whoop_bug_bounty
8
In Scope
4
Out of Scope
In-Scope Assets (8)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| WHOOP 4.0 STRAP | OTHER | Yes | - | |
| WHOOP 5.0/MG STRAP | OTHER | Yes | - | |
| api.prod.whoop.com | URL | Yes | ||
| app.whoop.com | URL | Yes | ||
| com.whoop.android | ANDROID | Yes | ||
| com.whoop.iphone | IOS | Yes | - | |
| join.whoop.com | OTHER | Yes | - | |
| shop.whoop.com | URL | Yes |
Out-of-Scope Assets (4)
| Asset | Category | Bounty | |
|---|---|---|---|
| Azure AD, Google Drive, Link Sharing Websites | OTHER | No | |
| Credit/Debit Card Testing | OTHER | No | |
| Support System | OTHER | No | |
| okta.whoop.com | URL | No |
Scope Changes (32)
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | azure ad, google drive, link sharing websites | OTHER | Out of Scope | 19:20 |
| Added | credit/debit card testing | OTHER | Out of Scope | 19:20 |
| Added | com.whoop.iphone | IOS | In Scope | 19:20 |
| Added | com.whoop.android | ANDROID | In Scope | 19:20 |
| Added | whoop 4.0 strap | OTHER | In Scope | 19:20 |
| Added | shop.whoop.com | URL | In Scope | 19:20 |
| Added | whoop 5.0/mg strap | OTHER | In Scope | 19:20 |
| Added | api.prod.whoop.com | URL | In Scope | 19:20 |
| Added | app.whoop.com | URL | In Scope | 19:20 |
| Added | join.whoop.com | URL | In Scope | 19:20 |
| Added | support system | OTHER | Out of Scope | 19:20 |
| Added | okta.whoop.com | URL | Out of Scope | 19:20 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | com.whoop.iphone | IOS | In Scope | 00:48 |
| Added | whoop 4.0 strap | OTHER | In Scope | 00:48 |
| Added | join.whoop.com | URL | In Scope | 00:48 |
| Added | whoop 5.0/mg strap | OTHER | In Scope | 00:48 |
| Added | azure ad, google drive, link sharing websites | OTHER | Out of Scope | 00:48 |
| Added | com.whoop.android | ANDROID | In Scope | 00:48 |
| Added | api.prod.whoop.com | URL | In Scope | 00:48 |
| Added | app.whoop.com | URL | In Scope | 00:48 |
| Added | shop.whoop.com | URL | In Scope | 00:48 |
| Added | support system | OTHER | Out of Scope | 00:48 |
| Added | okta.whoop.com | URL | Out of Scope | 00:48 |
| Added | credit/debit card testing | OTHER | Out of Scope | 00:48 |
Feb 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | com.whoop.iphone | IOS | In Scope | 21:40 |
| Removed | com.whoop.android | ANDROID | In Scope | 21:40 |
| Removed | whoop 4.0 strap | OTHER | In Scope | 21:40 |
| Removed | api.prod.whoop.com | URL | In Scope | 21:40 |
| Removed | app.whoop.com | URL | In Scope | 21:40 |
| Removed | join.whoop.com | OTHER | In Scope | 21:40 |
| Removed | shop.whoop.com | URL | In Scope | 21:40 |
| Removed | whoop 5.0/mg strap | OTHER | In Scope | 21:40 |