Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

recreation_gov_vdp

HackerOneView on HackerOne
RawAI Enhanced
7
In Scope
0
Out of Scope
Scope Changes (21)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedcom.bah.r1sIOSIn Scope19:20
Addedmanage-cdn.recreation.govURLIn Scope19:20
Addedcdn.recreation.govURLIn Scope19:20
Addedcom.bah.r1smobileANDROIDIn Scope19:20
Addedwww.recreation.govURLIn Scope19:20
Addedrecreation.govURLIn Scope19:20
Addedmanage.recreation.govURLIn Scope19:20
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addedcdn.recreation.govURLIn Scope00:48
Addedmanage.recreation.govURLIn Scope00:48
Addedrecreation.govURLIn Scope00:48
Addedwww.recreation.govURLIn Scope00:48
Addedmanage-cdn.recreation.govURLIn Scope00:48
Addedcom.bah.r1sIOSIn Scope00:48
Addedcom.bah.r1smobileANDROIDIn Scope00:48
Feb 21, 2026
ChangeAssetCategoryScopeTime
Addedmanage.recreation.govURLIn Scope19:13
Addedcom.bah.r1smobileANDROIDIn Scope19:13
Addedcom.bah.r1sIOSIn Scope19:13
Addedmanage-cdn.recreation.govURLIn Scope19:13
Addedcdn.recreation.govURLIn Scope19:13
Addedwww.recreation.govURLIn Scope19:13
Addedrecreation.govURLIn Scope19:13