Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
tbs-sct
15
In Scope
2
Out of Scope
In-Scope Assets (15)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.cds-snc.ca | WILDCARD | No | ||
| *.cdssandbox.xyz | WILDCARD | No | ||
| *.digital.canada.ca | WILDCARD | No | ||
| *.notification.canada.ca | WILDCARD | No | ||
| *.numerique.canada.ca | WILDCARD | No | ||
| api.signin-connexion.canada.ca | URL | No | ||
| app.signin-connexion.canada.ca | URL | No | ||
| articles.alpha.canada.ca | URL | No | ||
| auth.signin-connexion.canada.ca | URL | No | ||
| delivrance-verification.alpha.canada.ca | URL | No | ||
| design-system.alpha.canada.ca | URL | No | ||
| forms-formulaires.alpha.canada.ca | URL | No | ||
| gciv-dvgc.alpha.canada.ca | URL | No | ||
| issue-verify.alpha.canada.ca | URL | No | ||
| talent.canada.ca | URL | No |
Out-of-Scope Assets (2)
| Asset | Category | Bounty | |
|---|---|---|---|
| All other assets | OTHER | No | |
| blawx.cdssandbox.xyz | URL | No |
Scope Changes (34)
Mar 11, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | all other assets | OTHER | Out of Scope | 11:40 |
| Added | all other assets | OTHER | Out of Scope | 11:40 |
Mar 9, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *.cdssandbox.xyz | WILDCARD | In Scope | 20:40 |
| Added | *.cds-snc.ca | WILDCARD | In Scope | 20:40 |
| Added | design-system.alpha.canada.ca | URL | In Scope | 20:40 |
| Added | articles.alpha.canada.ca | URL | In Scope | 20:40 |
| Added | forms-formulaires.alpha.canada.ca | URL | In Scope | 20:40 |
| Added | auth.signin-connexion.canada.ca | URL | In Scope | 20:40 |
| Added | app.signin-connexion.canada.ca | URL | In Scope | 20:40 |
| Added | api.signin-connexion.canada.ca | URL | In Scope | 20:40 |
| Added | issue-verify.alpha.canada.ca | URL | In Scope | 20:40 |
| Added | delivrance-verification.alpha.canada.ca | URL | In Scope | 20:40 |
| Added | gciv-dvgc.alpha.canada.ca | URL | In Scope | 20:40 |
| Added | *.digital.canada.ca | WILDCARD | In Scope | 20:40 |
| Added | talent.canada.ca | URL | In Scope | 20:40 |
| Added | blawx.cdssandbox.xyz | URL | Out of Scope | 20:40 |
| Added | issue-verify.alpha.canada.ca | URL | In Scope | 20:40 |
| Added | *.numerique.canada.ca | WILDCARD | In Scope | 20:40 |
| Added | gciv-dvgc.alpha.canada.ca | URL | In Scope | 20:40 |
| Added | talent.canada.ca | URL | In Scope | 20:40 |
| Added | *.cdssandbox.xyz | WILDCARD | In Scope | 20:40 |
| Added | *.cds-snc.ca | WILDCARD | In Scope | 20:40 |
| Added | articles.alpha.canada.ca | URL | In Scope | 20:40 |
| Added | *.digital.canada.ca | WILDCARD | In Scope | 20:40 |
| Added | *.notification.canada.ca | WILDCARD | In Scope | 20:40 |
| Added | forms-formulaires.alpha.canada.ca | URL | In Scope | 20:40 |
| Added | blawx.cdssandbox.xyz | URL | Out of Scope | 20:40 |
| Added | *.numerique.canada.ca | WILDCARD | In Scope | 20:40 |
| Added | auth.signin-connexion.canada.ca | URL | In Scope | 20:40 |
| Added | api.signin-connexion.canada.ca | URL | In Scope | 20:40 |
| Added | design-system.alpha.canada.ca | URL | In Scope | 20:40 |
| Added | app.signin-connexion.canada.ca | URL | In Scope | 20:40 |
| Added | delivrance-verification.alpha.canada.ca | URL | In Scope | 20:40 |
| Added | *.notification.canada.ca | WILDCARD | In Scope | 20:40 |