Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
liferay/liferay-vdp
7
In Scope
2
Out of Scope
In-Scope Assets (7)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.liferay.com | WILDCARD | No | ||
| console.liferay.cloud | URL | No | ||
| learn.liferay.com | URL | No | ||
| liferay.dev | URL | No | ||
| marketplace.liferay.com | URL | No | ||
| support.liferay.com | URL | No | ||
| www.liferay.com | URL | No |
Out-of-Scope Assets (2)
| Asset | Category | Bounty | |
|---|---|---|---|
| *.lxc.liferay.com | WILDCARD | No | |
| login.liferay.com | URL | No |
Scope Changes (18)
Apr 14, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *.lxc.liferay.com | WILDCARD | Out of Scope | 09:21 |
| Added | *.lxc.liferay.com | WILDCARD | Out of Scope | 09:21 |
Mar 12, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | liferay.dev | URL | In Scope | 15:39 |
| Added | learn.liferay.com | URL | In Scope | 15:39 |
| Added | support.liferay.com | URL | In Scope | 15:39 |
| Added | console.liferay.cloud | URL | In Scope | 15:39 |
| Added | *.liferay.com | WILDCARD | In Scope | 15:39 |
| Added | login.liferay.com | URL | Out of Scope | 15:39 |
| Added | login.liferay.com | URL | Out of Scope | 15:39 |
| Added | marketplace.liferay.com | URL | In Scope | 15:39 |
| Added | liferay.dev | URL | In Scope | 15:39 |
| Added | learn.liferay.com | URL | In Scope | 15:39 |
| Added | support.liferay.com | URL | In Scope | 15:39 |
| Added | marketplace.liferay.com | URL | In Scope | 15:39 |
| Added | console.liferay.cloud | URL | In Scope | 15:39 |
| Added | *.liferay.com | WILDCARD | In Scope | 15:39 |
| Added | www.liferay.com | URL | In Scope | 15:39 |
| Added | www.liferay.com | URL | In Scope | 15:39 |