Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

servicenow-disclosure

HackerOneView on HackerOne

RawAI Enhanced

In Scope

Out of Scope

In-Scope Assets (3)

Asset	Category	Bounty	Quick Links
*.lightstep.com	WILDCARD	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.service-now.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.servicenow.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Scope Changes (9)

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	*.lightstep.com	WILDCARD	In Scope	19:14
Added	*.servicenow.com	WILDCARD	In Scope	19:14
Added	*.service-now.com	WILDCARD	In Scope	19:14

Feb 22, 2026

Change	Asset	Category	Scope	Time
Added	*.service-now.com	WILDCARD	In Scope	00:44
Added	*.lightstep.com	WILDCARD	In Scope	00:44
Added	*.servicenow.com	WILDCARD	In Scope	00:44

Feb 21, 2026

Change	Asset	Category	Scope	Time
Added	*.lightstep.com	WILDCARD	In Scope	19:12
Added	*.servicenow.com	URL	In Scope	19:12
Added	*.service-now.com	URL	In Scope	19:12