Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

ovoenergy/ovovdp

IntigritiView on Intigriti

RawAI Enhanced

In Scope

232

Out of Scope

In-Scope Assets (13)

Asset	Category	Bounty	Quick Links
*.bonnetapps.com	WILDCARD	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
*.boostpower.co.uk	WILDCARD	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
*.corgihomeheat.co.uk	WILDCARD	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
*.corgihomeplan.co.uk	WILDCARD	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
*.corgihomeplan.uk	WILDCARD	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
*.gridsvc.net	WILDCARD	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
*.joinbonnet.com	WILDCARD	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
*.ovo-live.com	WILDCARD	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
*.ovo-sso.com	WILDCARD	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
*.ovo.com	WILDCARD	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
*.ovoener.gy	WILDCARD	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
*.ovoenergy.com	WILDCARD	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
*.ovotech.org.uk	WILDCARD	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal

Out-of-Scope Assets (232)

Asset	Category	Bounty
*.ec.ovotech.org.uk	WILDCARD	No
*.nonprod.oot.ovotech.org.uk	WILDCARD	No
*.oisl.gg	WILDCARD	No
*.prod.oot.ovotech.org.uk	WILDCARD	No
account-activation-uat.ovotech.org.uk	URL	No
account-transaction.rise.gcp.bedrock.ovotech.org.uk	URL	No
account-transaction.rise.gcp.nonprod.bedrock.ovotech.org.uk	URL	No
accounts-internal-nonprod.ovotech.org.uk	URL	No
accounts-internal-prod.ovotech.org.uk	URL	No
accounts-nonprod.ovotech.org.uk	URL	No
accounts-prod.ovotech.org.uk	URL	No
admin.id-uat.ovotech.org.uk	URL	No
admin.internal.id-uat.ovotech.org.uk	URL	No
aiven-kafka-users-nonprod.ovotech.org.uk	URL	No
aiven-kafka-users.ovotech.org.uk	URL	No
api.he.ovotech.org.uk	URL	No
api.prd.meters.ovotech.org.uk	URL	No
api.prd.payments.ovotech.org.uk	URL	No
api.test.he.ovotech.org.uk	URL	No
api.uat.meters.ovotech.org.uk	URL	No
api.uat.payments.ovotech.org.uk	URL	No
appsfwd.ovoenergy.com	URL	No
argocd.metering-shared-non-prod-aus.ovotech.org.uk	URL	No
argocd.metering-shared-non-prod.ovotech.org.uk	URL	No
argocd.metering-shared-prod.ovotech.org.uk	URL	No
argocd.metering-shared-sandbox.ovotech.org.uk	URL	No
argocd.metering-shared-test.ovotech.org.uk	URL	No
artemis.ovotech.org.uk	URL	No
askovo.net	URL	No
asp-nonprod.ovotech.org.uk	URL	No
asp-prod.ovotech.org.uk	URL	No
auth-green.id-uat.ovotech.org.uk	URL	No
auth-green.internal.id-uat.ovotech.org.uk	URL	No
auth-internal.id-uat.ovotech.org.uk	URL	No
auth-retail.ovoenergy.com	URL	No
auth-www.ovoenergy.com	URL	No
auth.id-uat.ovotech.org.uk	URL	No
auth.id.ovotech.org.uk	URL	No
auth.internal.id-uat.ovotech.org.uk	URL	No
auth0.id-uat.ovotech.org.uk	URL	No
aws.ovotech.org.uk	URL	No
bast-aus.ovotech.org.uk	URL	No
bast-load-test.ovotech.org.uk	URL	No
bast-test-aus.ovotech.org.uk	URL	No
bast-uat-aus.ovotech.org.uk	URL	No
bast-uat.ovotech.org.uk	URL	No
bast.ovotech.org.uk	URL	No
bws-nonprod.ovotech.org.uk	URL	No
bws-sandbox.ovotech.org.uk	URL	No
bws-testing.ovotech.org.uk	URL	No
bws.ovotech.org.uk	URL	No
cctv-mgr.ovoenergy.com	URL	No
cev.ovoenergy.com	URL	No
cheque-payouts.prd.pace.ovotech.org.uk	URL	No
cheque-payouts.uat.pace.ovotech.org.uk	URL	No
cip.ovotech.org.uk	URL	No
cloudquery-grafana.seceng-prod-aws.ovotech.org.uk	URL	No
cms-flags.prd.pace.ovotech.org.uk	URL	No
cms-flags.uat.pace.ovotech.org.uk	URL	No
contract-update-service.prd.ec.ovotech.org.uk	URL	No
contract-update-service.uat.ec.ovotech.org.uk	URL	No
contracts-api.*.ec.ovotech.org.uk	WILDCARD	No
contracts-api.prd.ec.ovotech.org.uk	URL	No
contracts-api.uat.ec.ovotech.org.uk	URL	No
core-billing.gcp.nonprod.bedrock.ovotech.org.uk	URL	No
cost-usage.ovotech.org.uk	URL	No
data-availability.gcp.bedrock.ovotech.org.uk	URL	No
data-availability.gcp.nonprod.bedrock.ovotech.org.uk	URL	No
developer.ovotech.org.uk	URL	No
direct-debit-review-exemption.prd.pace.ovotech.org.uk	URL	No
direct-debit-review-exemption.uat.pace.ovotech.org.uk	URL	No
direct-debit-review.prd.pace.ovotech.org.uk	URL	No
direct-debit-review.uat.pace.ovotech.org.uk	URL	No
documentum.ovoenergy.com	URL	No
ec.ovotech.org.uk	URL	No
ecomms.ovoenergy.com	URL	No
eng-svc.ovotech.org.uk	URL	No
engineering-handbook.ovotech.org.uk	URL	No
estimation.prd.rac.ovotech.org.uk	URL	No
estimation.uat.randc.ovotech.org.uk	URL	No
fakeidserver.ovotech.org.uk	URL	No
flow-platform.ovotech.org.uk	URL	No
fortivpn.ovoenergy.com	URL	No
forum.ovoenergy.com	URL	No
frontend-api.prod.usage.ovotech.org.uk	URL	No
frontend-api.uat.usage.ovotech.org.uk	URL	No
greeninstaller.co.uk	URL	No
hackable-lenny.com	URL	No
hackable-sarge.com	URL	No
hackable-slink.com	URL	No
hackable-woody.com	URL	No
homemoves-nonprod.ovotech.org.uk	URL	No
homemoves-prod.ovotech.org.uk	URL	No
http://vp-alexandria.gridsvc.net/	URL	No
id-oot.dev.ovotech.org.uk	URL	No
id-uat.ovotech.org.uk	URL	No
impulsive.ovotech.org.uk	URL	No
infosec-audit.ovotech.org.uk	URL	No
internal.id-test.ovotech.org.uk	URL	No
internal.id-uat.ovotech.org.uk	URL	No
internal.nonprod.tardis.ovotech.org.uk	URL	No
internal.prod.tardis.ovotech.org.uk	URL	No
ipam.ovotech.org.uk	URL	No
jaws-nonprod.ovotech.org.uk	URL	No
jaws-prod.ovotech.org.uk	URL	No
jaws-sandbox.ovotech.org.uk	URL	No
jaws-testing.ovotech.org.uk	URL	No
kafka-connect-fintxns.prd.pace.ovotech.org.uk	URL	No
kafka-connect-fintxns.prod.pace.ovotech.org.uk	URL	No
kafka-connect-fintxns.uat.pace.ovotech.org.uk	URL	No
keg-tap-nonprod.ovotech.org.uk	URL	No
learn.ovo.com	URL	No
lightning.ovoenergy.com	URL	No
load-test-event.test-tap-team.gcp.nonprod.bedrock.ovotech.org.uk	URL	No
log.prd.mon.ovotech.org.uk	URL	No
log.uat.mon.ovotech.org.uk	URL	No
login-aggregator.internal.id-uat.ovotech.org.uk	URL	No
login.internal.id-uat.ovotech.org.uk	URL	No
manual-readings.uat.randc.ovotech.org.uk	URL	No
manual-reads.prd.rac.ovotech.org.uk	URL	No
mon.ovotech.org.uk	URL	No
move-ins.nonprod.homemoves.ovotech.org.uk	URL	No
move-ins.prod.homemoves.ovotech.org.uk	URL	No
mq01.dev.ptl.ovotech.org.uk	URL	No
nonprod.cip.ovotech.org.uk	URL	No
nonprod.flow-platform.ovotech.org.uk	URL	No
nonprod.growth.ovotech.org.uk	URL	No
nonprod.oot.ovotech.org.uk	URL	No
nonprod.tardis.ovotech.org.uk	URL	No
notification-service-public.ovotech.org.uk	URL	No
notification-service-uat-public.ovotech.org.uk	URL	No
notification-service-uat.ovotech.org.uk	URL	No
notification-service.ovotech.org.uk	URL	No
oot.ovotech.org.uk	URL	No
orion-bolton-service.prd.props.ovotech.org.uk	URL	No
orion-bolton-service.uat.props.ovotech.org.uk	URL	No
orion-onboarding-uat.ovotech.org.uk	URL	No
orion-onboarding.ovotech.org.uk	URL	No
ovo-comms-uat.co.uk	URL	No
ovo-comms.co.uk	URL	No
ovo.itgcanopy.com	URL	No
ovobyus.com	URL	No
ovocards.com	URL	No
ovocommunity.com	URL	No
ovofoundation.org.uk	URL	No
ovomyrewards.com	URL	No
pace.ovotech.org.uk	URL	No
paybylink.ovoenergy.com	URL	No
payment-dd-service.prd.ptl.ovotech.org.uk	URL	No
payment-dd-service.uat.ptl.ovotech.org.uk	URL	No
payments-api.prd.pace.ovotech.org.uk	URL	No
payments-api.uat.pace.ovotech.org.uk	URL	No
payments.ovotech.org.uk	URL	No
pma.ovoenergy.com	URL	No
pol-dev.ovotech.org.uk	URL	No
pol-staging.ovotech.org.uk	URL	No
pol-uat.ovotech.org.uk	URL	No
pol.ovotech.org.uk	URL	No
prd.pace.ovotech.org.uk	URL	No
prd.payments.ovotech.org.uk	URL	No
prd.rac.ovotech.org.uk	URL	No
prd.smb.ovotech.org.uk	URL	No
prod.flow-platform.ovotech.org.uk	URL	No
prod.growth.ovotech.org.uk	URL	No
prod.oot.ovotech.org.uk	URL	No
prod.tardis.ovotech.org.uk	URL	No
prod.usage.ovotech.org.uk	URL	No
profile-coefficients.prd.rac.ovotech.org.uk	URL	No
profile-coefficients.uat.randc.ovotech.org.uk	URL	No
prx01.uat.ptl.ovotech.org.uk	URL	No
public-manual-readings.prd.rac.ovotech.org.uk	URL	No
public-manual-readings.uat.randc.ovotech.org.uk	URL	No
public.bws-testing.ovotech.org.uk	URL	No
public.homemoves-*.ovotech.org.uk	WILDCARD	No
qs.ovotech.org.uk	URL	No
rac-spam.prd.rac.ovotech.org.uk	URL	No
rac-spam.uat.randc.ovotech.org.uk	URL	No
rac.ovotech.org.uk	URL	No
reads-lifecycle-nonprod.ovotech.org.uk	URL	No
reads-lifecycle-prod.ovotech.org.uk	URL	No
recommended-dds.prd.pace.ovotech.org.uk	URL	No
recommended-dds.uat.pace.ovotech.org.uk	URL	No
replay.prd.rac.ovotech.org.uk	URL	No
replay.uat.randc.ovotech.org.uk	URL	No
retail-aiven-kafka-users.ovotech.org.uk	URL	No
retail-payg.gcp.bedrock.ovotech.org.uk	URL	No
retail-payg.gcp.nonprod.bedrock.ovotech.org.uk	URL	No
rise.gcp.bedrock.ovotech.org.uk	URL	No
rise.gcp.nonprod.bedrock.ovotech.org.uk	URL	No
salesforce.prod.oot.ovotech.org.uk	URL	No
scully-nonprod.ovotech.org.uk	URL	No
seceng-nonprod-aws.ovotech.org.uk	URL	No
self-serve-refunds.prd.pace.ovotech.org.uk	URL	No
self-serve-refunds.uat.pace.ovotech.org.uk	URL	No
servicecomms-dev.ovotech.org.uk	URL	No
servicecomms-nonprod.ovotech.org.uk	URL	No
servicecomms.ovotech.org.uk	URL	No
shipit.ovotech.org.uk	URL	No
sis-nonprod.ovotech.org.uk	URL	No
sis-sandbox.ovotech.org.uk	URL	No
sis.ovotech.org.uk	URL	No
sme.ovotech.org.uk	URL	No
smex-scheduler-nonprod.ovotech.org.uk	URL	No
smex-scheduler-prod.ovotech.org.uk	URL	No
smex-scheduler-sandbox.ovotech.org.uk	URL	No
smex-scheduler-test.ovotech.org.uk	URL	No
sonarqube.ovotech.org.uk	URL	No
survey.ovoenergy.com	URL	No
tardis.ovotech.org.uk	URL	No
tariffs-service.prd.ec.ovotech.org.uk	URL	No
tariffs-service.uat.ec.ovotech.org.uk	URL	No
tech.ovoenergy.com	URL	No
terraform.ovotech.org.uk	URL	No
test-cert-manager.uat.randc.ovotech.org.uk	URL	No
test-simple-event.data-availability.gcp.bedrock.ovotech.org.uk	URL	No
testlab.gcp.infosec.ovotech.org.uk	URL	No
testrailapp.ovoenergy.com	URL	No
thirdpartyassurance.ovoenergy.com	URL	No
tracking.ovo.com	URL	No
uat.nonprod.flow-platform.ovotech.org.uk	URL	No
uat.onboarding.ovotech.org.uk	URL	No
uat.pace.ovotech.org.uk	URL	No
uat.payments.ovotech.org.uk	URL	No
uat.rac.ovotech.org.uk	URL	No
uat.randc.ovotech.org.uk	URL	No
uat.smb.ovotech.org.uk	URL	No
uat.usage.ovotech.org.uk	URL	No
webhook.prd.payments.ovotech.org.uk	URL	No
webhook.uat.payments.ovotech.org.uk	URL	No
worldpay-webhook-orion.prd.payments.ovotech.org.uk	URL	No
worldpay-webhook-orion.uat.payments.ovotech.org.uk	URL	No
worldpay-webhook-ovotest.uat.payments.ovotech.org.uk	URL	No