Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
singlestore
14
In Scope
9
Out of Scope
In-Scope Assets (14)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.cloud.singlestore.com | WILDCARD | No | ||
| *.svc.singlestore.com | WILDCARD | No | ||
| api.singlestore.com | URL | No | ||
| auth.singlestore.com | URL | No | ||
| authsvc.singlestore.com | URL | No | ||
| backend.singlestore.com | URL | No | ||
| https://portal.singlestore.com/ | URL | No | ||
| https://portal.singlestore.com/admin | URL | No | ||
| mcp.singlestore.com | URL | No | ||
| nimbus-gateway.singlestore.com | URL | No | ||
| phone-home.singlestore.com | URL | No | ||
| singlestore-operator | BINARY | No | - | |
| singlestore.com | URL | No | ||
| singlestoredb-server | BINARY | No | - |
Out-of-Scope Assets (9)
| Asset | Category | Bounty | |
|---|---|---|---|
| *.ito.singlestore.com | WILDCARD | No | |
| *.labs.singlestore.com | WILDCARD | No | |
| bifrost.singlestore.com | URL | No | |
| docs.singlestore.com | URL | No | |
| login.internal.singlestore.com | URL | No | |
| status.singlestore.com | URL | No | |
| studio.singlestore.com | URL | No | |
| support.singlestore.com | URL | No | |
| training.singlestore.com | URL | No |
Scope Changes (116)
Jun 17, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | backend.singlestore.com | URL | In Scope | 09:27 |
| Added | *.svc.singlestore.com | WILDCARD | In Scope | 09:27 |
| Added | nimbus-gateway.singlestore.com | URL | In Scope | 09:27 |
| Added | phone-home.singlestore.com | URL | In Scope | 09:27 |
| Added | *.cloud.singlestore.com | WILDCARD | In Scope | 09:27 |
| Added | mcp.singlestore.com | URL | In Scope | 09:27 |
| Added | nimbus-gateway.singlestore.com | URL | In Scope | 09:27 |
| Added | *.cloud.singlestore.com | WILDCARD | In Scope | 09:27 |
| Added | *.svc.singlestore.com | WILDCARD | In Scope | 09:27 |
| Added | phone-home.singlestore.com | URL | In Scope | 09:27 |
| Added | mcp.singlestore.com | URL | In Scope | 09:27 |
| Removed | bottle-dup.*.svc.singlestore.com | WILDCARD | In Scope | 08:27 |
| Removed | singlestore-operator | BINARY | In Scope | 08:27 |
| Removed | apps.*.svc.singlestore.com | WILDCARD | In Scope | 08:27 |
| Removed | nova-gateway.*.svc.singlestore.com | WILDCARD | In Scope | 08:27 |
| Removed | api-dev.singlestore.com | URL | Out of Scope | 08:27 |
| Removed | nimbus-gateway.singlestore.com | URL | In Scope | 08:27 |
| Removed | bottle-api.*.svc.singlestore.com | WILDCARD | In Scope | 08:27 |
| Removed | cell-agent.*.svc.singlestore.com | WILDCARD | In Scope | 08:27 |
| Removed | notebook-gateway.*.svc.singlestore.com | WILDCARD | In Scope | 08:27 |
| Removed | ai.*.svc.singlestore.com | WILDCARD | In Scope | 08:27 |
| Removed | phone-home.singlestore.com | URL | In Scope | 08:27 |
| Removed | backend-dev.singlestore.com | URL | Out of Scope | 08:27 |
| Removed | authsvc-staging.singlestore.com | URL | Out of Scope | 08:27 |
| Removed | https://portal-staging.dev.helios.singlestore.com/ | URL | Out of Scope | 08:27 |
Mar 6, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | singlestore-operator | BINARY | In Scope | 11:40 |
| Added | singlestoredb-server | BINARY | In Scope | 11:40 |
| Added | singlestoredb-server | BINARY | In Scope | 11:40 |
| Added | singlestore-operator | BINARY | In Scope | 11:40 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *.ito.singlestore.com | WILDCARD | Out of Scope | 19:19 |
| Added | https://portal-staging.dev.helios.singlestore.com/ | URL | Out of Scope | 19:19 |
| Added | https://portal.singlestore.com/ | URL | In Scope | 19:19 |
| Added | singlestore.com | URL | In Scope | 19:19 |
| Added | studio.singlestore.com | URL | Out of Scope | 19:19 |
| Added | backend-dev.singlestore.com | URL | Out of Scope | 19:19 |
| Added | authsvc-staging.singlestore.com | URL | Out of Scope | 19:19 |
| Added | bottle-api.*.svc.singlestore.com | WILDCARD | In Scope | 19:19 |
| Added | apps.*.svc.singlestore.com | WILDCARD | In Scope | 19:19 |
| Added | docs.singlestore.com | URL | Out of Scope | 19:19 |
| Added | auth.singlestore.com | URL | In Scope | 19:19 |
| Added | api.singlestore.com | URL | In Scope | 19:19 |
| Added | cell-agent.*.svc.singlestore.com | WILDCARD | In Scope | 19:19 |
| Added | ai.*.svc.singlestore.com | WILDCARD | In Scope | 19:19 |
| Added | phone-home.singlestore.com | URL | In Scope | 19:19 |
| Added | api-dev.singlestore.com | URL | Out of Scope | 19:19 |
| Added | status.singlestore.com | URL | Out of Scope | 19:19 |
| Added | nimbus-gateway.singlestore.com | URL | In Scope | 19:19 |
| Added | bifrost.singlestore.com | URL | Out of Scope | 19:19 |
| Added | login.internal.singlestore.com | URL | Out of Scope | 19:19 |
| Added | https://portal.singlestore.com/admin | URL | In Scope | 19:19 |
| Added | backend.singlestore.com | URL | In Scope | 19:19 |
| Added | notebook-gateway.*.svc.singlestore.com | WILDCARD | In Scope | 19:19 |
| Added | nova-gateway.*.svc.singlestore.com | WILDCARD | In Scope | 19:19 |
| Added | support.singlestore.com | URL | Out of Scope | 19:19 |
| Added | authsvc.singlestore.com | URL | In Scope | 19:19 |
| Added | bottle-dup.*.svc.singlestore.com | WILDCARD | In Scope | 19:19 |
| Added | training.singlestore.com | URL | Out of Scope | 19:19 |
| Added | *.labs.singlestore.com | WILDCARD | Out of Scope | 19:19 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://portal.singlestore.com/ | URL | In Scope | 00:48 |
| Added | apps.*.svc.singlestore.com | WILDCARD | In Scope | 00:48 |
| Added | phone-home.singlestore.com | URL | In Scope | 00:48 |
| Added | api-dev.singlestore.com | URL | Out of Scope | 00:48 |
| Added | backend.singlestore.com | URL | In Scope | 00:48 |
| Added | ai.*.svc.singlestore.com | WILDCARD | In Scope | 00:48 |
| Added | *.ito.singlestore.com | WILDCARD | Out of Scope | 00:48 |
| Added | api.singlestore.com | URL | In Scope | 00:48 |
| Added | bottle-dup.*.svc.singlestore.com | WILDCARD | In Scope | 00:48 |
| Added | backend-dev.singlestore.com | URL | Out of Scope | 00:48 |
| Added | *.labs.singlestore.com | WILDCARD | Out of Scope | 00:48 |
| Added | https://portal.singlestore.com/admin | URL | In Scope | 00:48 |
| Added | cell-agent.*.svc.singlestore.com | WILDCARD | In Scope | 00:48 |
| Added | docs.singlestore.com | URL | Out of Scope | 00:48 |
| Added | authsvc-staging.singlestore.com | URL | Out of Scope | 00:48 |
| Added | nova-gateway.*.svc.singlestore.com | WILDCARD | In Scope | 00:48 |
| Added | https://portal-staging.dev.helios.singlestore.com/ | URL | Out of Scope | 00:48 |
| Added | support.singlestore.com | URL | Out of Scope | 00:48 |
| Added | training.singlestore.com | URL | Out of Scope | 00:48 |
| Added | status.singlestore.com | URL | Out of Scope | 00:48 |
| Added | notebook-gateway.*.svc.singlestore.com | WILDCARD | In Scope | 00:48 |
| Added | bottle-api.*.svc.singlestore.com | WILDCARD | In Scope | 00:48 |
| Added | login.internal.singlestore.com | URL | Out of Scope | 00:48 |
| Added | singlestore.com | URL | In Scope | 00:48 |
| Added | nimbus-gateway.singlestore.com | URL | In Scope | 00:48 |
| Added | auth.singlestore.com | URL | In Scope | 00:48 |
| Added | authsvc.singlestore.com | URL | In Scope | 00:48 |
| Added | studio.singlestore.com | URL | Out of Scope | 00:48 |
| Added | bifrost.singlestore.com | URL | Out of Scope | 00:48 |
Feb 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | singlestore.com | URL | In Scope | 19:12 |
| Added | authsvc.singlestore.com | URL | In Scope | 19:12 |
| Added | cell-agent.*.svc.singlestore.com | WILDCARD | In Scope | 19:12 |
| Added | notebook-gateway.*.svc.singlestore.com | WILDCARD | In Scope | 19:12 |
| Added | bottle-api.*.svc.singlestore.com | WILDCARD | In Scope | 19:12 |
| Added | bottle-dup.*.svc.singlestore.com | WILDCARD | In Scope | 19:12 |
| Added | nova-gateway.*.svc.singlestore.com | WILDCARD | In Scope | 19:12 |
| Added | ai.*.svc.singlestore.com | WILDCARD | In Scope | 19:12 |
| Added | apps.*.svc.singlestore.com | WILDCARD | In Scope | 19:12 |
| Added | nimbus-gateway.singlestore.com | URL | In Scope | 19:12 |
| Added | phone-home.singlestore.com | URL | In Scope | 19:12 |
| Added | https://portal-staging.dev.helios.singlestore.com/ | URL | Out of Scope | 19:12 |
| Added | api-dev.singlestore.com | URL | Out of Scope | 19:12 |
| Added | studio.singlestore.com | URL | Out of Scope | 19:12 |
| Added | support.singlestore.com | URL | Out of Scope | 19:12 |
| Added | training.singlestore.com | URL | Out of Scope | 19:12 |
| Added | docs.singlestore.com | URL | Out of Scope | 19:12 |
| Added | backend-dev.singlestore.com | URL | Out of Scope | 19:12 |
| Added | authsvc-staging.singlestore.com | URL | Out of Scope | 19:12 |
| Added | *.labs.singlestore.com | WILDCARD | Out of Scope | 19:12 |
| Added | bifrost.singlestore.com | URL | Out of Scope | 19:12 |
| Added | *.ito.singlestore.com | WILDCARD | Out of Scope | 19:12 |
| Added | login.internal.singlestore.com | URL | Out of Scope | 19:12 |
| Added | status.singlestore.com | URL | Out of Scope | 19:12 |
| Added | https://portal.singlestore.com/ | URL | In Scope | 19:12 |
| Added | https://portal.singlestore.com/admin | URL | In Scope | 19:12 |
| Added | auth.singlestore.com | URL | In Scope | 19:12 |
| Added | api.singlestore.com | URL | In Scope | 19:12 |
| Added | backend.singlestore.com | URL | In Scope | 19:12 |