Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
united-vdp
6
In Scope
49
Out of Scope
In-Scope Assets (6)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.ual.com | URL | No | ||
| *.united.com | URL | No | ||
| MileagePlus X App for Android | ANDROID | No | - | |
| MileagePlus X App for iOS | IOS | No | - | |
| United Mobile App for Android | ANDROID | No | - | |
| United Mobile App for iOS | IOS | No | - |
Out-of-Scope Assets (49)
Scope Changes (281)
Mar 20, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | business.united.com | URL | Out of Scope | 17:48 |
Mar 5, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | bigmetalbird.united.com | URL | Out of Scope | 22:33 |
| Added | chartersmanifest.united.com | URL | Out of Scope | 22:33 |
| Added | unitedexplorercard.com | URL | Out of Scope | 22:33 |
| Added | booking.unitedcargo.com | URL | Out of Scope | 22:33 |
| Added | mileageplus x app for android | ANDROID | In Scope | 22:33 |
| Added | hub.united.com | URL | Out of Scope | 22:33 |
| Added | opinions.united.com | URL | Out of Scope | 22:33 |
| Added | globalservices.united.com | URL | Out of Scope | 22:33 |
| Added | cardmemberoffers.united.com | URL | Out of Scope | 22:33 |
| Added | urocmobile.ual.com | URL | Out of Scope | 22:33 |
| Added | *.unitedvacationsdive.com | WILDCARD | Out of Scope | 22:33 |
| Added | onboard wi-fi, entertainment systems or avionics | OTHER | Out of Scope | 22:33 |
| Added | newsroom.united.com | URL | Out of Scope | 22:33 |
| Added | brand.united.com | URL | Out of Scope | 22:33 |
| Added | m.mpdining.rewardsnetwork.com | URL | Out of Scope | 22:33 |
| Added | packages.united.com | URL | Out of Scope | 22:33 |
| Added | chartercateringops.united.com | URL | Out of Scope | 22:33 |
| Added | newspaper-miles.com | URL | Out of Scope | 22:33 |
| Added | theexplorercard.com | URL | Out of Scope | 22:33 |
| Added | survey.continental.com/vovici.net | URL | Out of Scope | 22:33 |
| Added | chargerback.com | URL | Out of Scope | 22:33 |
| Added | salesuat.united.com | URL | Out of Scope | 22:33 |
| Added | united mobile app for android | ANDROID | In Scope | 22:33 |
| Added | uatp.united.com | URL | Out of Scope | 22:33 |
| Added | mystatus.united.com | URL | Out of Scope | 22:33 |
| Added | *.mileageplus.com | WILDCARD | Out of Scope | 22:33 |
| Added | ualmiles.com | URL | Out of Scope | 22:33 |
| Added | mpclubcard.com | URL | Out of Scope | 22:33 |
| Added | unitedexplorecard.com | URL | Out of Scope | 22:33 |
| Added | chartersmanifest.united.com | URL | Out of Scope | 22:33 |
| Added | *.united.com | WILDCARD | In Scope | 22:33 |
| Added | cars.united.com | URL | Out of Scope | 22:33 |
| Added | dutyfree.united.com | URL | Out of Scope | 22:33 |
| Added | uma.united.com | URL | Out of Scope | 22:33 |
| Added | unitedshop.summitmg.com | URL | Out of Scope | 22:33 |
| Added | united-veterans.jobs | URL | Out of Scope | 22:33 |
| Added | clubconferencerooms.united.com/unit | URL | Out of Scope | 22:33 |
| Added | myexplorercard.com | URL | Out of Scope | 22:33 |
| Added | *.ual.com | WILDCARD | In Scope | 22:33 |
| Added | vacations.united.com | URL | Out of Scope | 22:33 |
| Added | careers.united.com | URL | Out of Scope | 22:33 |
| Added | thanksamillion.united.com | URL | Out of Scope | 22:33 |
| Added | cruises.united.com | URL | Out of Scope | 22:33 |
| Added | unitedexplorer.com | URL | Out of Scope | 22:33 |
| Added | mileageplusawards.com | URL | Out of Scope | 22:33 |
| Added | news.united.com/responsys | URL | Out of Scope | 22:33 |
| Added | 3rd party applications/services | OTHER | Out of Scope | 22:33 |
| Added | jobparters.united.com | URL | Out of Scope | 22:33 |
| Added | *.unitedmileageplus.com | WILDCARD | Out of Scope | 22:33 |
| Added | mpdining.rewardsnetwork.com | URL | Out of Scope | 22:33 |
| Added | jetstream.united.com | URL | Out of Scope | 22:33 |
| Added | business.united.com | URL | Out of Scope | 22:33 |
| Added | united mobile app for ios | IOS | In Scope | 22:33 |
| Added | mileageplus x app for ios | IOS | In Scope | 22:33 |
| Added | hotels.united.com | URL | Out of Scope | 22:33 |
| Added | ir.united.com | URL | Out of Scope | 22:33 |
| Added | globallinks.united.com | URL | Out of Scope | 22:33 |
| Added | uatp.united.com | URL | Out of Scope | 22:33 |
| Added | *.united.com | URL | In Scope | 22:33 |
| Added | *.ual.com | URL | In Scope | 22:33 |
| Added | united mobile app for ios | IOS | In Scope | 22:33 |
| Added | united mobile app for android | ANDROID | In Scope | 22:33 |
| Added | mileageplus x app for ios | IOS | In Scope | 22:33 |
| Added | mileageplus x app for android | ANDROID | In Scope | 22:33 |
| Added | onboard wi-fi, entertainment systems or avionics | OTHER | Out of Scope | 22:33 |
| Added | 3rd party applications/services | OTHER | Out of Scope | 22:33 |
| Added | hotels.united.com | URL | Out of Scope | 22:33 |
| Added | vacations.united.com | URL | Out of Scope | 22:33 |
| Added | cars.united.com | URL | Out of Scope | 22:33 |
| Added | newsroom.united.com | URL | Out of Scope | 22:33 |
| Added | ir.united.com | URL | Out of Scope | 22:33 |
| Added | hub.united.com | URL | Out of Scope | 22:33 |
| Added | jobparters.united.com | URL | Out of Scope | 22:33 |
| Added | careers.united.com | URL | Out of Scope | 22:33 |
| Added | opinions.united.com | URL | Out of Scope | 22:33 |
| Added | globallinks.united.com | URL | Out of Scope | 22:33 |
| Added | dutyfree.united.com | URL | Out of Scope | 22:33 |
| Added | bigmetalbird.united.com | URL | Out of Scope | 22:33 |
| Added | globalservices.united.com | URL | Out of Scope | 22:33 |
| Added | brand.united.com | URL | Out of Scope | 22:33 |
| Added | thanksamillion.united.com | URL | Out of Scope | 22:33 |
| Added | *.unitedmileageplus.com | URL | Out of Scope | 22:33 |
| Added | mystatus.united.com | URL | Out of Scope | 22:33 |
| Added | newspaper-miles.com | URL | Out of Scope | 22:33 |
| Added | *.mileageplus.com | URL | Out of Scope | 22:33 |
| Added | cruises.united.com | URL | Out of Scope | 22:33 |
| Added | cardmemberoffers.united.com | URL | Out of Scope | 22:33 |
| Added | ualmiles.com | URL | Out of Scope | 22:33 |
| Added | uma.united.com | URL | Out of Scope | 22:33 |
| Added | unitedshop.summitmg.com | URL | Out of Scope | 22:33 |
| Added | united-veterans.jobs | URL | Out of Scope | 22:33 |
| Added | clubconferencerooms.united.com/unit | URL | Out of Scope | 22:33 |
| Added | theexplorercard.com | URL | Out of Scope | 22:33 |
| Added | mpclubcard.com | URL | Out of Scope | 22:33 |
| Added | myexplorercard.com | URL | Out of Scope | 22:33 |
| Added | unitedexplorecard.com | URL | Out of Scope | 22:33 |
| Added | unitedexplorer.com | URL | Out of Scope | 22:33 |
| Added | unitedexplorercard.com | URL | Out of Scope | 22:33 |
| Added | mileageplusawards.com | URL | Out of Scope | 22:33 |
| Added | mpdining.rewardsnetwork.com | URL | Out of Scope | 22:33 |
| Added | m.mpdining.rewardsnetwork.com | URL | Out of Scope | 22:33 |
| Added | news.united.com/responsys | URL | Out of Scope | 22:33 |
| Added | survey.continental.com/vovici.net | URL | Out of Scope | 22:33 |
| Added | booking.unitedcargo.com | URL | Out of Scope | 22:33 |
| Added | chargerback.com | URL | Out of Scope | 22:33 |
| Added | *.unitedvacationsdive.com | URL | Out of Scope | 22:33 |
| Added | packages.united.com | URL | Out of Scope | 22:33 |
| Added | jetstream.united.com | URL | Out of Scope | 22:33 |
| Added | business.united.com | URL | Out of Scope | 22:33 |
| Added | urocmobile.ual.com | URL | Out of Scope | 22:33 |
| Added | chartercateringops.united.com | URL | Out of Scope | 22:33 |
| Added | salesuat.united.com | URL | Out of Scope | 22:33 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | cardmemberoffers.united.com | URL | Out of Scope | 19:17 |
| Added | united-veterans.jobs | URL | Out of Scope | 19:17 |
| Added | *.unitedvacationsdive.com | WILDCARD | Out of Scope | 19:17 |
| Added | jetstream.united.com | URL | Out of Scope | 19:17 |
| Added | chartersmanifest.united.com | URL | Out of Scope | 19:17 |
| Added | mileageplus x app for ios | IOS | In Scope | 19:17 |
| Added | mileageplus x app for android | ANDROID | In Scope | 19:17 |
| Added | hotels.united.com | URL | Out of Scope | 19:17 |
| Added | cars.united.com | URL | Out of Scope | 19:17 |
| Added | ualmiles.com | URL | Out of Scope | 19:17 |
| Added | clubconferencerooms.united.com/unit | URL | Out of Scope | 19:17 |
| Added | unitedexplorer.com | URL | Out of Scope | 19:17 |
| Added | survey.continental.com/vovici.net | URL | Out of Scope | 19:17 |
| Added | united mobile app for ios | IOS | In Scope | 19:17 |
| Added | jobparters.united.com | URL | Out of Scope | 19:17 |
| Added | careers.united.com | URL | Out of Scope | 19:17 |
| Added | globallinks.united.com | URL | Out of Scope | 19:17 |
| Added | uatp.united.com | URL | Out of Scope | 19:17 |
| Added | uma.united.com | URL | Out of Scope | 19:17 |
| Added | theexplorercard.com | URL | Out of Scope | 19:17 |
| Added | business.united.com | URL | Out of Scope | 19:17 |
| Added | *.united.com | WILDCARD | In Scope | 19:17 |
| Added | dutyfree.united.com | URL | Out of Scope | 19:17 |
| Added | globalservices.united.com | URL | Out of Scope | 19:17 |
| Added | cruises.united.com | URL | Out of Scope | 19:17 |
| Added | mpdining.rewardsnetwork.com | URL | Out of Scope | 19:17 |
| Added | booking.unitedcargo.com | URL | Out of Scope | 19:17 |
| Added | chartercateringops.united.com | URL | Out of Scope | 19:17 |
| Added | salesuat.united.com | URL | Out of Scope | 19:17 |
| Added | ir.united.com | URL | Out of Scope | 19:17 |
| Added | hub.united.com | URL | Out of Scope | 19:17 |
| Added | *.unitedmileageplus.com | WILDCARD | Out of Scope | 19:17 |
| Added | mystatus.united.com | URL | Out of Scope | 19:17 |
| Added | newspaper-miles.com | URL | Out of Scope | 19:17 |
| Added | *.mileageplus.com | WILDCARD | Out of Scope | 19:17 |
| Added | mpclubcard.com | URL | Out of Scope | 19:17 |
| Added | urocmobile.ual.com | URL | Out of Scope | 19:17 |
| Added | newsroom.united.com | URL | Out of Scope | 19:17 |
| Added | united mobile app for android | ANDROID | In Scope | 19:17 |
| Added | onboard wi-fi, entertainment systems or avionics | OTHER | Out of Scope | 19:17 |
| Added | vacations.united.com | URL | Out of Scope | 19:17 |
| Added | myexplorercard.com | URL | Out of Scope | 19:17 |
| Added | *.ual.com | WILDCARD | In Scope | 19:17 |
| Added | thanksamillion.united.com | URL | Out of Scope | 19:17 |
| Added | unitedshop.summitmg.com | URL | Out of Scope | 19:17 |
| Added | unitedexplorercard.com | URL | Out of Scope | 19:17 |
| Added | chargerback.com | URL | Out of Scope | 19:17 |
| Added | brand.united.com | URL | Out of Scope | 19:17 |
| Added | unitedexplorecard.com | URL | Out of Scope | 19:17 |
| Added | mileageplusawards.com | URL | Out of Scope | 19:17 |
| Added | m.mpdining.rewardsnetwork.com | URL | Out of Scope | 19:17 |
| Added | news.united.com/responsys | URL | Out of Scope | 19:17 |
| Added | packages.united.com | URL | Out of Scope | 19:17 |
| Added | 3rd party applications/services | OTHER | Out of Scope | 19:17 |
| Added | opinions.united.com | URL | Out of Scope | 19:17 |
| Added | bigmetalbird.united.com | URL | Out of Scope | 19:17 |
| Added | *.mileageplus.com | URL | Out of Scope | 17:16 |
| Added | cruises.united.com | URL | Out of Scope | 17:16 |
| Added | *.united.com | URL | In Scope | 17:16 |
| Added | *.ual.com | URL | In Scope | 17:16 |
| Added | united mobile app for ios | IOS | In Scope | 17:16 |
| Added | united mobile app for android | ANDROID | In Scope | 17:16 |
| Added | mileageplus x app for ios | IOS | In Scope | 17:16 |
| Added | mileageplus x app for android | ANDROID | In Scope | 17:16 |
| Added | onboard wi-fi, entertainment systems or avionics | OTHER | Out of Scope | 17:16 |
| Added | 3rd party applications/services | OTHER | Out of Scope | 17:16 |
| Added | hotels.united.com | URL | Out of Scope | 17:16 |
| Added | vacations.united.com | URL | Out of Scope | 17:16 |
| Added | cars.united.com | URL | Out of Scope | 17:16 |
| Added | newsroom.united.com | URL | Out of Scope | 17:16 |
| Added | ir.united.com | URL | Out of Scope | 17:16 |
| Added | hub.united.com | URL | Out of Scope | 17:16 |
| Added | jobparters.united.com | URL | Out of Scope | 17:16 |
| Added | careers.united.com | URL | Out of Scope | 17:16 |
| Added | opinions.united.com | URL | Out of Scope | 17:16 |
| Added | globallinks.united.com | URL | Out of Scope | 17:16 |
| Added | dutyfree.united.com | URL | Out of Scope | 17:16 |
| Added | bigmetalbird.united.com | URL | Out of Scope | 17:16 |
| Added | globalservices.united.com | URL | Out of Scope | 17:16 |
| Added | uatp.united.com | URL | Out of Scope | 17:16 |
| Added | brand.united.com | URL | Out of Scope | 17:16 |
| Added | thanksamillion.united.com | URL | Out of Scope | 17:16 |
| Added | *.unitedmileageplus.com | URL | Out of Scope | 17:16 |
| Added | mystatus.united.com | URL | Out of Scope | 17:16 |
| Added | newspaper-miles.com | URL | Out of Scope | 17:16 |
| Added | cardmemberoffers.united.com | URL | Out of Scope | 17:16 |
| Added | ualmiles.com | URL | Out of Scope | 17:16 |
| Added | uma.united.com | URL | Out of Scope | 17:16 |
| Added | unitedshop.summitmg.com | URL | Out of Scope | 17:16 |
| Added | united-veterans.jobs | URL | Out of Scope | 17:16 |
| Added | clubconferencerooms.united.com/unit | URL | Out of Scope | 17:16 |
| Added | theexplorercard.com | URL | Out of Scope | 17:16 |
| Added | mpclubcard.com | URL | Out of Scope | 17:16 |
| Added | myexplorercard.com | URL | Out of Scope | 17:16 |
| Added | unitedexplorecard.com | URL | Out of Scope | 17:16 |
| Added | unitedexplorer.com | URL | Out of Scope | 17:16 |
| Added | unitedexplorercard.com | URL | Out of Scope | 17:16 |
| Added | mileageplusawards.com | URL | Out of Scope | 17:16 |
| Added | mpdining.rewardsnetwork.com | URL | Out of Scope | 17:16 |
| Added | m.mpdining.rewardsnetwork.com | URL | Out of Scope | 17:16 |
| Added | news.united.com/responsys | URL | Out of Scope | 17:16 |
| Added | survey.continental.com/vovici.net | URL | Out of Scope | 17:16 |
| Added | booking.unitedcargo.com | URL | Out of Scope | 17:16 |
| Added | chargerback.com | URL | Out of Scope | 17:16 |
| Added | *.unitedvacationsdive.com | URL | Out of Scope | 17:16 |
| Added | packages.united.com | URL | Out of Scope | 17:16 |
| Added | jetstream.united.com | URL | Out of Scope | 17:16 |
| Added | business.united.com | URL | Out of Scope | 17:16 |
| Added | urocmobile.ual.com | URL | Out of Scope | 17:16 |
| Added | chartercateringops.united.com | URL | Out of Scope | 17:16 |
| Added | salesuat.united.com | URL | Out of Scope | 17:16 |
| Added | chartersmanifest.united.com | URL | Out of Scope | 17:16 |
| Added | packages.united.com | URL | Out of Scope | 17:16 |
| Added | chartersmanifest.united.com | URL | Out of Scope | 17:16 |
| Added | hotels.united.com | URL | Out of Scope | 17:16 |
| Added | newsroom.united.com | URL | Out of Scope | 17:16 |
| Added | careers.united.com | URL | Out of Scope | 17:16 |
| Added | *.unitedmileageplus.com | WILDCARD | Out of Scope | 17:16 |
| Added | theexplorercard.com | URL | Out of Scope | 17:16 |
| Added | mileageplusawards.com | URL | Out of Scope | 17:16 |
| Added | urocmobile.ual.com | URL | Out of Scope | 17:16 |
| Added | chartercateringops.united.com | URL | Out of Scope | 17:16 |
| Added | united mobile app for android | ANDROID | In Scope | 17:16 |
| Added | mileageplus x app for ios | IOS | In Scope | 17:16 |
| Added | globallinks.united.com | URL | Out of Scope | 17:16 |
| Added | brand.united.com | URL | Out of Scope | 17:16 |
| Added | chargerback.com | URL | Out of Scope | 17:16 |
| Added | *.ual.com | WILDCARD | In Scope | 17:16 |
| Added | vacations.united.com | URL | Out of Scope | 17:16 |
| Added | opinions.united.com | URL | Out of Scope | 17:16 |
| Added | bigmetalbird.united.com | URL | Out of Scope | 17:16 |
| Added | uma.united.com | URL | Out of Scope | 17:16 |
| Added | myexplorercard.com | URL | Out of Scope | 17:16 |
| Added | *.unitedvacationsdive.com | WILDCARD | Out of Scope | 17:16 |
| Added | jobparters.united.com | URL | Out of Scope | 17:16 |
| Added | globalservices.united.com | URL | Out of Scope | 17:16 |
| Added | mystatus.united.com | URL | Out of Scope | 17:16 |
| Added | newspaper-miles.com | URL | Out of Scope | 17:16 |
| Added | mpclubcard.com | URL | Out of Scope | 17:16 |
| Added | unitedexplorercard.com | URL | Out of Scope | 17:16 |
| Added | salesuat.united.com | URL | Out of Scope | 17:16 |
| Added | *.united.com | WILDCARD | In Scope | 17:16 |
| Added | united mobile app for ios | IOS | In Scope | 17:16 |
| Added | 3rd party applications/services | OTHER | Out of Scope | 17:16 |
| Added | cardmemberoffers.united.com | URL | Out of Scope | 17:16 |
| Added | clubconferencerooms.united.com/unit | URL | Out of Scope | 17:16 |
| Added | unitedexplorecard.com | URL | Out of Scope | 17:16 |
| Added | mpdining.rewardsnetwork.com | URL | Out of Scope | 17:16 |
| Added | mileageplus x app for android | ANDROID | In Scope | 17:16 |
| Added | onboard wi-fi, entertainment systems or avionics | OTHER | Out of Scope | 17:16 |
| Added | cars.united.com | URL | Out of Scope | 17:16 |
| Added | dutyfree.united.com | URL | Out of Scope | 17:16 |
| Added | uatp.united.com | URL | Out of Scope | 17:16 |
| Added | cruises.united.com | URL | Out of Scope | 17:16 |
| Added | hub.united.com | URL | Out of Scope | 17:16 |
| Added | *.mileageplus.com | WILDCARD | Out of Scope | 17:16 |
| Added | ualmiles.com | URL | Out of Scope | 17:16 |
| Added | unitedexplorer.com | URL | Out of Scope | 17:16 |
| Added | survey.continental.com/vovici.net | URL | Out of Scope | 17:16 |
| Added | booking.unitedcargo.com | URL | Out of Scope | 17:16 |
| Added | jetstream.united.com | URL | Out of Scope | 17:16 |
| Added | business.united.com | URL | Out of Scope | 17:16 |
| Added | ir.united.com | URL | Out of Scope | 17:16 |
| Added | thanksamillion.united.com | URL | Out of Scope | 17:16 |
| Added | unitedshop.summitmg.com | URL | Out of Scope | 17:16 |
| Added | united-veterans.jobs | URL | Out of Scope | 17:16 |
| Added | m.mpdining.rewardsnetwork.com | URL | Out of Scope | 17:16 |
| Added | news.united.com/responsys | URL | Out of Scope | 17:16 |