Program Removed
This program is no longer available on HackerOne. The scope data shown below is historical and may not reflect the final state of the program.
gocardless_bbp
39
In Scope
50
Out of Scope
In-Scope Assets (39)
Out-of-Scope Assets (50)
Scope Changes (211)
Sep 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 08:17 |
Sep 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://github.com/gocardless/woocommerce-gateway-gocardless | CODE | Out of Scope | 15:48 |
Sep 10, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://github.com/gocardless | CODE | In Scope | 07:49 |
Jul 14, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | www.gocardless.com | URL | In Scope | 10:29 |
| Added | pay-sandbox.gocardless.com | URL | In Scope | 10:29 |
| Added | api-sandbox.gocardless.com | URL | In Scope | 10:29 |
| Added | connect-sandbox.gocardless.com | URL | In Scope | 10:29 |
| Added | *.gocardless.io,*.gocardless-banking.io | WILDCARD | In Scope | 10:29 |
| Added | *.gocardless-cicd.io | WILDCARD | In Scope | 10:29 |
| Added | *.gocardless.dev | WILDCARD | In Scope | 10:29 |
| Added | oauth-sandbox.gocardless.com | URL | In Scope | 10:29 |
| Added | *.gocardless-lab.io | WILDCARD | In Scope | 10:29 |
| Added | ob.gocardless.com | URL | In Scope | 10:29 |
| Added | bankaccountdata.gocardless.com | OTHER | In Scope | 10:29 |
| Added | auth0.gocardless.com | URL | In Scope | 10:29 |
| Added | https://ob-sandbox.gocardless.io | URL | In Scope | 10:29 |
| Added | payer-details-sandbox.gocardless.com | URL | In Scope | 10:29 |
| Added | http://sso-demo.gocardless-staging.io | URL | In Scope | 10:29 |
| Added | manage-sandbox.gocardless.com | URL | In Scope | 10:29 |
| Added | developer.gocardless.com | URL | In Scope | 10:29 |
| Added | xero-staging.gocardless.com | URL | Out of Scope | 10:29 |
| Added | api.gocardless.com | URL | Out of Scope | 10:29 |
| Added | manage.gocardless.com | URL | Out of Scope | 10:29 |
| Added | connect.gocardless.com | URL | Out of Scope | 10:29 |
| Added | pay.gocardless.com | URL | Out of Scope | 10:29 |
| Added | xero.gocardless.com | URL | Out of Scope | 10:29 |
| Added | xero-sandbox.gocardless.com | URL | Out of Scope | 10:29 |
| Added | oauth.gocardless.com | URL | Out of Scope | 10:29 |
| Added | *.gocardless-staging.io | WILDCARD | Out of Scope | 10:29 |
| Added | api-staging.gocardless.com | URL | Out of Scope | 10:29 |
| Added | oauth-staging.gocardless.com | URL | Out of Scope | 10:29 |
| Added | support.gocardless.com | URL | Out of Scope | 10:29 |
| Added | learn.gocardless.com | URL | Out of Scope | 10:29 |
| Added | outgrow.gocardless.com | URL | Out of Scope | 10:29 |
| Added | privacy.gocardless.com | URL | Out of Scope | 10:29 |
| Added | brand.gocardless.com | URL | Out of Scope | 10:29 |
| Added | storybook.gocardless.io | URL | Out of Scope | 10:29 |
| Added | partnerportal.gocardless.com, gocardless.my.site.com | OTHER | Out of Scope | 10:29 |
| Added | gocardless-status.com, status.gocardless.com | OTHER | Out of Scope | 10:29 |
| Added | qbo-api.gocardless.com | URL | Out of Scope | 10:29 |
| Added | payer-details.gocardless.com | URL | Out of Scope | 10:29 |
| Added | gc4x-api-sandbox.gocardless.com | URL | Out of Scope | 10:29 |
| Added | gocardless.atlassian.net | URL | Out of Scope | 10:29 |
| Added | storybook.gocardless.io | URL | Out of Scope | 10:29 |
| Added | payer-details.gocardless.com | URL | Out of Scope | 10:29 |
| Added | pay-sandbox.gocardless.com | URL | In Scope | 10:29 |
| Added | *.gocardless.io,*.gocardless-banking.io | WILDCARD | In Scope | 10:29 |
| Added | *.gocardless.io,*.gocardless-banking.io | WILDCARD | In Scope | 10:29 |
| Added | pay.gocardless.com | URL | Out of Scope | 10:29 |
| Added | support.gocardless.com | URL | Out of Scope | 10:29 |
| Added | api-sandbox.gocardless.com | URL | In Scope | 10:29 |
| Added | manage.gocardless.com | URL | Out of Scope | 10:29 |
| Added | api-staging.gocardless.com | URL | Out of Scope | 10:29 |
| Added | privacy.gocardless.com | URL | Out of Scope | 10:29 |
| Added | gc4x-api-sandbox.gocardless.com | URL | Out of Scope | 10:29 |
| Added | *.gocardless.dev | WILDCARD | In Scope | 10:29 |
| Added | connect-sandbox.gocardless.com | URL | In Scope | 10:29 |
| Added | oauth-sandbox.gocardless.com | URL | In Scope | 10:29 |
| Added | developer.gocardless.com | URL | In Scope | 10:29 |
| Added | oauth-staging.gocardless.com | URL | Out of Scope | 10:29 |
| Added | gocardless.atlassian.net | URL | Out of Scope | 10:29 |
| Added | bankaccountdata.gocardless.com | OTHER | In Scope | 10:29 |
| Added | auth0.gocardless.com | URL | In Scope | 10:29 |
| Added | xero.gocardless.com | URL | Out of Scope | 10:29 |
| Added | brand.gocardless.com | URL | Out of Scope | 10:29 |
| Added | gocardless-status.com, status.gocardless.com | OTHER | Out of Scope | 10:29 |
| Added | gocardless-status.com, status.gocardless.com | OTHER | Out of Scope | 10:29 |
| Added | qbo-api.gocardless.com | URL | Out of Scope | 10:29 |
| Added | ob.gocardless.com | URL | In Scope | 10:29 |
| Added | connect.gocardless.com | URL | Out of Scope | 10:29 |
| Added | outgrow.gocardless.com | URL | Out of Scope | 10:29 |
| Added | *.gocardless-cicd.io | WILDCARD | In Scope | 10:29 |
| Added | https://ob-sandbox.gocardless.io | URL | In Scope | 10:29 |
| Added | manage-sandbox.gocardless.com | URL | In Scope | 10:29 |
| Added | api.gocardless.com | URL | Out of Scope | 10:29 |
| Added | xero-sandbox.gocardless.com | URL | Out of Scope | 10:29 |
| Added | oauth.gocardless.com | URL | Out of Scope | 10:29 |
| Added | learn.gocardless.com | URL | Out of Scope | 10:29 |
| Added | partnerportal.gocardless.com, gocardless.my.site.com | OTHER | Out of Scope | 10:29 |
| Added | partnerportal.gocardless.com, gocardless.my.site.com | OTHER | Out of Scope | 10:29 |
| Added | www.gocardless.com | URL | In Scope | 10:29 |
| Added | *.gocardless-lab.io | WILDCARD | In Scope | 10:29 |
| Added | payer-details-sandbox.gocardless.com | URL | In Scope | 10:29 |
| Added | http://sso-demo.gocardless-staging.io | URL | In Scope | 10:29 |
| Added | xero-staging.gocardless.com | URL | Out of Scope | 10:29 |
| Added | *.gocardless-staging.io | WILDCARD | Out of Scope | 10:29 |
Jun 19, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 15:28 |
May 28, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | developer.gocardless.com | URL | In Scope | 17:26 |
| Added | developer.gocardless.com | URL | In Scope | 15:26 |
May 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | https://ob-sandbox.gocardless.io | URL | In Scope | 10:26 |
| Added | manage-sandbox.gocardless.com | URL | In Scope | 09:26 |
| Removed | manage-sandbpox.gocardless.com | URL | In Scope | 09:26 |
| Added | manage-sandbox.gocardless.com | URL | In Scope | 09:26 |
| Removed | ob.gocardless.com | URL | In Scope | 09:26 |
| Removed | *.gocardless-staging.io | WILDCARD | Out of Scope | 08:26 |
| Removed | auth0.gocardless.com | URL | In Scope | 08:26 |
| Added | manage-sandbpox.gocardless.com | URL | In Scope | 08:26 |
| Removed | manage-sandbox.gocardless.com | URL | In Scope | 08:26 |
| Removed | manage.gocardless-staging.io | URL | Out of Scope | 08:26 |
| Added | manage-sandbpox.gocardless.com | URL | In Scope | 08:26 |
| Removed | *.gocardless-cicd.io | WILDCARD | In Scope | 07:26 |
| Removed | https://ob-sandbox.gocardless.io | URL | In Scope | 07:26 |
| Removed | *.gocardless.com | WILDCARD | In Scope | 07:26 |
| Removed | *.gocardless.io,*.gocardless-banking.io | WILDCARD | In Scope | 07:26 |
| Removed | ob.gocardless.com | URL | In Scope | 07:26 |
| Removed | bankaccountdata.gocardless.com | OTHER | In Scope | 07:26 |
May 6, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | http://sso-demo.gocardless-staging.io | URL | In Scope | 11:26 |
| Added | http://sso-demo.gocardless-staging.io | URL | Out of Scope | 11:26 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | api-staging.gocardless.com | URL | Out of Scope | 19:11 |
| Added | support.gocardless.com | URL | Out of Scope | 19:11 |
| Added | gocardless-status.com, status.gocardless.com | OTHER | Out of Scope | 19:11 |
| Added | gocardless-status.com, status.gocardless.com | OTHER | Out of Scope | 19:11 |
| Added | *.gocardless-cicd.io | WILDCARD | In Scope | 19:11 |
| Added | *.gocardless-lab.io | WILDCARD | In Scope | 19:11 |
| Added | oauth-staging.gocardless.com | URL | Out of Scope | 19:11 |
| Added | connect-sandbox.gocardless.com | URL | In Scope | 19:11 |
| Added | *.gocardless.io,*.gocardless-banking.io | WILDCARD | In Scope | 19:11 |
| Added | *.gocardless.io,*.gocardless-banking.io | WILDCARD | In Scope | 19:11 |
| Added | manage.gocardless.com | URL | Out of Scope | 19:11 |
| Added | privacy.gocardless.com | URL | Out of Scope | 19:11 |
| Added | pay.gocardless.com | URL | Out of Scope | 19:11 |
| Added | xero-sandbox.gocardless.com | URL | Out of Scope | 19:11 |
| Added | manage.gocardless-staging.io | URL | Out of Scope | 19:11 |
| Added | storybook.gocardless.io | URL | Out of Scope | 19:11 |
| Added | oauth-sandbox.gocardless.com | URL | In Scope | 19:11 |
| Added | bankaccountdata.gocardless.com | OTHER | In Scope | 19:11 |
| Added | api.gocardless.com | URL | Out of Scope | 19:11 |
| Added | xero.gocardless.com | URL | Out of Scope | 19:11 |
| Added | xero-staging.gocardless.com | URL | Out of Scope | 19:11 |
| Added | brand.gocardless.com | URL | Out of Scope | 19:11 |
| Added | partnerportal.gocardless.com, gocardless.my.site.com | OTHER | Out of Scope | 19:11 |
| Added | partnerportal.gocardless.com, gocardless.my.site.com | OTHER | Out of Scope | 19:11 |
| Added | gc4x-api-sandbox.gocardless.com | URL | Out of Scope | 19:11 |
| Added | *.gocardless.com | WILDCARD | In Scope | 19:11 |
| Added | ob.gocardless.com | URL | In Scope | 19:11 |
| Added | qbo-api.gocardless.com | URL | Out of Scope | 19:11 |
| Added | payer-details.gocardless.com | URL | Out of Scope | 19:11 |
| Added | www.gocardless.com | URL | In Scope | 19:11 |
| Added | manage-sandbox.gocardless.com | URL | In Scope | 19:11 |
| Added | auth0.gocardless.com | URL | In Scope | 19:11 |
| Added | connect.gocardless.com | URL | Out of Scope | 19:11 |
| Added | oauth.gocardless.com | URL | Out of Scope | 19:11 |
| Added | learn.gocardless.com | URL | Out of Scope | 19:11 |
| Added | outgrow.gocardless.com | URL | Out of Scope | 19:11 |
| Added | *.gocardless.dev | WILDCARD | In Scope | 19:11 |
| Added | pay-sandbox.gocardless.com | URL | In Scope | 19:11 |
| Added | payer-details-sandbox.gocardless.com | URL | In Scope | 19:11 |
| Added | https://ob-sandbox.gocardless.io | URL | In Scope | 19:11 |
| Added | gocardless.atlassian.net | URL | Out of Scope | 19:11 |
| Added | api-sandbox.gocardless.com | URL | In Scope | 19:11 |
| Added | *.gocardless-staging.io | WILDCARD | In Scope | 19:11 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | api-sandbox.gocardless.com | URL | In Scope | 00:42 |
| Added | oauth.gocardless.com | URL | Out of Scope | 00:42 |
| Added | manage.gocardless-staging.io | URL | Out of Scope | 00:42 |
| Added | *.gocardless-cicd.io | WILDCARD | In Scope | 00:42 |
| Added | *.gocardless-lab.io | WILDCARD | In Scope | 00:42 |
| Added | connect.gocardless.com | URL | Out of Scope | 00:42 |
| Added | xero-staging.gocardless.com | URL | Out of Scope | 00:42 |
| Added | outgrow.gocardless.com | URL | Out of Scope | 00:42 |
| Added | pay.gocardless.com | URL | Out of Scope | 00:42 |
| Added | xero.gocardless.com | URL | Out of Scope | 00:42 |
| Added | qbo-api.gocardless.com | URL | Out of Scope | 00:42 |
| Added | gocardless.atlassian.net | URL | Out of Scope | 00:42 |
| Added | ob.gocardless.com | URL | In Scope | 00:42 |
| Added | api.gocardless.com | URL | Out of Scope | 00:42 |
| Added | support.gocardless.com | URL | Out of Scope | 00:42 |
| Added | brand.gocardless.com | URL | Out of Scope | 00:42 |
| Added | gocardless-status.com, status.gocardless.com | OTHER | Out of Scope | 00:42 |
| Added | gocardless-status.com, status.gocardless.com | OTHER | Out of Scope | 00:42 |
| Added | xero-sandbox.gocardless.com | URL | Out of Scope | 00:42 |
| Added | *.gocardless.dev | WILDCARD | In Scope | 00:42 |
| Added | manage-sandbox.gocardless.com | URL | In Scope | 00:42 |
| Added | *.gocardless.io,*.gocardless-banking.io | WILDCARD | In Scope | 00:42 |
| Added | *.gocardless.io,*.gocardless-banking.io | WILDCARD | In Scope | 00:42 |
| Added | *.gocardless.com | WILDCARD | In Scope | 00:42 |
| Added | bankaccountdata.gocardless.com | OTHER | In Scope | 00:42 |
| Added | payer-details-sandbox.gocardless.com | URL | In Scope | 00:42 |
| Added | payer-details.gocardless.com | URL | Out of Scope | 00:42 |
| Added | api-staging.gocardless.com | URL | Out of Scope | 00:42 |
| Added | pay-sandbox.gocardless.com | URL | In Scope | 00:42 |
| Added | connect-sandbox.gocardless.com | URL | In Scope | 00:42 |
| Added | oauth-sandbox.gocardless.com | URL | In Scope | 00:42 |
| Added | *.gocardless-staging.io | WILDCARD | In Scope | 00:42 |
| Added | learn.gocardless.com | URL | Out of Scope | 00:42 |
| Added | privacy.gocardless.com | URL | Out of Scope | 00:42 |
| Added | auth0.gocardless.com | URL | In Scope | 00:42 |
| Added | manage.gocardless.com | URL | Out of Scope | 00:42 |
| Added | oauth-staging.gocardless.com | URL | Out of Scope | 00:42 |
| Added | https://ob-sandbox.gocardless.io | URL | In Scope | 00:42 |
| Added | storybook.gocardless.io | URL | Out of Scope | 00:42 |
| Added | partnerportal.gocardless.com, gocardless.my.site.com | OTHER | Out of Scope | 00:42 |
| Added | partnerportal.gocardless.com, gocardless.my.site.com | OTHER | Out of Scope | 00:42 |
| Added | gc4x-api-sandbox.gocardless.com | URL | Out of Scope | 00:42 |
| Added | www.gocardless.com | URL | In Scope | 00:42 |
Feb 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | *.gocardless-cicd.io | WILDCARD | In Scope | 21:38 |
| Removed | www.gocardless.com | URL | In Scope | 21:38 |
| Removed | manage-sandbox.gocardless.com | URL | In Scope | 21:38 |
| Removed | pay-sandbox.gocardless.com | URL | In Scope | 21:38 |
| Removed | api-sandbox.gocardless.com | URL | In Scope | 21:38 |
| Removed | connect-sandbox.gocardless.com | URL | In Scope | 21:38 |
| Removed | *.gocardless.io,*.gocardless-banking.io | WILDCARD | In Scope | 21:38 |
| Removed | oauth-sandbox.gocardless.com | URL | In Scope | 21:38 |
| Removed | *.gocardless.com | WILDCARD | In Scope | 21:38 |
| Removed | ob.gocardless.com | URL | In Scope | 21:38 |
| Removed | bankaccountdata.gocardless.com | OTHER | In Scope | 21:38 |
| Removed | auth0.gocardless.com | URL | In Scope | 21:38 |
| Removed | https://ob-sandbox.gocardless.io | URL | In Scope | 21:38 |
| Removed | payer-details-sandbox.gocardless.com | URL | In Scope | 21:38 |
| Added | *.gocardless.dev | WILDCARD | In Scope | 19:12 |
| Added | *.gocardless-lab.io | WILDCARD | In Scope | 19:12 |
| Added | *.gocardless-staging.io | WILDCARD | In Scope | 19:12 |