| Added | https://elephant.ai.sunrun.com/ | URL | In Scope | 22:32 |
| Added | https://www.affiliates.ai.sunrun.com/ | URL | In Scope | 22:32 |
| Added | https://servicetransfer.staging.ai.sunrun.com/ | URL | In Scope | 22:32 |
| Added | https://ipa.ai.sunrun.com/ | URL | In Scope | 22:32 |
| Added | third-party saas services not owned or managed by sunrun | OTHER | Out of Scope | 22:32 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://www.valuereport.ai.sunrun.com/ | URL | In Scope | 19:15 |
| Added | https://www.affiliates.ai.sunrun.com/ | URL | In Scope | 19:15 |
| Added | https://servicetransfer.staging.ai.sunrun.com/ | URL | In Scope | 19:15 |
| Added | third-party saas services not owned or managed by sunrun | OTHER | Out of Scope | 19:15 |
| Added | vendor-hosted platforms outside direct sunrun control | OTHER | Out of Scope | 19:15 |
| Added | https://sunrunone.com/dashboard | URL | In Scope | 19:15 |
| Added | https://elephant.ai.sunrun.com/ | URL | In Scope | 19:15 |
| Added | https://ipa.ai.sunrun.com/ | URL | In Scope | 19:15 |
| Added | https://ai.sunrun.com/ | URL | In Scope | 19:15 |
| Added | https://sunrunone.com/dashboard | URL | In Scope | 17:14 |
| Added | https://www.valuereport.ai.sunrun.com/ | URL | In Scope | 17:14 |
| Added | https://elephant.ai.sunrun.com/ | URL | In Scope | 17:14 |
| Added | https://www.affiliates.ai.sunrun.com/ | URL | In Scope | 17:14 |
| Added | https://servicetransfer.staging.ai.sunrun.com/ | URL | In Scope | 17:14 |
| Added | https://ipa.ai.sunrun.com/ | URL | In Scope | 17:14 |
| Added | third-party saas services not owned or managed by sunrun | OTHER | Out of Scope | 17:14 |
| Added | vendor-hosted platforms outside direct sunrun control | OTHER | Out of Scope | 17:14 |
| Added | https://sunrunone.com/dashboard | URL | In Scope | 17:14 |
| Added | https://servicetransfer.staging.ai.sunrun.com/ | URL | In Scope | 17:14 |
| Added | third-party saas services not owned or managed by sunrun | OTHER | Out of Scope | 17:14 |
| Added | vendor-hosted platforms outside direct sunrun control | OTHER | Out of Scope | 17:14 |
| Added | https://ai.sunrun.com/ | URL | In Scope | 17:14 |
| Added | https://www.valuereport.ai.sunrun.com/ | URL | In Scope | 17:14 |
| Added | https://elephant.ai.sunrun.com/ | URL | In Scope | 17:14 |
| Added | https://www.affiliates.ai.sunrun.com/ | URL | In Scope | 17:14 |
| Added | https://ipa.ai.sunrun.com/ | URL | In Scope | 17:14 |
| Added | https://ai.sunrun.com/ | URL | In Scope | 17:14 |