Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

us-department-of-state

HackerOneView on HackerOne
RawAI Enhanced
24
In Scope
0
Out of Scope
In-Scope Assets (24)
AssetCategoryBountyQuick Links
*.AMERICA.GOVWILDCARDNo
*.DEVTESTFAN1.GOVWILDCARDNo
*.ELGUARDIA.NETWILDCARDNo
*.FAN.GOVWILDCARDNo
*.FSGB.GOVWILDCARDNo
*.IAWG.GOVWILDCARDNo
*.IBWC.GOVWILDCARDNo
*.OSAC.GOVWILDCARDNo
*.PEPFAR.GOVWILDCARDNo
*.PREPRODFAN.GOVWILDCARDNo
*.REWARDSFORJUSTICE.NETWILDCARDNo
*.SECURITYTESTFAN.GOVWILDCARDNo
*.STATE.GOVWILDCARDNo
*.SUPPORTFAN.GOVWILDCARDNo
*.USCONSULATE.GOVWILDCARDNo
*.USDOSCLOUD.GOVWILDCARDNo
*.USEMBASSY.GOVWILDCARDNo
*.USMISSION.GOVWILDCARDNo
*.ustraveldocs.comWILDCARDNo
*.usvisascheduling.comWILDCARDNo
https://*.usvisaappt.comWILDCARDNo
https://ais.usvisa-info.comURLNo
https://casadmin.peckham.orgURLNo
https://github.com/USStateDeptCODENo-
Scope Changes (72)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Added*.osac.govWILDCARDIn Scope19:14
Added*.ibwc.govWILDCARDIn Scope19:14
Added*.fan.govWILDCARDIn Scope19:14
Addedhttps://github.com/USStateDeptOTHERIn Scope19:14
Added*.elguardia.netWILDCARDIn Scope19:14
Added*.supportfan.govWILDCARDIn Scope19:14
Added*.securitytestfan.govWILDCARDIn Scope19:14
Added*.iawg.govWILDCARDIn Scope19:14
Added*.fsgb.govWILDCARDIn Scope19:14
Added*.devtestfan1.govWILDCARDIn Scope19:14
Added*.america.govWILDCARDIn Scope19:14
Added*.usvisaappt.comWILDCARDIn Scope19:14
Addedhttps://ais.usvisa-info.comURLIn Scope19:14
Added*.ustraveldocs.comWILDCARDIn Scope19:14
Added*.usembassy.govWILDCARDIn Scope19:14
Added*.usconsulate.govWILDCARDIn Scope19:14
Addedhttps://casadmin.peckham.orgURLIn Scope19:14
Added*.usvisascheduling.comWILDCARDIn Scope19:14
Added*.usmission.govWILDCARDIn Scope19:14
Added*.rewardsforjustice.netWILDCARDIn Scope19:14
Added*.usdoscloud.govWILDCARDIn Scope19:14
Added*.pepfar.govWILDCARDIn Scope19:14
Added*.state.govWILDCARDIn Scope19:14
Added*.preprodfan.govWILDCARDIn Scope19:14
Feb 22, 2026
ChangeAssetCategoryScopeTime
Added*.rewardsforjustice.netWILDCARDIn Scope00:44
Added*.fan.govWILDCARDIn Scope00:44
Addedhttps://github.com/USStateDeptOTHERIn Scope00:44
Addedhttps://ais.usvisa-info.comURLIn Scope00:44
Added*.america.govWILDCARDIn Scope00:44
Added*.fsgb.govWILDCARDIn Scope00:44
Added*.pepfar.govWILDCARDIn Scope00:44
Added*.supportfan.govWILDCARDIn Scope00:44
Added*.usmission.govWILDCARDIn Scope00:44
Added*.usvisascheduling.comWILDCARDIn Scope00:44
Added*.ibwc.govWILDCARDIn Scope00:44
Added*.preprodfan.govWILDCARDIn Scope00:44
Added*.securitytestfan.govWILDCARDIn Scope00:44
Added*.state.govWILDCARDIn Scope00:44
Added*.usdoscloud.govWILDCARDIn Scope00:44
Added*.usembassy.govWILDCARDIn Scope00:44
Added*.elguardia.netWILDCARDIn Scope00:44
Added*.usvisaappt.comWILDCARDIn Scope00:44
Added*.devtestfan1.govWILDCARDIn Scope00:44
Added*.iawg.govWILDCARDIn Scope00:44
Added*.osac.govWILDCARDIn Scope00:44
Added*.usconsulate.govWILDCARDIn Scope00:44
Added*.ustraveldocs.comWILDCARDIn Scope00:44
Addedhttps://casadmin.peckham.orgURLIn Scope00:44
Feb 21, 2026
ChangeAssetCategoryScopeTime
Added*.america.govWILDCARDIn Scope19:12
Addedhttps://casadmin.peckham.orgURLIn Scope19:12
Added*.usvisaappt.comWILDCARDIn Scope19:12
Addedhttps://ais.usvisa-info.comURLIn Scope19:12
Added*.ustraveldocs.comWILDCARDIn Scope19:12
Added*.usvisascheduling.comWILDCARDIn Scope19:12
Added*.rewardsforjustice.netWILDCARDIn Scope19:12
Addedhttps://github.com/USStateDeptCODEIn Scope19:12
Added*.elguardia.netWILDCARDIn Scope19:12
Added*.usmission.govWILDCARDIn Scope19:12
Added*.usembassy.govWILDCARDIn Scope19:12
Added*.usdoscloud.govWILDCARDIn Scope19:12
Added*.usconsulate.govWILDCARDIn Scope19:12
Added*.supportfan.govWILDCARDIn Scope19:12
Added*.state.govWILDCARDIn Scope19:12
Added*.securitytestfan.govWILDCARDIn Scope19:12
Added*.preprodfan.govWILDCARDIn Scope19:12
Added*.pepfar.govWILDCARDIn Scope19:12
Added*.osac.govWILDCARDIn Scope19:12
Added*.ibwc.govWILDCARDIn Scope19:12
Added*.iawg.govWILDCARDIn Scope19:12
Added*.fsgb.govWILDCARDIn Scope19:12
Added*.fan.govWILDCARDIn Scope19:12
Added*.devtestfan1.govWILDCARDIn Scope19:12