Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

alshaya

HackerOneView on HackerOne
RawAI Enhanced
166
In Scope
7
Out of Scope

In-Scope Assets (166)

AssetCategoryBountyQuick Links
*.ahwetzeitounakuwait.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.aloyoga.aeWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.aloyoga.com.kwWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.aloyoga.com.qaWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.alshaya.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.alshayaenterprises.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.americaneagle.aeWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.americaneagle.com.bhWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.americaneagle.com.egWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.americaneagle.com.joWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.americaneagle.com.kwWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.americaneagle.com.qaWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.americaneagle.com.saWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.amitinoura.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.aura-mena.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.babelkwt.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.bathandbodyworks.aeWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.bathandbodyworks.com.bhWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.bathandbodyworks.com.egWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.bathandbodyworks.com.kwWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.bathandbodyworks.com.qaWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.bathandbodyworks.com.saWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.bathandbodyworks.com.trWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.bathandbodyworks.joWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.bathandbodyworks.plWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.bathandbodyworks.roWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.bebabelkuwait.com/WILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.bouchonbakeryme.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.carrier.alshaya.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.debenhams.aeWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.debenhams.com.kwWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.debenhams.saWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.footlocker.aeWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.footlocker.com.bhWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.footlocker.com.egWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.footlocker.qaWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.kidzaniakuwait-tickets.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.lepainquotidienme.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.mothercare.aeWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.mothercare.com.egWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.mothercare.com.kwWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.mothercare.com.saWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.mothercare.qaWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.muji.aeWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.muji.bhWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.muji.com.kwWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.muji.com.saWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.muji.qaWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.payless.com.kwWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.paylessshoes.aeWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.pfchangsme.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.pinkberryme.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.pizzaexpresskw.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.potterybarn.aeWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.potterybarn.com.kwWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.potterybarn.com.saWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.potterybarnkids.aeWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.potterybarnkids.com.kwWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.potterybarnkids.com.saWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.raisingcanesme.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.shakeshack.co.ukWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.shaya.com.trWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.shayakahve.com.trWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.starbucks.azWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.starbucks.com.kzWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.starbucks.com.trWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.starbuckscardtr.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.supplier.alshaya.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.tamanna.comWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.tekzone.meWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.victoriassecret.aeWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.victoriassecret.com.kwWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.victoriassecret.com.qaWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.victoriassecret.com.saWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.victoriassecret.com.trWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.victoriassecret.plWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.visionexpress.meWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.westelm.aeWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.westelm.com.kwWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
*.westelm.com.saWILDCARDNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
6472633752IOSNo-
AE + Aerie Middle East_MENA_ANDROID_com.aeo.menaANDROIDNo-
AE + Aerie Middle East_MENA_IOS_1547602361IOSNo-
Alo GCC_GCC_ANDROID_com.aloyoga.menaANDROIDNo-
Alo GCC_GCC_IOS_1664702687IOSNo-
Aura MENA - Rewarding Loyalty_MENA_ANDRIOD_com.alshaya.auraANDROIDNo-
Aura MENA - Rewarding Loyalty_MENA_IOS_1532694353IOSNo-
Bath&BodyWorks_MENA_ANDROID_com.bbw.menaANDROIDNo
Play Store
Bath&BodyWorks_MENA_IOS_1541576878IOSNo-
Boots Middle East_MENA_IOS_1537064114IOSNo-
Debenhams MENA_MENA_IOS_1603834040IOSNo-
Foot Locker MENA_MENA_ANDROID_com.footlocker.menaANDROIDNo-
Foot Locker MENA_MENA_IOS_1563808574IOSNo-
H&M MENA - Shop Fashion Online_MENA_ANDROID_com.hm.menaANDROIDNo-
H&M MENA - Shop Fashion Online_MENA_IOS_1445040108IOSNo-
Mothercare MENA Baby/Kids Shop_MENA_IOS_1563370517IOSNo-
Mothercare MENA_MENA_ANDROID_com.mothercare.menaANDROIDNo-
Victoria's Secret MENA_MENA_ANDROID_com.vs.menaANDROIDNo-
Victoria's Secret MENA_MENA_IOS_1559906965IOSNo-
ae.boots.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
ae.charlottetilbury.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
ae.cos.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
ae.cosstores.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
ae.hm.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
ae.shopjustice.meURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
apps.havelockone.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
bakimonarim.shaya.com.trURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
bn.boots.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
boysweb.shaya.com.trURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
boyswebtest.shaya.com.trURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
card.starbucks.com.kzURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
ccareapuat.alshaya.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
cloud.havelockone.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
cloudconnect.havelockone.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
com.chipotle.menaANDROIDNo
Play Store
coms.carrier.alshaya.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
comsuat.carrier.alshaya.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
customercare.alshaya.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
dev.alshaya.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
devimages.alshaya.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
eg.hm.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
gtmsservice.alshaya.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
internaljobs.alshaya.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
jenkins.alshaya.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
jobsearch.alshaya.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
kuwait.kidzania.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
kw.boots.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
kw.charlottetilbury.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
kw.cos.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
kw.cosstores.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
kw.hm.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
kw.shopjustice.meURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
onlinepos.shaya.com.trURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
onlinestaffstore.alshaya.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
opsassistbrandedsolutions.shaya.com.trURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
parallels.havelockone.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
pmp.shaya.com.trURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
prodimages.alshaya.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
qa.charlottetilbury.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
qa.hm.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
qt.boots.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
sa.boots.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
sa.charlottetilbury.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
sa.cos.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
sa.cosstores.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
sa.hm.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
sa.shopjustice.meURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
sbuxopsassist.shaya.com.trURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
starbucks.azURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
suppliertraining.alshaya.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
victoriassecret.czURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
victoriassecret.ro/URLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
victoriassecretbeauty.roURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
vpn.shaya.com.trURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
www.ahwetzeitounakuwait.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
www.amitinoura.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
www.babelkwt.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
www.bebabelkuwait.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
www.bouchonbakeryme.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
www.havelockone.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
www.lepainquotidienme.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
www.pfchangsme.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
www.pinkberryme.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
www.pizzaexpresskw.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
www.raisingcanesme.comURLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
www.shayakahve.com.tr/URLNo
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotal
Out-of-Scope Assets (7)
AssetCategoryBounty
*.thebodyshop.com.bhWILDCARDNo
*.thebodyshop.com.kwWILDCARDNo
*.thebodyshop.com.trWILDCARDNo
*.thebodyshop.plWILDCARDNo
*.thebodyshop.qaWILDCARDNo
crm.alshayamarketing.comURLNo
thebodyshop.czURLNo