Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

getyourguide_vdp

HackerOneView on HackerOne

RawAI Enhanced

In Scope

Out of Scope

In-Scope Assets (5)

Asset	Category	Bounty	Quick Links
https://partner-public.getyourguide.com/graphql	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
partner.getyourguide.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
travelers-api.getyourguide.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
widget.getyourguide.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
www.getyourguide.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Scope Changes (10)

May 4, 2026

Change	Asset	Category	Scope	Time
Added	www.getyourguide.com	URL	In Scope	05:28
Added	travelers-api.getyourguide.com	URL	In Scope	05:28
Added	www.getyourguide.com	URL	In Scope	05:28
Added	travelers-api.getyourguide.com	URL	In Scope	05:28

Mar 23, 2026

Change	Asset	Category	Scope	Time
Added	widget.getyourguide.com	URL	In Scope	11:40
Added	partner.getyourguide.com	URL	In Scope	11:40
Added	https://partner-public.getyourguide.com/graphql	URL	In Scope	11:40
Added	widget.getyourguide.com	URL	In Scope	11:40
Added	https://partner-public.getyourguide.com/graphql	URL	In Scope	11:40
Added	partner.getyourguide.com	URL	In Scope	11:40