Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

justeattakeaway

BugcrowdView on Bugcrowd

RawAI Enhanced

In Scope

Out of Scope

In-Scope Assets (41)

Asset	Category	Bounty	Quick Links
https://10bis.co.il	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://api-payments-secure-prod.skippayments.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://api-skipthedishes.skipthedishes.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://api.justeat-int.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://apps.apple.com/it/developer/takeaway-com-central-core-b-v/id329472762	IOS	No	-
https://apps.apple.com/nz/developer/just-eat-com/id383091095	IOS	No	-
https://apps.apple.com/us/developer/10bis-co-il-ltd/id434368194	IOS	No	-
https://apps.apple.com/us/developer/skipthedishes/id969229980	IOS	No	-
https://aus.api.just-eat.io/	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://bistro.sk	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://cw-api.takeaway.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://github.com/justeattakeaway	OTHER	No	-
https://global-payments-web.payments.pmt-1.eu-west-1.production.jet-external.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://i18n.api.just-eat.io	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://jet-external.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://just-data.io	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://just-eat.ch	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://just-eat.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://just-eat.dk	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://just-eat.es	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://just-eat.io/	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://lieferando.de	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://menulog.com.au	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://play.google.com/store/apps/developer?id=10bis.co.il+ltd.	ANDROID	No	Play Store
https://play.google.com/store/apps/developer?id=Just-Eat+Holding+Limited	ANDROID	No	Play Store
https://play.google.com/store/apps/developer?id=Skip+Canada	ANDROID	No	Play Store
https://play.google.com/store/apps/developer?id=Takeaway.com	ANDROID	No	Play Store
https://pyszne.pl	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://rest.api.eu-central-1.production.jet-external.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://scoober.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://skippayments.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://skipthedishes.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://takeaway.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://takeaway.pay-creditcard.takeaway.com/	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://takeawaypay.azurefd.net/en/takeawaypay/	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://uk.api.just-eat.io	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://www.just-eat.co.uk	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://www.justeattakeaway.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://www.thuisbezorgd.nl/	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://yourdelivery.de	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
pay.{business_critical_assets} *see business assets for more information	URL	No	-

Out-of-Scope Assets (1)

Asset	Category	Bounty
*.business.just-eat.co.uk	URL	No