Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
twentyminuten
7
In Scope
16
Out of Scope
In-Scope Assets (7)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| https://api.20min.ch/ | URL | No | ||
| https://audio.20min.ch/ | URL | No | ||
| https://coral.20min.ch/ | URL | No | ||
| https://partner-feeds.20min.ch | URL | No | ||
| https://screenplayer.20min.ch | URL | No | ||
| https://videoplayer.20min.ch | URL | No | ||
| https://www.20min.ch | URL | No |
Out-of-Scope Assets (16)
| Asset | Category | Bounty | |
|---|---|---|---|
| *.20min-tv.ch | URL | No | |
| *.appuser.ch | URL | No | |
| *.iagentur.ch | URL | No | |
| *.newsnetz.tv | URL | No | |
| *.onelog.ch | URL | No | |
| *.streamboat.ch | URL | No | |
| *.streamboatserver.ch | URL | No | |
| DMARC, SPF, DKIM | OTHER | No | |
| Other Domains and Subdomains not specifically in scope | OTHER | No | |
| Social Media Links (older than 2 years) | URL | No | |
| Subdomain Takeover | OTHER | No | |
| http://auth.20min.ch | URL | No | |
| https://*.connect.ringier.ch | URL | No | |
| https://cre-api.tamedia.ch | URL | No | |
| https://tgt.tamedia.ch | URL | No | |
| https://track.20min.ch | URL | No |