Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

mastercard

BugcrowdView on Bugcrowd

RawAI Enhanced

In Scope

Out of Scope

In-Scope Assets (22)

Asset	Category	Bounty	Quick Links
Finicity - OBB (Open Banking Business Service)	URL	No	-
Finicity Connect	URL	No	-
Finicity Decisioning	URL	No	-
Finicity- Data Services	URL	No	-
Finicity- Open Banking Payment History application	URL	No	-
Public Others Target	OTHER	No	-
SRC integration on https://masterpassteststore.com/. Only the Masterpass checkout functionality is in scope	URL	No	-
https://consumer.finicityreports.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://demo.priceless.com/	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://developer.mastercard.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://donate.mastercard.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://performancemarketing.mastercard.com/portal/	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://pioneer.truata.com/	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://priceless.com/golf/	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://src.mastercard.com/*	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://src.mastercard.com/profile/enroll	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://www.finicity.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://www.mastercard.ch/de-ch.html	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://www.mastercard.ch/fr-ch.html	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://www.mastercard.com.au/en-au.html	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://www.mastercard.nl/nl-nl.html	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://www.mastercard.us/en-us.html	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal