Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
lastpass
13
In Scope
4
Out of Scope
In-Scope Assets (13)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| Workstation MFA (WMFA) | OTHER | No | - | |
| https://accounts.lastpass.com | URL | No | ||
| https://admin.lastpass.com | URL | No | ||
| https://apps.apple.com/us/app/lastpass-authenticator/id1079110004 | IOS | No | - | |
| https://apps.apple.com/us/app/lastpass-password-manager/id324613447 | IOS | No | - | |
| https://auth.lastpass.com | URL | No | ||
| https://blog.lastpass.com | URL | No | ||
| https://lastpass.com | URL | No | ||
| https://lastpass.com/misc_download2.php | OTHER | No | - | |
| https://play.google.com/store/apps/details?id=com.lastpass.authenticator&hl=en_US&gl=US | ANDROID | No | ||
| https://play.google.com/store/apps/details?id=com.lastpass.lpandroid | ANDROID | No | ||
| https://support.lastpass.com | URL | No | ||
| https://www.lastpass.com | URL | No |
Out-of-Scope Assets (4)
| Asset | Category | Bounty | |
|---|---|---|---|
| Lastpass CLI tool | OTHER | No | |
| https://forums.lastpass.com | URL | No | |
| https://identity.lastpass.com | URL | No | |
| https://info.lastpass.com | URL | No |