Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

united-vdp

BugcrowdView on Bugcrowd
RawAI Enhanced
6
In Scope
49
Out of Scope
In-Scope Assets (6)
AssetCategoryBountyQuick Links
*.ual.comURLNo
*.united.comURLNo
MileagePlus X App for AndroidANDROIDNo-
MileagePlus X App for iOSIOSNo-
United Mobile App for AndroidANDROIDNo-
United Mobile App for iOSIOSNo-
Out-of-Scope Assets (49)
AssetCategoryBounty
*.mileageplus.comURLNo
*.unitedmileageplus.comURLNo
*.unitedvacationsdive.comURLNo
3rd party applications/servicesOTHERNo
Onboard Wi-Fi, entertainment systems or avionicsOTHERNo
bigmetalbird.united.comURLNo
booking.unitedcargo.comURLNo
brand.united.comURLNo
cardmemberoffers.united.comURLNo
careers.united.comURLNo
cars.united.comURLNo
chargerback.comURLNo
chartercateringops.united.comURLNo
chartersmanifest.united.comURLNo
clubconferencerooms.united.com/unitURLNo
cruises.united.comURLNo
dutyfree.united.comURLNo
globallinks.united.comURLNo
globalservices.united.comURLNo
hotels.united.comURLNo
hub.united.comURLNo
ir.united.comURLNo
jetstream.united.comURLNo
jobparters.united.comURLNo
m.mpdining.rewardsnetwork.comURLNo
mileageplusawards.comURLNo
mpclubcard.comURLNo
mpdining.rewardsnetwork.comURLNo
myexplorercard.comURLNo
mystatus.united.comURLNo
news.united.com/responsysURLNo
newspaper-miles.comURLNo
newsroom.united.comURLNo
opinions.united.comURLNo
packages.united.comURLNo
salesuat.united.comURLNo
survey.continental.com/vovici.netURLNo
thanksamillion.united.comURLNo
theexplorercard.comURLNo
ualmiles.comURLNo
uatp.united.comURLNo
uma.united.comURLNo
united-veterans.jobsURLNo
unitedexplorecard.comURLNo
unitedexplorer.comURLNo
unitedexplorercard.comURLNo
unitedshop.summitmg.comURLNo
urocmobile.ual.comURLNo
vacations.united.comURLNo
Scope Changes (281)
Mar 20, 2026
ChangeAssetCategoryScopeTime
Removedbusiness.united.comURLOut of Scope17:48
Mar 5, 2026
ChangeAssetCategoryScopeTime
Addedbigmetalbird.united.comURLOut of Scope22:33
Addedchartersmanifest.united.comURLOut of Scope22:33
Addedunitedexplorercard.comURLOut of Scope22:33
Addedbooking.unitedcargo.comURLOut of Scope22:33
Addedmileageplus x app for androidANDROIDIn Scope22:33
Addedhub.united.comURLOut of Scope22:33
Addedopinions.united.comURLOut of Scope22:33
Addedglobalservices.united.comURLOut of Scope22:33
Addedcardmemberoffers.united.comURLOut of Scope22:33
Addedurocmobile.ual.comURLOut of Scope22:33
Added*.unitedvacationsdive.comWILDCARDOut of Scope22:33
Addedonboard wi-fi, entertainment systems or avionicsOTHEROut of Scope22:33
Addednewsroom.united.comURLOut of Scope22:33
Addedbrand.united.comURLOut of Scope22:33
Addedm.mpdining.rewardsnetwork.comURLOut of Scope22:33
Addedpackages.united.comURLOut of Scope22:33
Addedchartercateringops.united.comURLOut of Scope22:33
Addednewspaper-miles.comURLOut of Scope22:33
Addedtheexplorercard.comURLOut of Scope22:33
Addedsurvey.continental.com/vovici.netURLOut of Scope22:33
Addedchargerback.comURLOut of Scope22:33
Addedsalesuat.united.comURLOut of Scope22:33
Addedunited mobile app for androidANDROIDIn Scope22:33
Addeduatp.united.comURLOut of Scope22:33
Addedmystatus.united.comURLOut of Scope22:33
Added*.mileageplus.comWILDCARDOut of Scope22:33
Addedualmiles.comURLOut of Scope22:33
Addedmpclubcard.comURLOut of Scope22:33
Addedunitedexplorecard.comURLOut of Scope22:33
Addedchartersmanifest.united.comURLOut of Scope22:33
Added*.united.comWILDCARDIn Scope22:33
Addedcars.united.comURLOut of Scope22:33
Addeddutyfree.united.comURLOut of Scope22:33
Addeduma.united.comURLOut of Scope22:33
Addedunitedshop.summitmg.comURLOut of Scope22:33
Addedunited-veterans.jobsURLOut of Scope22:33
Addedclubconferencerooms.united.com/unitURLOut of Scope22:33
Addedmyexplorercard.comURLOut of Scope22:33
Added*.ual.comWILDCARDIn Scope22:33
Addedvacations.united.comURLOut of Scope22:33
Addedcareers.united.comURLOut of Scope22:33
Addedthanksamillion.united.comURLOut of Scope22:33
Addedcruises.united.comURLOut of Scope22:33
Addedunitedexplorer.comURLOut of Scope22:33
Addedmileageplusawards.comURLOut of Scope22:33
Addednews.united.com/responsysURLOut of Scope22:33
Added3rd party applications/servicesOTHEROut of Scope22:33
Addedjobparters.united.comURLOut of Scope22:33
Added*.unitedmileageplus.comWILDCARDOut of Scope22:33
Addedmpdining.rewardsnetwork.comURLOut of Scope22:33
Addedjetstream.united.comURLOut of Scope22:33
Addedbusiness.united.comURLOut of Scope22:33
Addedunited mobile app for iosIOSIn Scope22:33
Addedmileageplus x app for iosIOSIn Scope22:33
Addedhotels.united.comURLOut of Scope22:33
Addedir.united.comURLOut of Scope22:33
Addedgloballinks.united.comURLOut of Scope22:33
Addeduatp.united.comURLOut of Scope22:33
Added*.united.comURLIn Scope22:33
Added*.ual.comURLIn Scope22:33
Addedunited mobile app for iosIOSIn Scope22:33
Addedunited mobile app for androidANDROIDIn Scope22:33
Addedmileageplus x app for iosIOSIn Scope22:33
Addedmileageplus x app for androidANDROIDIn Scope22:33
Addedonboard wi-fi, entertainment systems or avionicsOTHEROut of Scope22:33
Added3rd party applications/servicesOTHEROut of Scope22:33
Addedhotels.united.comURLOut of Scope22:33
Addedvacations.united.comURLOut of Scope22:33
Addedcars.united.comURLOut of Scope22:33
Addednewsroom.united.comURLOut of Scope22:33
Addedir.united.comURLOut of Scope22:33
Addedhub.united.comURLOut of Scope22:33
Addedjobparters.united.comURLOut of Scope22:33
Addedcareers.united.comURLOut of Scope22:33
Addedopinions.united.comURLOut of Scope22:33
Addedgloballinks.united.comURLOut of Scope22:33
Addeddutyfree.united.comURLOut of Scope22:33
Addedbigmetalbird.united.comURLOut of Scope22:33
Addedglobalservices.united.comURLOut of Scope22:33
Addedbrand.united.comURLOut of Scope22:33
Addedthanksamillion.united.comURLOut of Scope22:33
Added*.unitedmileageplus.comURLOut of Scope22:33
Addedmystatus.united.comURLOut of Scope22:33
Addednewspaper-miles.comURLOut of Scope22:33
Added*.mileageplus.comURLOut of Scope22:33
Addedcruises.united.comURLOut of Scope22:33
Addedcardmemberoffers.united.comURLOut of Scope22:33
Addedualmiles.comURLOut of Scope22:33
Addeduma.united.comURLOut of Scope22:33
Addedunitedshop.summitmg.comURLOut of Scope22:33
Addedunited-veterans.jobsURLOut of Scope22:33
Addedclubconferencerooms.united.com/unitURLOut of Scope22:33
Addedtheexplorercard.comURLOut of Scope22:33
Addedmpclubcard.comURLOut of Scope22:33
Addedmyexplorercard.comURLOut of Scope22:33
Addedunitedexplorecard.comURLOut of Scope22:33
Addedunitedexplorer.comURLOut of Scope22:33
Addedunitedexplorercard.comURLOut of Scope22:33
Addedmileageplusawards.comURLOut of Scope22:33
Addedmpdining.rewardsnetwork.comURLOut of Scope22:33
Addedm.mpdining.rewardsnetwork.comURLOut of Scope22:33
Addednews.united.com/responsysURLOut of Scope22:33
Addedsurvey.continental.com/vovici.netURLOut of Scope22:33
Addedbooking.unitedcargo.comURLOut of Scope22:33
Addedchargerback.comURLOut of Scope22:33
Added*.unitedvacationsdive.comURLOut of Scope22:33
Addedpackages.united.comURLOut of Scope22:33
Addedjetstream.united.comURLOut of Scope22:33
Addedbusiness.united.comURLOut of Scope22:33
Addedurocmobile.ual.comURLOut of Scope22:33
Addedchartercateringops.united.comURLOut of Scope22:33
Addedsalesuat.united.comURLOut of Scope22:33
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedcardmemberoffers.united.comURLOut of Scope19:17
Addedunited-veterans.jobsURLOut of Scope19:17
Added*.unitedvacationsdive.comWILDCARDOut of Scope19:17
Addedjetstream.united.comURLOut of Scope19:17
Addedchartersmanifest.united.comURLOut of Scope19:17
Addedmileageplus x app for iosIOSIn Scope19:17
Addedmileageplus x app for androidANDROIDIn Scope19:17
Addedhotels.united.comURLOut of Scope19:17
Addedcars.united.comURLOut of Scope19:17
Addedualmiles.comURLOut of Scope19:17
Addedclubconferencerooms.united.com/unitURLOut of Scope19:17
Addedunitedexplorer.comURLOut of Scope19:17
Addedsurvey.continental.com/vovici.netURLOut of Scope19:17
Addedunited mobile app for iosIOSIn Scope19:17
Addedjobparters.united.comURLOut of Scope19:17
Addedcareers.united.comURLOut of Scope19:17
Addedgloballinks.united.comURLOut of Scope19:17
Addeduatp.united.comURLOut of Scope19:17
Addeduma.united.comURLOut of Scope19:17
Addedtheexplorercard.comURLOut of Scope19:17
Addedbusiness.united.comURLOut of Scope19:17
Added*.united.comWILDCARDIn Scope19:17
Addeddutyfree.united.comURLOut of Scope19:17
Addedglobalservices.united.comURLOut of Scope19:17
Addedcruises.united.comURLOut of Scope19:17
Addedmpdining.rewardsnetwork.comURLOut of Scope19:17
Addedbooking.unitedcargo.comURLOut of Scope19:17
Addedchartercateringops.united.comURLOut of Scope19:17
Addedsalesuat.united.comURLOut of Scope19:17
Addedir.united.comURLOut of Scope19:17
Addedhub.united.comURLOut of Scope19:17
Added*.unitedmileageplus.comWILDCARDOut of Scope19:17
Addedmystatus.united.comURLOut of Scope19:17
Addednewspaper-miles.comURLOut of Scope19:17
Added*.mileageplus.comWILDCARDOut of Scope19:17
Addedmpclubcard.comURLOut of Scope19:17
Addedurocmobile.ual.comURLOut of Scope19:17
Addednewsroom.united.comURLOut of Scope19:17
Addedunited mobile app for androidANDROIDIn Scope19:17
Addedonboard wi-fi, entertainment systems or avionicsOTHEROut of Scope19:17
Addedvacations.united.comURLOut of Scope19:17
Addedmyexplorercard.comURLOut of Scope19:17
Added*.ual.comWILDCARDIn Scope19:17
Addedthanksamillion.united.comURLOut of Scope19:17
Addedunitedshop.summitmg.comURLOut of Scope19:17
Addedunitedexplorercard.comURLOut of Scope19:17
Addedchargerback.comURLOut of Scope19:17
Addedbrand.united.comURLOut of Scope19:17
Addedunitedexplorecard.comURLOut of Scope19:17
Addedmileageplusawards.comURLOut of Scope19:17
Addedm.mpdining.rewardsnetwork.comURLOut of Scope19:17
Addednews.united.com/responsysURLOut of Scope19:17
Addedpackages.united.comURLOut of Scope19:17
Added3rd party applications/servicesOTHEROut of Scope19:17
Addedopinions.united.comURLOut of Scope19:17
Addedbigmetalbird.united.comURLOut of Scope19:17
Added*.mileageplus.comURLOut of Scope17:16
Addedcruises.united.comURLOut of Scope17:16
Added*.united.comURLIn Scope17:16
Added*.ual.comURLIn Scope17:16
Addedunited mobile app for iosIOSIn Scope17:16
Addedunited mobile app for androidANDROIDIn Scope17:16
Addedmileageplus x app for iosIOSIn Scope17:16
Addedmileageplus x app for androidANDROIDIn Scope17:16
Addedonboard wi-fi, entertainment systems or avionicsOTHEROut of Scope17:16
Added3rd party applications/servicesOTHEROut of Scope17:16
Addedhotels.united.comURLOut of Scope17:16
Addedvacations.united.comURLOut of Scope17:16
Addedcars.united.comURLOut of Scope17:16
Addednewsroom.united.comURLOut of Scope17:16
Addedir.united.comURLOut of Scope17:16
Addedhub.united.comURLOut of Scope17:16
Addedjobparters.united.comURLOut of Scope17:16
Addedcareers.united.comURLOut of Scope17:16
Addedopinions.united.comURLOut of Scope17:16
Addedgloballinks.united.comURLOut of Scope17:16
Addeddutyfree.united.comURLOut of Scope17:16
Addedbigmetalbird.united.comURLOut of Scope17:16
Addedglobalservices.united.comURLOut of Scope17:16
Addeduatp.united.comURLOut of Scope17:16
Addedbrand.united.comURLOut of Scope17:16
Addedthanksamillion.united.comURLOut of Scope17:16
Added*.unitedmileageplus.comURLOut of Scope17:16
Addedmystatus.united.comURLOut of Scope17:16
Addednewspaper-miles.comURLOut of Scope17:16
Addedcardmemberoffers.united.comURLOut of Scope17:16
Addedualmiles.comURLOut of Scope17:16
Addeduma.united.comURLOut of Scope17:16
Addedunitedshop.summitmg.comURLOut of Scope17:16
Addedunited-veterans.jobsURLOut of Scope17:16
Addedclubconferencerooms.united.com/unitURLOut of Scope17:16
Addedtheexplorercard.comURLOut of Scope17:16
Addedmpclubcard.comURLOut of Scope17:16
Addedmyexplorercard.comURLOut of Scope17:16
Addedunitedexplorecard.comURLOut of Scope17:16
Addedunitedexplorer.comURLOut of Scope17:16
Addedunitedexplorercard.comURLOut of Scope17:16
Addedmileageplusawards.comURLOut of Scope17:16
Addedmpdining.rewardsnetwork.comURLOut of Scope17:16
Addedm.mpdining.rewardsnetwork.comURLOut of Scope17:16
Addednews.united.com/responsysURLOut of Scope17:16
Addedsurvey.continental.com/vovici.netURLOut of Scope17:16
Addedbooking.unitedcargo.comURLOut of Scope17:16
Addedchargerback.comURLOut of Scope17:16
Added*.unitedvacationsdive.comURLOut of Scope17:16
Addedpackages.united.comURLOut of Scope17:16
Addedjetstream.united.comURLOut of Scope17:16
Addedbusiness.united.comURLOut of Scope17:16
Addedurocmobile.ual.comURLOut of Scope17:16
Addedchartercateringops.united.comURLOut of Scope17:16
Addedsalesuat.united.comURLOut of Scope17:16
Addedchartersmanifest.united.comURLOut of Scope17:16
Addedpackages.united.comURLOut of Scope17:16
Addedchartersmanifest.united.comURLOut of Scope17:16
Addedhotels.united.comURLOut of Scope17:16
Addednewsroom.united.comURLOut of Scope17:16
Addedcareers.united.comURLOut of Scope17:16
Added*.unitedmileageplus.comWILDCARDOut of Scope17:16
Addedtheexplorercard.comURLOut of Scope17:16
Addedmileageplusawards.comURLOut of Scope17:16
Addedurocmobile.ual.comURLOut of Scope17:16
Addedchartercateringops.united.comURLOut of Scope17:16
Addedunited mobile app for androidANDROIDIn Scope17:16
Addedmileageplus x app for iosIOSIn Scope17:16
Addedgloballinks.united.comURLOut of Scope17:16
Addedbrand.united.comURLOut of Scope17:16
Addedchargerback.comURLOut of Scope17:16
Added*.ual.comWILDCARDIn Scope17:16
Addedvacations.united.comURLOut of Scope17:16
Addedopinions.united.comURLOut of Scope17:16
Addedbigmetalbird.united.comURLOut of Scope17:16
Addeduma.united.comURLOut of Scope17:16
Addedmyexplorercard.comURLOut of Scope17:16
Added*.unitedvacationsdive.comWILDCARDOut of Scope17:16
Addedjobparters.united.comURLOut of Scope17:16
Addedglobalservices.united.comURLOut of Scope17:16
Addedmystatus.united.comURLOut of Scope17:16
Addednewspaper-miles.comURLOut of Scope17:16
Addedmpclubcard.comURLOut of Scope17:16
Addedunitedexplorercard.comURLOut of Scope17:16
Addedsalesuat.united.comURLOut of Scope17:16
Added*.united.comWILDCARDIn Scope17:16
Addedunited mobile app for iosIOSIn Scope17:16
Added3rd party applications/servicesOTHEROut of Scope17:16
Addedcardmemberoffers.united.comURLOut of Scope17:16
Addedclubconferencerooms.united.com/unitURLOut of Scope17:16
Addedunitedexplorecard.comURLOut of Scope17:16
Addedmpdining.rewardsnetwork.comURLOut of Scope17:16
Addedmileageplus x app for androidANDROIDIn Scope17:16
Addedonboard wi-fi, entertainment systems or avionicsOTHEROut of Scope17:16
Addedcars.united.comURLOut of Scope17:16
Addeddutyfree.united.comURLOut of Scope17:16
Addeduatp.united.comURLOut of Scope17:16
Addedcruises.united.comURLOut of Scope17:16
Addedhub.united.comURLOut of Scope17:16
Added*.mileageplus.comWILDCARDOut of Scope17:16
Addedualmiles.comURLOut of Scope17:16
Addedunitedexplorer.comURLOut of Scope17:16
Addedsurvey.continental.com/vovici.netURLOut of Scope17:16
Addedbooking.unitedcargo.comURLOut of Scope17:16
Addedjetstream.united.comURLOut of Scope17:16
Addedbusiness.united.comURLOut of Scope17:16
Addedir.united.comURLOut of Scope17:16
Addedthanksamillion.united.comURLOut of Scope17:16
Addedunitedshop.summitmg.comURLOut of Scope17:16
Addedunited-veterans.jobsURLOut of Scope17:16
Addedm.mpdining.rewardsnetwork.comURLOut of Scope17:16
Addednews.united.com/responsysURLOut of Scope17:16