ynab

BugcrowdView on Bugcrowd

RawAI Enhanced

3

In Scope

5

Out of Scope

In-Scope Assets (3)

Asset	Category	Bounty	Quick Links
https://staging-api.bany.dev/	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://www.ynab.com/	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
staging-app.bany.dev	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (5)

Asset	Category	Bounty
Any previous version of the desktop apps: YNAB 4, YNAB 3, YNAB Pro, YNAB Basic (Spreadsheet)	OTHER	Yes
https://app.ynab.com/	URL	Yes
https://develop-app.ynab.com	URL	Yes
https://learn.ynab.com/	URL	Yes
https://support.ynab.com	URL	Yes

Scope Changes (41)

Mar 5, 2026

Change	Asset	Category	Scope	Time
Added	https://develop-app.ynab.com	URL	Out of Scope	22:25
Added	https://learn.ynab.com/	URL	Out of Scope	22:25
Added	https://www.ynab.com/	URL	In Scope	22:25
Added	https://app.ynab.com/	URL	Out of Scope	22:25
Added	any previous version of the desktop apps: ynab 4, ynab 3, ynab pro, ynab basic (spreadsheet)	OTHER	Out of Scope	22:25
Added	https://support.ynab.com	URL	Out of Scope	22:25
Added	https://develop-app.ynab.com	URL	Out of Scope	22:25
Added	https://learn.ynab.com/	URL	Out of Scope	22:25
Added	staging-app.bany.dev	URL	In Scope	22:25
Added	https://staging-api.bany.dev/	URL	In Scope	22:25
Added	staging-app.bany.dev	URL	In Scope	22:25
Added	https://staging-api.bany.dev/	URL	In Scope	22:25
Added	https://www.ynab.com/	URL	In Scope	22:25
Added	https://app.ynab.com/	URL	Out of Scope	22:25
Added	any previous version of the desktop apps: ynab 4, ynab 3, ynab pro, ynab basic (spreadsheet)	OTHER	Out of Scope	22:25
Added	https://support.ynab.com	URL	Out of Scope	22:25

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	any previous version of the desktop apps: ynab 4, ynab 3, ynab pro, ynab basic (spreadsheet)	OTHER	Out of Scope	19:08
Added	https://support.ynab.com	URL	Out of Scope	19:08
Added	https://develop-app.ynab.com	URL	Out of Scope	19:08
Added	https://learn.ynab.com/	URL	Out of Scope	19:08
Added	staging-app.bany.dev	URL	In Scope	19:08
Added	https://staging-api.bany.dev/	URL	In Scope	19:08
Added	https://www.ynab.com/	URL	In Scope	19:08
Added	https://app.ynab.com/	URL	Out of Scope	19:08
Program Removed	—	—	—	17:22
Added	staging-app.bany.dev	URL	In Scope	16:58
Added	https://staging-api.bany.dev/	URL	In Scope	16:58
Added	https://www.ynab.com/	URL	In Scope	16:58
Added	https://app.ynab.com/	URL	Out of Scope	16:58
Added	any previous version of the desktop apps: ynab 4, ynab 3, ynab pro, ynab basic (spreadsheet)	OTHER	Out of Scope	16:58
Added	https://support.ynab.com	URL	Out of Scope	16:58
Added	https://develop-app.ynab.com	URL	Out of Scope	16:58
Added	https://learn.ynab.com/	URL	Out of Scope	16:58
Added	https://www.ynab.com/	URL	In Scope	16:58
Added	https://app.ynab.com/	URL	Out of Scope	16:58
Added	any previous version of the desktop apps: ynab 4, ynab 3, ynab pro, ynab basic (spreadsheet)	OTHER	Out of Scope	16:58
Added	https://support.ynab.com	URL	Out of Scope	16:58
Added	https://develop-app.ynab.com	URL	Out of Scope	16:58
Added	https://learn.ynab.com/	URL	Out of Scope	16:58
Added	staging-app.bany.dev	URL	In Scope	16:58
Added	https://staging-api.bany.dev/	URL	In Scope	16:58