Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
disney
17
In Scope
11
Out of Scope
In-Scope Assets (17)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| Disney Corporate | OTHER | No | - | |
| MyID Pre-auth Bypass | OTHER | No | - | |
| Valid Disney Retiree Credential | OTHER | No | - | |
| abcspotdepot.com | URL | No | ||
| com.espn.score_center | ANDROID | No | ||
| disneyauditions.com | URL | No | ||
| disneyland.disney.go.com | URL | No | ||
| disneyplus.link | URL | No | ||
| disneytravelagents.com | URL | No | ||
| disneyvacationclub.disney.go.com | URL | No | ||
| dvc-lightcycle-api.wdprapps.disney.com | URL | No | ||
| espn.com | URL | No | ||
| id317469184 | IOS | No | - | |
| shanghaidisneyresort.com.cn | URL | No | ||
| www.magicalphotos.cn | URL | No | ||
| www.shanghaidisneyresort.com | URL | No | ||
| www.shanghaidisneyresort.com.cn | URL | No |
Out-of-Scope Assets (11)
| Asset | Category | Bounty | |
|---|---|---|---|
| dolimg.com | URL | No | |
| dwss-ptp.disney.com | URL | No | |
| espnbet.com | URL | No | |
| hotstar.com | URL | No | |
| kingdomhearts.com | URL | No | |
| magicalfloralandgifts.com | URL | No | |
| star.com | URL | No | |
| tokyodisneyresort.jp | URL | No | |
| unclaimedproperty.disney.com | URL | No | |
| www.enchantedfinejewelry.com | URL | No | |
| www.waltdisney.org | URL | No |
Scope Changes (84)
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | espn.com | URL | In Scope | 19:15 |
| Added | shanghaidisneyresort.com.cn | URL | In Scope | 19:15 |
| Added | kingdomhearts.com | URL | Out of Scope | 19:15 |
| Added | hotstar.com | URL | Out of Scope | 19:15 |
| Added | star.com | URL | Out of Scope | 19:15 |
| Added | www.waltdisney.org | URL | Out of Scope | 19:15 |
| Added | valid disney retiree credential | OTHER | In Scope | 19:15 |
| Added | unclaimedproperty.disney.com | URL | Out of Scope | 19:15 |
| Added | www.magicalphotos.cn | URL | In Scope | 19:15 |
| Added | disneytravelagents.com | URL | In Scope | 19:15 |
| Added | disney corporate | OTHER | In Scope | 19:15 |
| Added | disneyplus.link | URL | In Scope | 19:15 |
| Added | com.espn.score_center | ANDROID | In Scope | 19:15 |
| Added | dolimg.com | URL | Out of Scope | 19:15 |
| Added | dwss-ptp.disney.com | URL | Out of Scope | 19:15 |
| Added | tokyodisneyresort.jp | URL | Out of Scope | 19:15 |
| Added | abcspotdepot.com | URL | In Scope | 19:15 |
| Added | disneyauditions.com | URL | In Scope | 19:15 |
| Added | disneyland.disney.go.com | URL | In Scope | 19:15 |
| Added | disneyvacationclub.disney.go.com | URL | In Scope | 19:15 |
| Added | id317469184 | IOS | In Scope | 19:15 |
| Added | myid pre-auth bypass | OTHER | In Scope | 19:15 |
| Added | magicalfloralandgifts.com | URL | Out of Scope | 19:15 |
| Added | www.enchantedfinejewelry.com | URL | Out of Scope | 19:15 |
| Added | dvc-lightcycle-api.wdprapps.disney.com | URL | In Scope | 19:15 |
| Added | www.shanghaidisneyresort.com | URL | In Scope | 19:15 |
| Added | www.shanghaidisneyresort.com.cn | URL | In Scope | 19:15 |
| Added | espnbet.com | URL | Out of Scope | 19:15 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | espn.com | URL | In Scope | 00:44 |
| Added | com.espn.score_center | ANDROID | In Scope | 00:44 |
| Added | myid pre-auth bypass | OTHER | In Scope | 00:44 |
| Added | dwss-ptp.disney.com | URL | Out of Scope | 00:44 |
| Added | abcspotdepot.com | URL | In Scope | 00:44 |
| Added | disneytravelagents.com | URL | In Scope | 00:44 |
| Added | disneyland.disney.go.com | URL | In Scope | 00:44 |
| Added | id317469184 | IOS | In Scope | 00:44 |
| Added | dolimg.com | URL | Out of Scope | 00:44 |
| Added | www.enchantedfinejewelry.com | URL | Out of Scope | 00:44 |
| Added | hotstar.com | URL | Out of Scope | 00:44 |
| Added | star.com | URL | Out of Scope | 00:44 |
| Added | dvc-lightcycle-api.wdprapps.disney.com | URL | In Scope | 00:44 |
| Added | disneyvacationclub.disney.go.com | URL | In Scope | 00:44 |
| Added | valid disney retiree credential | OTHER | In Scope | 00:44 |
| Added | magicalfloralandgifts.com | URL | Out of Scope | 00:44 |
| Added | kingdomhearts.com | URL | Out of Scope | 00:44 |
| Added | www.shanghaidisneyresort.com.cn | URL | In Scope | 00:44 |
| Added | disneyauditions.com | URL | In Scope | 00:44 |
| Added | disney corporate | OTHER | In Scope | 00:44 |
| Added | tokyodisneyresort.jp | URL | Out of Scope | 00:44 |
| Added | espnbet.com | URL | Out of Scope | 00:44 |
| Added | unclaimedproperty.disney.com | URL | Out of Scope | 00:44 |
| Added | www.waltdisney.org | URL | Out of Scope | 00:44 |
| Added | www.magicalphotos.cn | URL | In Scope | 00:44 |
| Added | www.shanghaidisneyresort.com | URL | In Scope | 00:44 |
| Added | disneyplus.link | URL | In Scope | 00:44 |
| Added | shanghaidisneyresort.com.cn | URL | In Scope | 00:44 |
Feb 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | dvc-lightcycle-api.wdprapps.disney.com | URL | In Scope | 19:12 |
| Added | abcspotdepot.com | URL | In Scope | 19:12 |
| Added | www.magicalphotos.cn | URL | In Scope | 19:12 |
| Added | www.shanghaidisneyresort.com | URL | In Scope | 19:12 |
| Added | www.shanghaidisneyresort.com.cn | URL | In Scope | 19:12 |
| Added | disneyauditions.com | URL | In Scope | 19:12 |
| Added | disneytravelagents.com | URL | In Scope | 19:12 |
| Added | disneyland.disney.go.com | URL | In Scope | 19:12 |
| Added | disney corporate | OTHER | In Scope | 19:12 |
| Added | disneyplus.link | URL | In Scope | 19:12 |
| Added | disneyvacationclub.disney.go.com | URL | In Scope | 19:12 |
| Added | shanghaidisneyresort.com.cn | URL | In Scope | 19:12 |
| Added | espn.com | URL | In Scope | 19:12 |
| Added | com.espn.score_center | ANDROID | In Scope | 19:12 |
| Added | id317469184 | IOS | In Scope | 19:12 |
| Added | myid pre-auth bypass | OTHER | In Scope | 19:12 |
| Added | valid disney retiree credential | OTHER | In Scope | 19:12 |
| Added | dolimg.com | URL | Out of Scope | 19:12 |
| Added | dwss-ptp.disney.com | URL | Out of Scope | 19:12 |
| Added | tokyodisneyresort.jp | URL | Out of Scope | 19:12 |
| Added | magicalfloralandgifts.com | URL | Out of Scope | 19:12 |
| Added | www.enchantedfinejewelry.com | URL | Out of Scope | 19:12 |
| Added | espnbet.com | URL | Out of Scope | 19:12 |
| Added | kingdomhearts.com | URL | Out of Scope | 19:12 |
| Added | hotstar.com | URL | Out of Scope | 19:12 |
| Added | star.com | URL | Out of Scope | 19:12 |
| Added | unclaimedproperty.disney.com | URL | Out of Scope | 19:12 |
| Added | www.waltdisney.org | URL | Out of Scope | 19:12 |