Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

blackrock

HackerOneView on HackerOne
RawAI Enhanced
4
In Scope
0
Out of Scope
Scope Changes (12)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Added*.ishares.comWILDCARDIn Scope19:12
Added69.52.0.0/16CIDRIn Scope19:12
Added*.isharesonline.comWILDCARDIn Scope19:12
Added*.blackrock.comWILDCARDIn Scope19:12
Feb 22, 2026
ChangeAssetCategoryScopeTime
Added*.blackrock.comWILDCARDIn Scope00:42
Added*.ishares.comWILDCARDIn Scope00:42
Added69.52.0.0/16CIDRIn Scope00:42
Added*.isharesonline.comWILDCARDIn Scope00:42
Feb 21, 2026
ChangeAssetCategoryScopeTime
Added*.blackrock.comURLIn Scope19:12
Added*.ishares.comURLIn Scope19:12
Added69.52.0.0/16CIDRIn Scope19:12
Added*.isharesonline.comOTHERIn Scope19:12