Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
capital-one
27
In Scope
16
Out of Scope
In-Scope Assets (27)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.bluetarp.com | URL | No | ||
| *.capitalone.ca | URL | No | ||
| *.capitalone.co.uk | URL | No | ||
| *.capitalone.com | URL | No | ||
| *.capitaloneshopping.com | URL | No | ||
| *.luma.co.uk | URL | No | ||
| *.teamstercardnow.com | URL | No | ||
| *.theunioncard.com | URL | No | ||
| *.wikibuy.com | URL | No | ||
| 1008234539 | IOS | No | - | |
| 1109537081 | IOS | No | - | |
| 1291519134 | IOS | No | - | |
| 1380744689 | IOS | No | - | |
| 1450441660 | IOS | No | - | |
| 407558537 | IOS | No | - | |
| 481679012 | IOS | No | - | |
| 808215470 | IOS | No | - | |
| 907613256 | IOS | No | - | |
| Eno® Browser Extension | OTHER | No | - | |
| ca.capitalone.enterprisemobilebanking | ANDROID | No | ||
| com.capitalone.atwork | ANDROID | No | ||
| com.capitalone.credittracker | ANDROID | No | ||
| com.capitalone.intellix.mobile.prod | ANDROID | No | ||
| com.capitalone.tz | ANDROID | No | ||
| com.ie.capitalone.uk | ANDROID | No | ||
| com.konylabs.capitalone | ANDROID | No | ||
| com.ukcapitalone.creditWise | ANDROID | No |
Out-of-Scope Assets (16)
| Asset | Category | Bounty | |
|---|---|---|---|
| *.criticalstack.com | URL | No | |
| *.intelstack.com | URL | No | |
| *.unitedincome.com | URL | No | |
| 414607046 | IOS | No | |
| asos-idcheck.capitalone.co.uk | URL | No | |
| com.yinzcam.facilities.verizon | ANDROID | No | |
| idcheck.capitalone.co.uk | URL | No | |
| jamfproqa.capitalone.com | URL | No | |
| littlewoods-idcheck.capitalone.co.uk | URL | No | |
| luma-idcheck.capitalone.co.uk | URL | No | |
| ocean-idcheck.capitalone.co.uk | URL | No | |
| postoffice-idcheck.capitalone.co.uk | URL | No | |
| thinkmoney-idcheck.capitalone.co.uk | URL | No | |
| travel-qa.capitalone.com | URL | No | |
| travel.capitalone.com | URL | No | |
| very-idcheck.capitalone.co.uk | URL | No |