Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

monarch_money

HackerOneView on HackerOne
RawAI Enhanced
4
In Scope
0
Out of Scope
Scope Changes (12)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Added1459319841IOSIn Scope19:16
Addedcom.monarchmoney.mobileANDROIDIn Scope19:16
Addedwww.monarchmoney.comURLIn Scope19:16
Addedapp.monarchmoney.comURLIn Scope19:16
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addedwww.monarchmoney.comURLIn Scope00:45
Addedapp.monarchmoney.comURLIn Scope00:45
Added1459319841IOSIn Scope00:45
Addedcom.monarchmoney.mobileANDROIDIn Scope00:45
Feb 21, 2026
ChangeAssetCategoryScopeTime
Addedapp.monarchmoney.comURLIn Scope19:12
Added1459319841IOSIn Scope19:12
Addedcom.monarchmoney.mobileANDROIDIn Scope19:12
Addedwww.monarchmoney.comURLIn Scope19:12