Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
finnair_vdp
36
In Scope
0
Out of Scope
In-Scope Assets (36)
Scope Changes (42)
Oct 5, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *-preprod.finnair.com | WILDCARD | In Scope | 11:15 |
| Added | *.finnairshop.com | WILDCARD | In Scope | 11:15 |
| Removed | finnair assets | OTHER | In Scope | 11:15 |
| Added | paywithpoints.finnair.com | URL | In Scope | 11:15 |
| Added | cms.finnair.com | URL | In Scope | 10:14 |
| Added | privacy.finnair.com | URL | In Scope | 10:14 |
| Added | finnairflightacademy.com | URL | In Scope | 10:14 |
| Added | partners.finnair.fi | URL | In Scope | 10:14 |
| Added | easy.finnair.com | URL | In Scope | 10:14 |
| Added | customercare.finnair.com | URL | In Scope | 10:14 |
| Added | fast.finnair.com | URL | In Scope | 10:14 |
| Added | cargo.finnair.com | URL | In Scope | 10:14 |
| Added | com.finnair | ANDROID | In Scope | 10:14 |
| Added | 933867978 | IOS | In Scope | 10:14 |
| Added | https://api.finnair.com/d/mobileapp-services/* | URL | In Scope | 10:14 |
| Added | https://api-preprod.finnair.com/d/* | URL | In Scope | 10:14 |
| Added | https://api-dev.finnair.com/d/* | URL | In Scope | 10:14 |
| Added | https://api.finnair.com/d/mobileapp/* | URL | In Scope | 10:14 |
| Added | https://api.finnair.com/d/loyalty-service/%20%2A | URL | In Scope | 10:14 |
| Added | https://api.finnair.com/d/payments/* | URL | In Scope | 10:14 |
| Added | pay.finnair.com | URL | In Scope | 10:14 |
| Added | https://api.finnair.com/d/fcom/* | URL | In Scope | 10:14 |
| Added | finnairshop.com | URL | In Scope | 10:14 |
| Added | preauth.finnair.com | URL | In Scope | 10:14 |
| Added | www.finnair.com | URL | In Scope | 10:14 |
| Added | finnair.com | URL | In Scope | 10:14 |
| Added | *.finnair.com | WILDCARD | In Scope | 10:14 |
| Added | *-dev.finnair.com | WILDCARD | In Scope | 10:14 |
| Added | *.prod.app.finnair.com | WILDCARD | In Scope | 10:14 |
| Added | *.cloud.finnair.com | WILDCARD | In Scope | 10:14 |
| Added | *.dev.app.finnair.com | WILDCARD | In Scope | 10:14 |
| Added | 157.200.0.0/16 | CIDR | In Scope | 10:14 |
| Added | *.preprod.app.finnair.com | WILDCARD | In Scope | 10:14 |
| Removed | auth.finnair.com | URL | In Scope | 10:14 |
| Added | *.aurinkomatkat.fi | WILDCARD | In Scope | 10:14 |
| Added | aurinkomatkat.fi | URL | In Scope | 10:14 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | finnair assets | OTHER | In Scope | 19:19 |
| Added | auth.finnair.com | URL | Out of Scope | 19:19 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | finnair assets | OTHER | In Scope | 00:48 |
| Added | auth.finnair.com | URL | Out of Scope | 00:48 |
Feb 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | finnair assets | OTHER | In Scope | 19:12 |
| Added | auth.finnair.com | URL | Out of Scope | 19:12 |