Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
fidelity
20
In Scope
50
Out of Scope
In-Scope Assets (20)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.advisorchannel.com | WILDCARD | No | ||
| *.fidelity.com | URL | No | ||
| *.mystreetscape.com | WILDCARD | No | ||
| *.streetscape.com | WILDCARD | No | ||
| *.wealthscape.com | WILDCARD | No | ||
| com.fidelity.android | ANDROID | No | ||
| com.fidelity.hcg.health | IOS | No | - | |
| com.fidelity.hcg.health | ANDROID | No | ||
| com.fidelity.nbmobile | IOS | No | - | |
| com.fidelity.sqrl | IOS | No | - | |
| com.fidelity.sqrl | ANDROID | No | ||
| com.fidelity.watchlist | IOS | No | - | |
| com.fidelity.wi.activity | ANDROID | No | ||
| com.fmr.eca.android.wealthscape | ANDROID | No | ||
| com.fmr.eca.android.wealthscapeinvestor | ANDROID | No | ||
| mobi.wealthscape | IOS | No | - | |
| mobi.wealthscapeinvestor | IOS | No | - | |
| web.fidsafe.com | URL | No | ||
| www.fidelityprivateshares.com | URL | No | ||
| www.fidsafe.com | URL | No |
Out-of-Scope Assets (50)
Scope Changes (207)
Jun 11, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | communications.clearingcustody.fidelity.com | URL | Out of Scope | 18:27 |
| Added | fams.fidelity.com | URL | Out of Scope | 18:27 |
| Added | fams-qa.fidelity.com | URL | Out of Scope | 18:27 |
| Added | fams.fidelity.com | URL | Out of Scope | 18:27 |
| Added | fams-qa.fidelity.com | URL | Out of Scope | 18:27 |
| Added | communications.clearingcustody.fidelity.com | URL | Out of Scope | 18:27 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | corporatearchives.fidelity.com | URL | Out of Scope | 19:16 |
| Added | com.fidelity.sqrl | ANDROID | In Scope | 19:16 |
| Added | *.fidelity.com | WILDCARD | In Scope | 19:16 |
| Added | fcone.fidelity.com | URL | Out of Scope | 19:16 |
| Added | fidtwcms.fidelity.com | URL | Out of Scope | 19:16 |
| Added | china.fidelity.com | URL | Out of Scope | 19:16 |
| Added | testjobs.fidelity.com | URL | Out of Scope | 19:16 |
| Added | boundless.fidelity.com | URL | Out of Scope | 19:16 |
| Added | reviews.retail.fidelity.com | URL | Out of Scope | 19:16 |
| Added | alertstreaming.fidelity.com | URL | Out of Scope | 19:16 |
| Added | alertstreaming.streetscape.com | URL | Out of Scope | 19:16 |
| Added | labs.fidelity.com | URL | Out of Scope | 19:16 |
| Added | reviews.fidelity.com | URL | Out of Scope | 19:16 |
| Added | newsroom.fidelity.com | URL | Out of Scope | 19:16 |
| Added | talentcommunity.fidelity.com | URL | Out of Scope | 19:16 |
| Added | com.fidelity.sqrl | IOS | In Scope | 19:16 |
| Added | mobi.wealthscape | IOS | In Scope | 19:16 |
| Added | web.fidsafe.com | URL | In Scope | 19:16 |
| Added | www.fidsafe.com | URL | In Scope | 19:16 |
| Added | advisorlearning.fidelity.com | URL | Out of Scope | 19:16 |
| Added | www.boundless.fidelity.com | URL | Out of Scope | 19:16 |
| Added | dmtfi.fidelity.com | URL | Out of Scope | 19:16 |
| Added | activate.fidelity.com | URL | Out of Scope | 19:16 |
| Added | fctms.fidelity.com | URL | Out of Scope | 19:16 |
| Added | *.streetscape.com | WILDCARD | In Scope | 19:16 |
| Added | activate1.fidelity.com | URL | Out of Scope | 19:16 |
| Added | https://api-test.fidelity.com/brokerage-account-checking-stop-payment/v1 | URL | Out of Scope | 19:16 |
| Added | supplier.fidelity.com | URL | Out of Scope | 19:16 |
| Added | metrics.fidelity.com | URL | Out of Scope | 19:16 |
| Added | www.jobs.fidelity.com | URL | Out of Scope | 19:16 |
| Added | www.india.fidelity.com | URL | Out of Scope | 19:16 |
| Added | social.fidelity.com | URL | Out of Scope | 19:16 |
| Added | *.wealthscape.com | WILDCARD | In Scope | 19:16 |
| Added | com.fmr.eca.android.wealthscape | ANDROID | In Scope | 19:16 |
| Added | mobi.wealthscapeinvestor | IOS | In Scope | 19:16 |
| Added | alumni.fidelity.com | URL | Out of Scope | 19:16 |
| Added | research2.fidelity.com | URL | Out of Scope | 19:16 |
| Added | taxseason.fidelity.com | URL | Out of Scope | 19:16 |
| Added | com.fidelity.hcg.health | IOS | In Scope | 19:16 |
| Added | com.fidelity.nbmobile | IOS | In Scope | 19:16 |
| Added | https://api.fidelity.com/brokerage-account-checking-stop-payment/v1 | URL | Out of Scope | 19:16 |
| Added | fidelitydigitalassets.fidelity.com | URL | Out of Scope | 19:16 |
| Added | *.advisorchannel.com | WILDCARD | In Scope | 19:16 |
| Added | https://api.fidelity.com/brokerage-debit-card-order/v1 | URL | Out of Scope | 19:16 |
| Added | alertmanagerams.streetscape.com | URL | Out of Scope | 19:16 |
| Added | social.retail.fidelity.com | URL | Out of Scope | 19:16 |
| Added | com.fidelity.hcg.health | ANDROID | In Scope | 19:16 |
| Added | forextrader.fidelity.com | URL | Out of Scope | 19:16 |
| Added | event.fidelity.com | URL | Out of Scope | 19:16 |
| Added | https://api-stage.fidelity.com/brokerage-debit-card-order/v1 | URL | Out of Scope | 19:16 |
| Added | about.fidelity.com | URL | Out of Scope | 19:16 |
| Added | esgpro.fidelity.com | URL | Out of Scope | 19:16 |
| Added | *.mystreetscape.com | WILDCARD | In Scope | 19:16 |
| Added | com.fmr.eca.android.wealthscapeinvestor | ANDROID | In Scope | 19:16 |
| Added | com.fidelity.wi.activity | ANDROID | In Scope | 19:16 |
| Added | jobs.fidelity.com | URL | Out of Scope | 19:16 |
| Added | www.fidelityworkplace.com | URL | Out of Scope | 19:16 |
| Added | sitecatalyst.fidelity.com | URL | Out of Scope | 19:16 |
| Added | com.fidelity.watchlist | IOS | In Scope | 19:16 |
| Added | com.fidelity.android | ANDROID | In Scope | 19:16 |
| Added | www.fidelityprivateshares.com | URL | In Scope | 19:16 |
| Added | www.myfidelitysolutions.com | URL | Out of Scope | 19:16 |
| Added | fundresearch.fidelity.com | URL | Out of Scope | 19:16 |
| Added | dmt.fidelity.com | URL | Out of Scope | 19:16 |
| Added | buildnow.fidelity.com | URL | Out of Scope | 19:16 |
| Added | investwithpurpose.fidelity.com | URL | Out of Scope | 19:16 |
| Added | india.fidelity.com | URL | Out of Scope | 19:16 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | fidelitydigitalassets.fidelity.com | URL | Out of Scope | 00:45 |
| Added | *.mystreetscape.com | WILDCARD | In Scope | 00:45 |
| Added | com.fmr.eca.android.wealthscapeinvestor | ANDROID | In Scope | 00:45 |
| Added | www.fidelityprivateshares.com | URL | In Scope | 00:45 |
| Added | taxseason.fidelity.com | URL | Out of Scope | 00:45 |
| Added | newsroom.fidelity.com | URL | Out of Scope | 00:45 |
| Added | com.fidelity.wi.activity | ANDROID | In Scope | 00:45 |
| Added | com.fidelity.nbmobile | IOS | In Scope | 00:45 |
| Added | mobi.wealthscape | IOS | In Scope | 00:45 |
| Added | jobs.fidelity.com | URL | Out of Scope | 00:45 |
| Added | buildnow.fidelity.com | URL | Out of Scope | 00:45 |
| Added | boundless.fidelity.com | URL | Out of Scope | 00:45 |
| Added | com.fidelity.watchlist | IOS | In Scope | 00:45 |
| Added | https://api-test.fidelity.com/brokerage-account-checking-stop-payment/v1 | URL | Out of Scope | 00:45 |
| Added | social.fidelity.com | URL | Out of Scope | 00:45 |
| Added | web.fidsafe.com | URL | In Scope | 00:45 |
| Added | *.advisorchannel.com | WILDCARD | In Scope | 00:45 |
| Added | dmt.fidelity.com | URL | Out of Scope | 00:45 |
| Added | fcone.fidelity.com | URL | Out of Scope | 00:45 |
| Added | fidtwcms.fidelity.com | URL | Out of Scope | 00:45 |
| Added | activate.fidelity.com | URL | Out of Scope | 00:45 |
| Added | alertstreaming.fidelity.com | URL | Out of Scope | 00:45 |
| Added | sitecatalyst.fidelity.com | URL | Out of Scope | 00:45 |
| Added | www.fidsafe.com | URL | In Scope | 00:45 |
| Added | com.fidelity.hcg.health | IOS | In Scope | 00:45 |
| Added | https://api.fidelity.com/brokerage-debit-card-order/v1 | URL | Out of Scope | 00:45 |
| Added | www.india.fidelity.com | URL | Out of Scope | 00:45 |
| Added | reviews.fidelity.com | URL | Out of Scope | 00:45 |
| Added | *.wealthscape.com | WILDCARD | In Scope | 00:45 |
| Added | com.fmr.eca.android.wealthscape | ANDROID | In Scope | 00:45 |
| Added | www.fidelityworkplace.com | URL | Out of Scope | 00:45 |
| Added | esgpro.fidelity.com | URL | Out of Scope | 00:45 |
| Added | china.fidelity.com | URL | Out of Scope | 00:45 |
| Added | www.boundless.fidelity.com | URL | Out of Scope | 00:45 |
| Added | www.jobs.fidelity.com | URL | Out of Scope | 00:45 |
| Added | talentcommunity.fidelity.com | URL | Out of Scope | 00:45 |
| Added | activate1.fidelity.com | URL | Out of Scope | 00:45 |
| Added | metrics.fidelity.com | URL | Out of Scope | 00:45 |
| Added | testjobs.fidelity.com | URL | Out of Scope | 00:45 |
| Added | com.fidelity.android | ANDROID | In Scope | 00:45 |
| Added | com.fidelity.sqrl | ANDROID | In Scope | 00:45 |
| Added | event.fidelity.com | URL | Out of Scope | 00:45 |
| Added | fctms.fidelity.com | URL | Out of Scope | 00:45 |
| Added | research2.fidelity.com | URL | Out of Scope | 00:45 |
| Added | com.fidelity.sqrl | IOS | In Scope | 00:45 |
| Added | advisorlearning.fidelity.com | URL | Out of Scope | 00:45 |
| Added | corporatearchives.fidelity.com | URL | Out of Scope | 00:45 |
| Added | india.fidelity.com | URL | Out of Scope | 00:45 |
| Added | *.fidelity.com | WILDCARD | In Scope | 00:45 |
| Added | www.myfidelitysolutions.com | URL | Out of Scope | 00:45 |
| Added | alertstreaming.streetscape.com | URL | Out of Scope | 00:45 |
| Added | forextrader.fidelity.com | URL | Out of Scope | 00:45 |
| Added | social.retail.fidelity.com | URL | Out of Scope | 00:45 |
| Added | reviews.retail.fidelity.com | URL | Out of Scope | 00:45 |
| Added | com.fidelity.hcg.health | ANDROID | In Scope | 00:45 |
| Added | dmtfi.fidelity.com | URL | Out of Scope | 00:45 |
| Added | https://api-stage.fidelity.com/brokerage-debit-card-order/v1 | URL | Out of Scope | 00:45 |
| Added | supplier.fidelity.com | URL | Out of Scope | 00:45 |
| Added | about.fidelity.com | URL | Out of Scope | 00:45 |
| Added | mobi.wealthscapeinvestor | IOS | In Scope | 00:45 |
| Added | *.streetscape.com | WILDCARD | In Scope | 00:45 |
| Added | https://api.fidelity.com/brokerage-account-checking-stop-payment/v1 | URL | Out of Scope | 00:45 |
| Added | labs.fidelity.com | URL | Out of Scope | 00:45 |
| Added | investwithpurpose.fidelity.com | URL | Out of Scope | 00:45 |
| Added | fundresearch.fidelity.com | URL | Out of Scope | 00:45 |
| Added | alertmanagerams.streetscape.com | URL | Out of Scope | 00:45 |
| Added | alumni.fidelity.com | URL | Out of Scope | 00:45 |
Feb 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *.streetscape.com | WILDCARD | In Scope | 19:12 |
| Added | *.advisorchannel.com | WILDCARD | In Scope | 19:12 |
| Added | *.mystreetscape.com | WILDCARD | In Scope | 19:12 |
| Added | *.wealthscape.com | WILDCARD | In Scope | 19:12 |
| Added | com.fidelity.watchlist | IOS | In Scope | 19:12 |
| Added | com.fidelity.sqrl | IOS | In Scope | 19:12 |
| Added | com.fidelity.android | ANDROID | In Scope | 19:12 |
| Added | com.fidelity.sqrl | ANDROID | In Scope | 19:12 |
| Added | com.fmr.eca.android.wealthscape | ANDROID | In Scope | 19:12 |
| Added | com.fmr.eca.android.wealthscapeinvestor | ANDROID | In Scope | 19:12 |
| Added | mobi.wealthscape | IOS | In Scope | 19:12 |
| Added | mobi.wealthscapeinvestor | IOS | In Scope | 19:12 |
| Added | web.fidsafe.com | URL | In Scope | 19:12 |
| Added | www.fidsafe.com | URL | In Scope | 19:12 |
| Added | com.fidelity.hcg.health | ANDROID | In Scope | 19:12 |
| Added | com.fidelity.wi.activity | ANDROID | In Scope | 19:12 |
| Added | com.fidelity.hcg.health | IOS | In Scope | 19:12 |
| Added | com.fidelity.nbmobile | IOS | In Scope | 19:12 |
| Added | *.fidelity.com | URL | In Scope | 19:12 |
| Added | www.fidelityprivateshares.com | URL | In Scope | 19:12 |
| Added | jobs.fidelity.com | URL | Out of Scope | 19:12 |
| Added | activate1.fidelity.com | URL | Out of Scope | 19:12 |
| Added | event.fidelity.com | URL | Out of Scope | 19:12 |
| Added | www.fidelityworkplace.com | URL | Out of Scope | 19:12 |
| Added | www.myfidelitysolutions.com | URL | Out of Scope | 19:12 |
| Added | activate.fidelity.com | URL | Out of Scope | 19:12 |
| Added | dmt.fidelity.com | URL | Out of Scope | 19:12 |
| Added | dmtfi.fidelity.com | URL | Out of Scope | 19:12 |
| Added | alertstreaming.fidelity.com | URL | Out of Scope | 19:12 |
| Added | https://api-stage.fidelity.com/brokerage-debit-card-order/v1 | URL | Out of Scope | 19:12 |
| Added | https://api-test.fidelity.com/brokerage-account-checking-stop-payment/v1 | URL | Out of Scope | 19:12 |
| Added | https://api.fidelity.com/brokerage-account-checking-stop-payment/v1 | URL | Out of Scope | 19:12 |
| Added | https://api.fidelity.com/brokerage-debit-card-order/v1 | URL | Out of Scope | 19:12 |
| Added | alertmanagerams.streetscape.com | URL | Out of Scope | 19:12 |
| Added | alertstreaming.streetscape.com | URL | Out of Scope | 19:12 |
| Added | metrics.fidelity.com | URL | Out of Scope | 19:12 |
| Added | fcone.fidelity.com | URL | Out of Scope | 19:12 |
| Added | fctms.fidelity.com | URL | Out of Scope | 19:12 |
| Added | alumni.fidelity.com | URL | Out of Scope | 19:12 |
| Added | research2.fidelity.com | URL | Out of Scope | 19:12 |
| Added | esgpro.fidelity.com | URL | Out of Scope | 19:12 |
| Added | supplier.fidelity.com | URL | Out of Scope | 19:12 |
| Added | about.fidelity.com | URL | Out of Scope | 19:12 |
| Added | fidtwcms.fidelity.com | URL | Out of Scope | 19:12 |
| Added | advisorlearning.fidelity.com | URL | Out of Scope | 19:12 |
| Added | labs.fidelity.com | URL | Out of Scope | 19:12 |
| Added | buildnow.fidelity.com | URL | Out of Scope | 19:12 |
| Added | corporatearchives.fidelity.com | URL | Out of Scope | 19:12 |
| Added | investwithpurpose.fidelity.com | URL | Out of Scope | 19:12 |
| Added | fidelitydigitalassets.fidelity.com | URL | Out of Scope | 19:12 |
| Added | forextrader.fidelity.com | URL | Out of Scope | 19:12 |
| Added | fundresearch.fidelity.com | URL | Out of Scope | 19:12 |
| Added | china.fidelity.com | URL | Out of Scope | 19:12 |
| Added | www.boundless.fidelity.com | URL | Out of Scope | 19:12 |
| Added | testjobs.fidelity.com | URL | Out of Scope | 19:12 |
| Added | www.jobs.fidelity.com | URL | Out of Scope | 19:12 |
| Added | india.fidelity.com | URL | Out of Scope | 19:12 |
| Added | www.india.fidelity.com | URL | Out of Scope | 19:12 |
| Added | boundless.fidelity.com | URL | Out of Scope | 19:12 |
| Added | social.fidelity.com | URL | Out of Scope | 19:12 |
| Added | reviews.fidelity.com | URL | Out of Scope | 19:12 |
| Added | social.retail.fidelity.com | URL | Out of Scope | 19:12 |
| Added | reviews.retail.fidelity.com | URL | Out of Scope | 19:12 |
| Added | sitecatalyst.fidelity.com | URL | Out of Scope | 19:12 |
| Added | taxseason.fidelity.com | URL | Out of Scope | 19:12 |
| Added | newsroom.fidelity.com | URL | Out of Scope | 19:12 |
| Added | talentcommunity.fidelity.com | URL | Out of Scope | 19:12 |