gocardless_bbp

HackerOneView on HackerOne
RawAI Enhanced
17
In Scope
23
Out of Scope
In-Scope Assets (17)
AssetCategoryBountyQuick Links
*.gocardless-cicd.ioWILDCARDYes
*.gocardless-lab.ioWILDCARDNo
*.gocardless-staging.ioWILDCARDNo
*.gocardless.comWILDCARDYes
*.gocardless.devWILDCARDNo
*.gocardless.io,*.gocardless-banking.ioWILDCARDYes
api-sandbox.gocardless.comURLYes
auth0.gocardless.comURLYes
bankaccountdata.gocardless.comOTHERYes-
connect-sandbox.gocardless.comURLYes
https://ob-sandbox.gocardless.ioURLYes
manage-sandbox.gocardless.comURLYes
oauth-sandbox.gocardless.comURLYes
ob.gocardless.comURLYes
pay-sandbox.gocardless.comURLYes
payer-details-sandbox.gocardless.comURLYes
www.gocardless.comURLYes
Out-of-Scope Assets (23)
AssetCategoryBounty
api-staging.gocardless.comURLNo
api.gocardless.comURLNo
brand.gocardless.comURLNo
connect.gocardless.comURLNo
gc4x-api-sandbox.gocardless.comURLNo
gocardless-status.com, status.gocardless.comOTHERNo
gocardless.atlassian.netURLNo
learn.gocardless.comURLNo
manage.gocardless-staging.ioURLNo
manage.gocardless.comURLNo
oauth-staging.gocardless.comURLNo
oauth.gocardless.comURLNo
outgrow.gocardless.comURLNo
partnerportal.gocardless.com, gocardless.my.site.comOTHERNo
pay.gocardless.comURLNo
payer-details.gocardless.comURLNo
privacy.gocardless.comURLNo
qbo-api.gocardless.comURLNo
storybook.gocardless.ioURLNo
support.gocardless.comURLNo
xero-sandbox.gocardless.comURLNo
xero-staging.gocardless.comURLNo
xero.gocardless.comURLNo
Scope Changes (103)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedmanage.gocardless.comURLOut of Scope19:11
Addedgocardless.atlassian.netURLOut of Scope19:11
Addedapi-sandbox.gocardless.comURLIn Scope19:11
Added*.gocardless-staging.ioWILDCARDIn Scope19:11
Addedapi-staging.gocardless.comURLOut of Scope19:11
Addedsupport.gocardless.comURLOut of Scope19:11
Addedgocardless-status.com, status.gocardless.comOTHEROut of Scope19:11
Addedgocardless-status.com, status.gocardless.comOTHEROut of Scope19:11
Added*.gocardless-cicd.ioWILDCARDIn Scope19:11
Added*.gocardless-lab.ioWILDCARDIn Scope19:11
Addedoauth-staging.gocardless.comURLOut of Scope19:11
Addedconnect-sandbox.gocardless.comURLIn Scope19:11
Added*.gocardless.io,*.gocardless-banking.ioWILDCARDIn Scope19:11
Added*.gocardless.io,*.gocardless-banking.ioWILDCARDIn Scope19:11
Addedhttps://ob-sandbox.gocardless.ioURLIn Scope19:11
Addedprivacy.gocardless.comURLOut of Scope19:11
Addedpay.gocardless.comURLOut of Scope19:11
Addedxero-sandbox.gocardless.comURLOut of Scope19:11
Addedmanage.gocardless-staging.ioURLOut of Scope19:11
Addedstorybook.gocardless.ioURLOut of Scope19:11
Addedoauth-sandbox.gocardless.comURLIn Scope19:11
Addedbankaccountdata.gocardless.comOTHERIn Scope19:11
Addedapi.gocardless.comURLOut of Scope19:11
Addedxero.gocardless.comURLOut of Scope19:11
Addedxero-staging.gocardless.comURLOut of Scope19:11
Addedbrand.gocardless.comURLOut of Scope19:11
Addedpartnerportal.gocardless.com, gocardless.my.site.comOTHEROut of Scope19:11
Addedpartnerportal.gocardless.com, gocardless.my.site.comOTHEROut of Scope19:11
Addedgc4x-api-sandbox.gocardless.comURLOut of Scope19:11
Added*.gocardless.comWILDCARDIn Scope19:11
Addedob.gocardless.comURLIn Scope19:11
Addedqbo-api.gocardless.comURLOut of Scope19:11
Addedpayer-details.gocardless.comURLOut of Scope19:11
Addedwww.gocardless.comURLIn Scope19:11
Addedmanage-sandbox.gocardless.comURLIn Scope19:11
Addedauth0.gocardless.comURLIn Scope19:11
Addedconnect.gocardless.comURLOut of Scope19:11
Addedoauth.gocardless.comURLOut of Scope19:11
Addedlearn.gocardless.comURLOut of Scope19:11
Addedoutgrow.gocardless.comURLOut of Scope19:11
Added*.gocardless.devWILDCARDIn Scope19:11
Addedpay-sandbox.gocardless.comURLIn Scope19:11
Addedpayer-details-sandbox.gocardless.comURLIn Scope19:11
Feb 22, 2026
ChangeAssetCategoryScopeTime
Added*.gocardless.comWILDCARDIn Scope00:42
Addedbankaccountdata.gocardless.comOTHERIn Scope00:42
Addedpayer-details-sandbox.gocardless.comURLIn Scope00:42
Addedpayer-details.gocardless.comURLOut of Scope00:42
Addedapi-staging.gocardless.comURLOut of Scope00:42
Addedpay-sandbox.gocardless.comURLIn Scope00:42
Addedconnect-sandbox.gocardless.comURLIn Scope00:42
Addedoauth-sandbox.gocardless.comURLIn Scope00:42
Added*.gocardless-staging.ioWILDCARDIn Scope00:42
Addedlearn.gocardless.comURLOut of Scope00:42
Addedprivacy.gocardless.comURLOut of Scope00:42
Addedauth0.gocardless.comURLIn Scope00:42
Addedmanage.gocardless.comURLOut of Scope00:42
Addedoauth-staging.gocardless.comURLOut of Scope00:42
Addedhttps://ob-sandbox.gocardless.ioURLIn Scope00:42
Addedstorybook.gocardless.ioURLOut of Scope00:42
Addedpartnerportal.gocardless.com, gocardless.my.site.comOTHEROut of Scope00:42
Addedpartnerportal.gocardless.com, gocardless.my.site.comOTHEROut of Scope00:42
Addedgc4x-api-sandbox.gocardless.comURLOut of Scope00:42
Addedwww.gocardless.comURLIn Scope00:42
Addedapi-sandbox.gocardless.comURLIn Scope00:42
Addedoauth.gocardless.comURLOut of Scope00:42
Addedmanage.gocardless-staging.ioURLOut of Scope00:42
Added*.gocardless-cicd.ioWILDCARDIn Scope00:42
Added*.gocardless-lab.ioWILDCARDIn Scope00:42
Addedconnect.gocardless.comURLOut of Scope00:42
Addedxero-staging.gocardless.comURLOut of Scope00:42
Addedoutgrow.gocardless.comURLOut of Scope00:42
Addedpay.gocardless.comURLOut of Scope00:42
Addedxero.gocardless.comURLOut of Scope00:42
Addedqbo-api.gocardless.comURLOut of Scope00:42
Addedgocardless.atlassian.netURLOut of Scope00:42
Addedob.gocardless.comURLIn Scope00:42
Addedapi.gocardless.comURLOut of Scope00:42
Addedsupport.gocardless.comURLOut of Scope00:42
Addedbrand.gocardless.comURLOut of Scope00:42
Addedgocardless-status.com, status.gocardless.comOTHEROut of Scope00:42
Addedgocardless-status.com, status.gocardless.comOTHEROut of Scope00:42
Addedxero-sandbox.gocardless.comURLOut of Scope00:42
Added*.gocardless.devWILDCARDIn Scope00:42
Addedmanage-sandbox.gocardless.comURLIn Scope00:42
Added*.gocardless.io,*.gocardless-banking.ioWILDCARDIn Scope00:42
Added*.gocardless.io,*.gocardless-banking.ioWILDCARDIn Scope00:42
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removedpayer-details-sandbox.gocardless.comURLIn Scope21:38
Removedbankaccountdata.gocardless.comOTHERIn Scope21:38
Removedauth0.gocardless.comURLIn Scope21:38
Removedhttps://ob-sandbox.gocardless.ioURLIn Scope21:38
Removed*.gocardless-cicd.ioWILDCARDIn Scope21:38
Removedwww.gocardless.comURLIn Scope21:38
Removedmanage-sandbox.gocardless.comURLIn Scope21:38
Removedpay-sandbox.gocardless.comURLIn Scope21:38
Removedapi-sandbox.gocardless.comURLIn Scope21:38
Removedconnect-sandbox.gocardless.comURLIn Scope21:38
Removed*.gocardless.io,*.gocardless-banking.ioWILDCARDIn Scope21:38
Removedoauth-sandbox.gocardless.comURLIn Scope21:38
Removed*.gocardless.comWILDCARDIn Scope21:38
Removedob.gocardless.comURLIn Scope21:38
Added*.gocardless-lab.ioWILDCARDIn Scope19:12
Added*.gocardless-staging.ioWILDCARDIn Scope19:12
Added*.gocardless.devWILDCARDIn Scope19:12