Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

cognition

HackerOneView on HackerOne
RawAI Enhanced
8
In Scope
0
Out of Scope
Scope Changes (28)
Jun 23, 2026
ChangeAssetCategoryScopeTime
Removedwindsurf pluginsOTHERIn Scope19:41
Removed*.devin.aiWILDCARDIn Scope19:41
Removeddeepwiki.comURLIn Scope19:41
Addeddevin desktopOTHERIn Scope19:41
Added*.windsurf.comWILDCARDIn Scope19:41
Added*.cognition.comWILDCARDIn Scope19:41
Added*.cognition.aiWILDCARDIn Scope19:41
Addeddevin cliBINARYIn Scope19:41
Removedhttp://windsurf.comURLIn Scope19:41
Removedcognition.aiURLIn Scope19:41
Removedwindsurf ideOTHERIn Scope19:41
Addeddevin desktopOTHERIn Scope19:41
Added*.windsurf.comWILDCARDIn Scope19:41
Added*.cognition.comWILDCARDIn Scope19:41
Added*.cognition.aiWILDCARDIn Scope19:41
Addeddevin cliBINARYIn Scope19:41
May 26, 2026
ChangeAssetCategoryScopeTime
Addedwindsurf ideOTHERIn Scope14:28
Addedwindsurf pluginsOTHERIn Scope14:28
Addedhttp://windsurf.comURLIn Scope14:28
Addedcognition.aiURLIn Scope14:28
Added*.devin.aiWILDCARDIn Scope14:28
Addeddeepwiki.comURLIn Scope14:28
Addedwindsurf ideOTHERIn Scope14:28
Addedwindsurf pluginsOTHERIn Scope14:28
Addedhttp://windsurf.comURLIn Scope14:28
Addedcognition.aiURLIn Scope14:28
Added*.devin.aiWILDCARDIn Scope14:28
Addeddeepwiki.comURLIn Scope14:28