Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

mendix

HackerOneView on HackerOne
RawAI Enhanced
23
In Scope
4
Out of Scope
In-Scope Assets (23)
AssetCategoryBountyQuick Links
*.mendix.comWILDCARDNo
*.timeseries.comWILDCARDNo
*.timeseries.nlWILDCARDNo
3dvis.mendixcloud.comURLNo
3s.mendixcloud.comURLNo
alm.mendixcloud.comURLNo
contributor.mendixcloud.comURLNo
datalake-sync.apps.mendix.comURLNo
dataprivacy.mendixcloud.comURLNo
dealservice.mendixcloud.comURLNo
deskallocation.mendixcloud.comURLNo
employees.mendix.comURLNo
gateway.us-east-1.sws.siemens.comURLNo
k8s-licbrk-licenseb-11d216e80e-384217420.eu-central-1.elb.amazonaws.comURLNo
marketplaceadmin.mendixcloud.comURLNo
mxbpconfig.mendixcloud.comURLNo
mxpeople.mendixcloud.comURLNo
notification.billing.appservices.mendix.comURLNo
provisioning.servicemanagement.mendix.comURLNo
revenuedatahub.mendixcloud.comURLNo
servicemanagement-accp.mendixcloud.comURLNo
simplate.mendixcloud.comURLNo
slm.store.mendix.comURLNo
Out-of-Scope Assets (4)
Scope Changes (81)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Added3dvis.mendixcloud.comURLIn Scope19:12
Addedslm.store.mendix.comURLIn Scope19:12
Addeddealservice.mendixcloud.comURLIn Scope19:12
Addeddataprivacy.mendixcloud.comURLIn Scope19:12
Added3s.mendixcloud.comURLIn Scope19:12
Addedmxbpconfig.mendixcloud.comURLIn Scope19:12
Addedk8s-licbrk-licenseb-11d216e80e-384217420.eu-central-1.elb.amazonaws.comURLIn Scope19:12
Addedmarketplaceadmin.mendixcloud.comURLIn Scope19:12
Addedservicemanagement-accp.mendixcloud.comURLIn Scope19:12
Addedcontributor.mendixcloud.comURLIn Scope19:12
Added*.timeseries.comWILDCARDIn Scope19:12
Addedevent.us-east-1.sws.siemens.comURLOut of Scope19:12
Addedhttps://react.vis.pre2.usea1.devops.sws.siemens.com/sample/dist/index.htmlURLOut of Scope19:12
Addedmxpeople.mendixcloud.comURLIn Scope19:12
Addedemployees.mendix.comURLIn Scope19:12
Addedgateway.us-east-1.sws.siemens.comURLIn Scope19:12
Addeddatalake-sync.apps.mendix.comURLIn Scope19:12
Addeddeskallocation.mendixcloud.comURLIn Scope19:12
Addedsimplate.mendixcloud.comURLIn Scope19:12
Addedrevenuedatahub.mendixcloud.comURLIn Scope19:12
Addedprovisioning.servicemanagement.mendix.comURLIn Scope19:12
Added*.mendix.comWILDCARDIn Scope19:12
Addedalm.mendixcloud.comURLIn Scope19:12
Added*.timeseries.nlWILDCARDIn Scope19:12
Addednotification.billing.appservices.mendix.comURLIn Scope19:12
Addedhttp://o0pv3l7chl.execute-api.us-east-1.amazonaws.com/devURLOut of Scope19:12
Addedpoh0v3odoi.execute-api.eu-central-1.amazonaws.comURLOut of Scope19:12
Feb 22, 2026
ChangeAssetCategoryScopeTime
Added*.timeseries.nlWILDCARDIn Scope00:42
Addedmarketplaceadmin.mendixcloud.comURLIn Scope00:42
Added*.mendix.comWILDCARDIn Scope00:42
Addedservicemanagement-accp.mendixcloud.comURLIn Scope00:42
Addeddealservice.mendixcloud.comURLIn Scope00:42
Addedmxbpconfig.mendixcloud.comURLIn Scope00:42
Addedhttp://o0pv3l7chl.execute-api.us-east-1.amazonaws.com/devURLOut of Scope00:42
Addedhttps://react.vis.pre2.usea1.devops.sws.siemens.com/sample/dist/index.htmlURLOut of Scope00:42
Added3dvis.mendixcloud.comURLIn Scope00:42
Addedslm.store.mendix.comURLIn Scope00:42
Addeddatalake-sync.apps.mendix.comURLIn Scope00:42
Addeddeskallocation.mendixcloud.comURLIn Scope00:42
Addedsimplate.mendixcloud.comURLIn Scope00:42
Addedmxpeople.mendixcloud.comURLIn Scope00:42
Added3s.mendixcloud.comURLIn Scope00:42
Addedk8s-licbrk-licenseb-11d216e80e-384217420.eu-central-1.elb.amazonaws.comURLIn Scope00:42
Addedgateway.us-east-1.sws.siemens.comURLIn Scope00:42
Addedcontributor.mendixcloud.comURLIn Scope00:42
Addednotification.billing.appservices.mendix.comURLIn Scope00:42
Addedevent.us-east-1.sws.siemens.comURLOut of Scope00:42
Addedpoh0v3odoi.execute-api.eu-central-1.amazonaws.comURLOut of Scope00:42
Addedemployees.mendix.comURLIn Scope00:42
Addeddataprivacy.mendixcloud.comURLIn Scope00:42
Addedalm.mendixcloud.comURLIn Scope00:42
Addedrevenuedatahub.mendixcloud.comURLIn Scope00:42
Addedprovisioning.servicemanagement.mendix.comURLIn Scope00:42
Added*.timeseries.comWILDCARDIn Scope00:42
Feb 21, 2026
ChangeAssetCategoryScopeTime
Added*.mendix.comWILDCARDIn Scope19:12
Addedgateway.us-east-1.sws.siemens.comURLIn Scope19:12
Addedservicemanagement-accp.mendixcloud.comURLIn Scope19:12
Added3dvis.mendixcloud.comURLIn Scope19:12
Addedslm.store.mendix.comURLIn Scope19:12
Addedcontributor.mendixcloud.comURLIn Scope19:12
Addeddealservice.mendixcloud.comURLIn Scope19:12
Addeddataprivacy.mendixcloud.comURLIn Scope19:12
Addeddatalake-sync.apps.mendix.comURLIn Scope19:12
Addedalm.mendixcloud.comURLIn Scope19:12
Addeddeskallocation.mendixcloud.comURLIn Scope19:12
Addedsimplate.mendixcloud.comURLIn Scope19:12
Addedmxpeople.mendixcloud.comURLIn Scope19:12
Addedemployees.mendix.comURLIn Scope19:12
Added3s.mendixcloud.comURLIn Scope19:12
Addedrevenuedatahub.mendixcloud.comURLIn Scope19:12
Addedmxbpconfig.mendixcloud.comURLIn Scope19:12
Addedprovisioning.servicemanagement.mendix.comURLIn Scope19:12
Addedk8s-licbrk-licenseb-11d216e80e-384217420.eu-central-1.elb.amazonaws.comURLIn Scope19:12
Added*.timeseries.comWILDCARDIn Scope19:12
Added*.timeseries.nlWILDCARDIn Scope19:12
Addedmarketplaceadmin.mendixcloud.comURLIn Scope19:12
Addednotification.billing.appservices.mendix.comURLIn Scope19:12
Addedevent.us-east-1.sws.siemens.comURLOut of Scope19:12
Addedhttp://o0pv3l7chl.execute-api.us-east-1.amazonaws.com/devURLOut of Scope19:12
Addedpoh0v3odoi.execute-api.eu-central-1.amazonaws.comURLOut of Scope19:12
Addedhttps://react.vis.pre2.usea1.devops.sws.siemens.com/sample/dist/index.htmlURLOut of Scope19:12