Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
trello
13
In Scope
4
Out of Scope
In-Scope Assets (13)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.trello.services | URL | No | ||
| Trello Desktop Client | OTHER | No | - | |
| Trello Mobile App for Android | ANDROID | No | - | |
| Trello Mobile App for iOS | IOS | No | - | |
| Trello Third Party Powerups | URL | No | - | |
| api.trello.com | URL | No | ||
| https://butlerfortrello.com/ | URL | No | ||
| https://trello.com/power-ups/55a5d917446f517774210011/calendar-power-up | URL | No | ||
| https://trello.com/power-ups/55a5d917446f517774210012/card-aging | URL | No | ||
| https://trello.com/power-ups/55a5d917446f517774210013/voting | URL | No | ||
| https://trello.com/power-ups/5c2462c384ab8949b1724a20/list-limits | URL | No | ||
| https://trello.com/power-ups/6052d130068a8c0de7b022b4 | URL | No | ||
| trello.com | URL | No |
Out-of-Scope Assets (4)
| Asset | Category | Bounty | |
|---|---|---|---|
| e.trello.com | URL | No | |
| help.trello.com | URL | No | |
| http://bugcrowd.com/atlassianapps | URL | No | |
| trello-attachments.s3.amazonaws.com | URL | No |