Program Removed
This program is no longer available on HackerOne. The scope data shown below is historical and may not reflect the final state of the program.
gocardless_bbp
23
In Scope
26
Out of Scope
In-Scope Assets (23)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| api-sandbox.gocardless.com | URL | Yes | ||
| auth0.gocardless.com | URL | Yes | ||
| bankaccountdata.gocardless.com | OTHER | Yes | - | |
| connect-sandbox.gocardless.com | URL | Yes | ||
| developer.gocardless.com | URL | Yes | ||
| gocardless-banking.io | WILDCARD | Yes | ||
| gocardless-cicd.io | WILDCARD | Yes | ||
| gocardless-lab.io | WILDCARD | No | ||
| gocardless-staging.io | WILDCARD | No | ||
| gocardless.com | WILDCARD | Yes | ||
| gocardless.dev | WILDCARD | No | ||
| gocardless.io | WILDCARD | Yes | ||
| http://sso-demo.gocardless-staging.io | URL | No | ||
| https://ob-sandbox.gocardless.io | URL | Yes | ||
| manage-sandbox.gocardless.com | URL | Yes | ||
| manage-sandbox.gocardless.com | URL | Yes | ||
| manage-sandbox.gocardless.com | URL | Yes | ||
| manage-sandbpox.gocardless.com | URL | Yes | ||
| oauth-sandbox.gocardless.com | URL | Yes | ||
| ob.gocardless.com | URL | Yes | ||
| pay-sandbox.gocardless.com | URL | Yes | ||
| payer-details-sandbox.gocardless.com | URL | Yes | ||
| www.gocardless.com | URL | Yes |
Out-of-Scope Assets (26)
| Asset | Category | Bounty | |
|---|---|---|---|
| api-staging.gocardless.com | URL | No | |
| api.gocardless.com | URL | No | |
| brand.gocardless.com | URL | No | |
| connect.gocardless.com | URL | No | |
| gc4x-api-sandbox.gocardless.com | URL | No | |
| gocardless-status.com | OTHER | No | |
| gocardless.atlassian.net | URL | No | |
| gocardless.my.site.com | OTHER | No | |
| http://sso-demo.gocardless-staging.io | URL | No | |
| learn.gocardless.com | URL | No | |
| manage.gocardless-staging.io | URL | No | |
| manage.gocardless.com | URL | No | |
| oauth-staging.gocardless.com | URL | No | |
| oauth.gocardless.com | URL | No | |
| outgrow.gocardless.com | URL | No | |
| partnerportal.gocardless.com | OTHER | No | |
| pay.gocardless.com | URL | No | |
| payer-details.gocardless.com | URL | No | |
| privacy.gocardless.com | URL | No | |
| qbo-api.gocardless.com | URL | No | |
| status.gocardless.com | OTHER | No | |
| storybook.gocardless.io | URL | No | |
| support.gocardless.com | URL | No | |
| xero-sandbox.gocardless.com | URL | No | |
| xero-staging.gocardless.com | URL | No | |
| xero.gocardless.com | URL | No |
Scope Changes (125)
Jun 19, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 15:28 |
May 28, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | developer.gocardless.com | URL | In Scope | 17:26 |
| Added | developer.gocardless.com | URL | In Scope | 15:26 |
May 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | https://ob-sandbox.gocardless.io | URL | In Scope | 10:26 |
| Added | manage-sandbox.gocardless.com | URL | In Scope | 09:26 |
| Removed | ob.gocardless.com | URL | In Scope | 09:26 |
| Added | manage-sandbox.gocardless.com | URL | In Scope | 09:26 |
| Removed | manage-sandbpox.gocardless.com | URL | In Scope | 09:26 |
| Removed | manage.gocardless-staging.io | URL | Out of Scope | 08:26 |
| Removed | auth0.gocardless.com | URL | In Scope | 08:26 |
| Removed | *.gocardless-staging.io | WILDCARD | Out of Scope | 08:26 |
| Added | manage-sandbpox.gocardless.com | URL | In Scope | 08:26 |
| Removed | manage-sandbox.gocardless.com | URL | In Scope | 08:26 |
| Added | manage-sandbpox.gocardless.com | URL | In Scope | 08:26 |
| Removed | *.gocardless-cicd.io | WILDCARD | In Scope | 07:26 |
| Removed | *.gocardless.com | WILDCARD | In Scope | 07:26 |
| Removed | https://ob-sandbox.gocardless.io | URL | In Scope | 07:26 |
| Removed | bankaccountdata.gocardless.com | OTHER | In Scope | 07:26 |
| Removed | ob.gocardless.com | URL | In Scope | 07:26 |
| Removed | *.gocardless.io,*.gocardless-banking.io | WILDCARD | In Scope | 07:26 |
May 6, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | http://sso-demo.gocardless-staging.io | URL | In Scope | 11:26 |
| Added | http://sso-demo.gocardless-staging.io | URL | Out of Scope | 11:26 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | payer-details-sandbox.gocardless.com | URL | In Scope | 19:11 |
| Added | gc4x-api-sandbox.gocardless.com | URL | Out of Scope | 19:11 |
| Added | *.gocardless.com | WILDCARD | In Scope | 19:11 |
| Added | ob.gocardless.com | URL | In Scope | 19:11 |
| Added | qbo-api.gocardless.com | URL | Out of Scope | 19:11 |
| Added | payer-details.gocardless.com | URL | Out of Scope | 19:11 |
| Added | www.gocardless.com | URL | In Scope | 19:11 |
| Added | manage-sandbox.gocardless.com | URL | In Scope | 19:11 |
| Added | auth0.gocardless.com | URL | In Scope | 19:11 |
| Added | connect.gocardless.com | URL | Out of Scope | 19:11 |
| Added | oauth.gocardless.com | URL | Out of Scope | 19:11 |
| Added | learn.gocardless.com | URL | Out of Scope | 19:11 |
| Added | outgrow.gocardless.com | URL | Out of Scope | 19:11 |
| Added | *.gocardless.dev | WILDCARD | In Scope | 19:11 |
| Added | pay-sandbox.gocardless.com | URL | In Scope | 19:11 |
| Added | manage.gocardless.com | URL | Out of Scope | 19:11 |
| Added | gocardless.atlassian.net | URL | Out of Scope | 19:11 |
| Added | api-sandbox.gocardless.com | URL | In Scope | 19:11 |
| Added | *.gocardless-staging.io | WILDCARD | In Scope | 19:11 |
| Added | api-staging.gocardless.com | URL | Out of Scope | 19:11 |
| Added | support.gocardless.com | URL | Out of Scope | 19:11 |
| Added | gocardless-status.com, status.gocardless.com | OTHER | Out of Scope | 19:11 |
| Added | gocardless-status.com, status.gocardless.com | OTHER | Out of Scope | 19:11 |
| Added | *.gocardless-cicd.io | WILDCARD | In Scope | 19:11 |
| Added | *.gocardless-lab.io | WILDCARD | In Scope | 19:11 |
| Added | oauth-staging.gocardless.com | URL | Out of Scope | 19:11 |
| Added | connect-sandbox.gocardless.com | URL | In Scope | 19:11 |
| Added | *.gocardless.io,*.gocardless-banking.io | WILDCARD | In Scope | 19:11 |
| Added | *.gocardless.io,*.gocardless-banking.io | WILDCARD | In Scope | 19:11 |
| Added | https://ob-sandbox.gocardless.io | URL | In Scope | 19:11 |
| Added | privacy.gocardless.com | URL | Out of Scope | 19:11 |
| Added | pay.gocardless.com | URL | Out of Scope | 19:11 |
| Added | xero-sandbox.gocardless.com | URL | Out of Scope | 19:11 |
| Added | manage.gocardless-staging.io | URL | Out of Scope | 19:11 |
| Added | storybook.gocardless.io | URL | Out of Scope | 19:11 |
| Added | oauth-sandbox.gocardless.com | URL | In Scope | 19:11 |
| Added | bankaccountdata.gocardless.com | OTHER | In Scope | 19:11 |
| Added | api.gocardless.com | URL | Out of Scope | 19:11 |
| Added | xero.gocardless.com | URL | Out of Scope | 19:11 |
| Added | xero-staging.gocardless.com | URL | Out of Scope | 19:11 |
| Added | brand.gocardless.com | URL | Out of Scope | 19:11 |
| Added | partnerportal.gocardless.com, gocardless.my.site.com | OTHER | Out of Scope | 19:11 |
| Added | partnerportal.gocardless.com, gocardless.my.site.com | OTHER | Out of Scope | 19:11 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *.gocardless.io,*.gocardless-banking.io | WILDCARD | In Scope | 00:42 |
| Added | *.gocardless.dev | WILDCARD | In Scope | 00:42 |
| Added | manage-sandbox.gocardless.com | URL | In Scope | 00:42 |
| Added | *.gocardless.io,*.gocardless-banking.io | WILDCARD | In Scope | 00:42 |
| Added | *.gocardless.com | WILDCARD | In Scope | 00:42 |
| Added | bankaccountdata.gocardless.com | OTHER | In Scope | 00:42 |
| Added | payer-details-sandbox.gocardless.com | URL | In Scope | 00:42 |
| Added | payer-details.gocardless.com | URL | Out of Scope | 00:42 |
| Added | api-staging.gocardless.com | URL | Out of Scope | 00:42 |
| Added | pay-sandbox.gocardless.com | URL | In Scope | 00:42 |
| Added | connect-sandbox.gocardless.com | URL | In Scope | 00:42 |
| Added | oauth-sandbox.gocardless.com | URL | In Scope | 00:42 |
| Added | *.gocardless-staging.io | WILDCARD | In Scope | 00:42 |
| Added | learn.gocardless.com | URL | Out of Scope | 00:42 |
| Added | privacy.gocardless.com | URL | Out of Scope | 00:42 |
| Added | auth0.gocardless.com | URL | In Scope | 00:42 |
| Added | manage.gocardless.com | URL | Out of Scope | 00:42 |
| Added | oauth-staging.gocardless.com | URL | Out of Scope | 00:42 |
| Added | https://ob-sandbox.gocardless.io | URL | In Scope | 00:42 |
| Added | storybook.gocardless.io | URL | Out of Scope | 00:42 |
| Added | partnerportal.gocardless.com, gocardless.my.site.com | OTHER | Out of Scope | 00:42 |
| Added | partnerportal.gocardless.com, gocardless.my.site.com | OTHER | Out of Scope | 00:42 |
| Added | gc4x-api-sandbox.gocardless.com | URL | Out of Scope | 00:42 |
| Added | www.gocardless.com | URL | In Scope | 00:42 |
| Added | api-sandbox.gocardless.com | URL | In Scope | 00:42 |
| Added | oauth.gocardless.com | URL | Out of Scope | 00:42 |
| Added | manage.gocardless-staging.io | URL | Out of Scope | 00:42 |
| Added | *.gocardless-cicd.io | WILDCARD | In Scope | 00:42 |
| Added | *.gocardless-lab.io | WILDCARD | In Scope | 00:42 |
| Added | connect.gocardless.com | URL | Out of Scope | 00:42 |
| Added | xero-staging.gocardless.com | URL | Out of Scope | 00:42 |
| Added | outgrow.gocardless.com | URL | Out of Scope | 00:42 |
| Added | pay.gocardless.com | URL | Out of Scope | 00:42 |
| Added | xero.gocardless.com | URL | Out of Scope | 00:42 |
| Added | qbo-api.gocardless.com | URL | Out of Scope | 00:42 |
| Added | gocardless.atlassian.net | URL | Out of Scope | 00:42 |
| Added | ob.gocardless.com | URL | In Scope | 00:42 |
| Added | api.gocardless.com | URL | Out of Scope | 00:42 |
| Added | support.gocardless.com | URL | Out of Scope | 00:42 |
| Added | brand.gocardless.com | URL | Out of Scope | 00:42 |
| Added | gocardless-status.com, status.gocardless.com | OTHER | Out of Scope | 00:42 |
| Added | gocardless-status.com, status.gocardless.com | OTHER | Out of Scope | 00:42 |
| Added | xero-sandbox.gocardless.com | URL | Out of Scope | 00:42 |
Feb 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | www.gocardless.com | URL | In Scope | 21:38 |
| Removed | manage-sandbox.gocardless.com | URL | In Scope | 21:38 |
| Removed | pay-sandbox.gocardless.com | URL | In Scope | 21:38 |
| Removed | api-sandbox.gocardless.com | URL | In Scope | 21:38 |
| Removed | connect-sandbox.gocardless.com | URL | In Scope | 21:38 |
| Removed | *.gocardless.io,*.gocardless-banking.io | WILDCARD | In Scope | 21:38 |
| Removed | oauth-sandbox.gocardless.com | URL | In Scope | 21:38 |
| Removed | *.gocardless.com | WILDCARD | In Scope | 21:38 |
| Removed | ob.gocardless.com | URL | In Scope | 21:38 |
| Removed | bankaccountdata.gocardless.com | OTHER | In Scope | 21:38 |
| Removed | auth0.gocardless.com | URL | In Scope | 21:38 |
| Removed | https://ob-sandbox.gocardless.io | URL | In Scope | 21:38 |
| Removed | payer-details-sandbox.gocardless.com | URL | In Scope | 21:38 |
| Removed | *.gocardless-cicd.io | WILDCARD | In Scope | 21:38 |
| Added | *.gocardless-lab.io | WILDCARD | In Scope | 19:12 |
| Added | *.gocardless-staging.io | WILDCARD | In Scope | 19:12 |
| Added | *.gocardless.dev | WILDCARD | In Scope | 19:12 |