Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
smartsheet_vdp
5
In Scope
6
Out of Scope
In-Scope Assets (5)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| api.smartsheet.com | URL | No | ||
| app.smartsheet.com | URL | No | ||
| com.smartsheet.android | ANDROID | No | ||
| com.smartsheet.smartsheet | IOS | No | - | |
| www.smartsheet.com | URL | No |
Out-of-Scope Assets (6)
| Asset | Category | Bounty | |
|---|---|---|---|
| community.smartsheet.com | URL | No | |
| developers.smartsheet.com | URL | No | |
| help.smartsheet.com | URL | No | |
| smartu.smartsheet.com | URL | No | |
| status.smartsheet.com | URL | No | |
| supportportal.smartsheet.com | URL | No |
Scope Changes (11)
Oct 29, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | com.smartsheet.android | ANDROID | In Scope | 17:24 |
| Added | com.smartsheet.smartsheet | IOS | In Scope | 17:24 |
| Added | api.smartsheet.com | URL | In Scope | 17:24 |
| Added | app.smartsheet.com | URL | In Scope | 17:24 |
| Added | www.smartsheet.com | URL | In Scope | 17:24 |
| Added | supportportal.smartsheet.com | URL | Out of Scope | 17:24 |
| Added | status.smartsheet.com | URL | Out of Scope | 17:24 |
| Added | smartu.smartsheet.com | URL | Out of Scope | 17:24 |
| Added | help.smartsheet.com | URL | Out of Scope | 17:24 |
| Added | developers.smartsheet.com | URL | Out of Scope | 17:24 |
| Added | community.smartsheet.com | URL | Out of Scope | 17:24 |