Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

render

HackerOneView on HackerOne

RawAI Enhanced

In Scope

Out of Scope

In-Scope Assets (3)

Asset	Category	Bounty	Quick Links
Render Infrastructure	OTHER	No	-
dashboard.render.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
render.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (2)

Asset	Category	Bounty
Support chat	OTHER	No
onrender.com	URL	No

Scope Changes (14)

Mar 16, 2026

Change	Asset	Category	Scope	Time
Added	onrender.com	URL	Out of Scope	21:40
Added	onrender.com	URL	Out of Scope	21:40

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	support chat	OTHER	Out of Scope	19:16
Added	render.com	URL	In Scope	19:16
Added	dashboard.render.com	URL	In Scope	19:16
Added	render infrastructure	OTHER	In Scope	19:16

Feb 22, 2026

Change	Asset	Category	Scope	Time
Added	render.com	URL	In Scope	00:45
Added	dashboard.render.com	URL	In Scope	00:45
Added	render infrastructure	OTHER	In Scope	00:45
Added	support chat	OTHER	Out of Scope	00:45

Feb 21, 2026

Change	Asset	Category	Scope	Time
Added	render.com	URL	In Scope	19:12
Added	dashboard.render.com	URL	In Scope	19:12
Added	render infrastructure	OTHER	In Scope	19:12
Added	support chat	OTHER	Out of Scope	19:12