Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

xp_inc_vdp

HackerOneView on HackerOne
RawAI Enhanced
14
In Scope
0
Out of Scope
Scope Changes (14)
Oct 27, 2026
ChangeAssetCategoryScopeTime
Addedxpi.com.brURLIn Scope17:24
Addedrico.com.vcURLIn Scope17:24
Addedxpempresas.com.brURLIn Scope17:24
Addedexpertxp.com.brURLIn Scope17:24
Addedinfomoney.com.brURLIn Scope17:24
Addedclear.com.brURLIn Scope17:24
Addedmodalmais.com.brURLIn Scope17:24
Addedxpeducacao.com.brURLIn Scope17:24
Addedhttps://play.google.com/store/apps/details?id=br.com.xp.carteiraANDROIDIn Scope17:24
Addedhttps://apps.apple.com/br/app/xp-investimentos/id1300713021IOSIn Scope17:24
Addedhttps://play.google.com/store/apps/details?id=br.com.xpinc.clear.app.androidANDROIDIn Scope17:24
Addedhttps://apps.apple.com/br/app/clear/id6447694643IOSIn Scope17:24
Addedhttps://play.google.com/store/apps/details?id=br.com.xpinc.xpempresasANDROIDIn Scope17:24
Addedhttps://apps.apple.com/br/app/xp-empresas-conta-pj/id1566254578IOSIn Scope17:24