Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
twilio
24
In Scope
31
Out of Scope
In-Scope Assets (24)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.sip.*.twilio.com | OTHER | No | - | |
| Any host/web property verified to be owned by Twilio et al. | URL | No | - | |
| Twilio APIs | URL | No | - | |
| Twilio CDNs (static*.twilio.com) | OTHER | No | - | |
| https://api.segment.io/ | URL | No | ||
| https://api.sendgrid.com | URL | No | ||
| https://api.twilio.com | URL | No | ||
| https://app.segment.com/ | URL | No | ||
| https://app.sendgrid.com/ | URL | No | ||
| https://authy.com/download/ | ANDROID | No | - | |
| https://authy.com/download/ | IOS | No | - | |
| https://help.twilio.com | URL | No | ||
| https://mc.sendgrid.com/ | URL | No | ||
| https://segment.com/docs/sources/ | OTHER | No | - | |
| https://sendgrid.com | URL | No | ||
| https://signup.sendgrid.com/ | URL | No | ||
| https://tsock.us1.twilio.com | OTHER | No | - | |
| https://twilio.com/blog | URL | No | ||
| https://www.twilio.com/blog/get-started-webrtc | OTHER | No | - | |
| https://www.twilio.com/console | URL | No | ||
| https://www.twilio.com/docs/authy/api | URL | No | ||
| https://www.twilio.com/docs/libraries | OTHER | No | - | |
| https://www.twilio.com/docs/verify/api | URL | No | ||
| smtp.sendgrid.net | OTHER | No | - |
Out-of-Scope Assets (31)
| Asset | Category | Bounty | |
|---|---|---|---|
| All Kurento domains | URL | No | |
| All Twilio acquisitions until explicitly noted under the in-scope targets | OTHER | No | |
| Demo websites e.g. lab.authy.com | URL | No | |
| Electric Imp and its assets | OTHER | No | |
| Third-party services | OTHER | No | |
| Twilio Quest | OTHER | No | |
| Twilio Wireless | OTHER | No | |
| TwimlBins | OTHER | No | |
| Ytica and its assets | URL | No | |
| apjevents.twilio.com | URL | No | |
| community.segment.com | URL | No | |
| events.cdpweek.com | URL | No | |
| segment.com/contact | URL | No | |
| segment.com/jobs | URL | No | |
| signal.twilio.com | URL | No | |
| status.segment.com | URL | No | |
| status.sendgrid.com | URL | No | |
| status.twilio.com | URL | No | |
| store.twilio.com | URL | No | |
| support.sendgrid.com | URL | No | |
| support.twilio.com | URL | No | |
| surveys.twilio.com | URL | No | |
| talks.twilio.com | URL | No | |
| transform.twilio.com | URL | No | |
| twil.io | URL | No | |
| twilio.com/en-us/company/jobs | URL | No | |
| twilio.com/labs | URL | No | |
| twiliotraining.com | URL | No | |
| webinars.segment.com | URL | No | |
| webinars.twilio.com | URL | No | |
| zipwhip.com | URL | No |