Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
tccc/coca-cola
5
In Scope
8
Out of Scope
In-Scope Assets (5)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| Brand Sites | OTHER | No | - | |
| Corporate Sites | URL | No | - | |
| Hindustan Coca-Cola Beverages | OTHER | No | - | |
| Mobile Applications | OTHER | No | - | |
| Publicly Facing Assets Related to The Coca-Cola Company | OTHER | No | - |
Out-of-Scope Assets (8)
| Asset | Category | Bounty | |
|---|---|---|---|
| *.ccnag.com | WILDCARD | No | |
| *.connect.coca-cola.com | WILDCARD | No | |
| *.crewconnect.coca-cola.com | WILDCARD | No | |
| All Coke Stores | OTHER | No | |
| Assets Related to China | OTHER | No | |
| Coke One North America (CONA) | OTHER | No | |
| Food and Beverage Dispensing Devices | OTHER | No | |
| limonsoda.cl | URL | No |
Scope Changes (59)
May 6, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | brand sites | OTHER | In Scope | 14:26 |
| Removed | corporate sites | URL | In Scope | 14:26 |
| Removed | hindustan coca-cola beverages | OTHER | In Scope | 14:26 |
| Removed | mobile applications | OTHER | In Scope | 14:26 |
| Removed | publicly facing assets related to the coca-cola company | OTHER | In Scope | 14:26 |
| Removed | food and beverage dispensing devices | OTHER | Out of Scope | 14:26 |
| Removed | coke one north america (cona) | OTHER | Out of Scope | 14:26 |
| Removed | assets related to china | OTHER | Out of Scope | 14:26 |
| Removed | limonsoda.cl | URL | Out of Scope | 14:26 |
| Removed | *.ccnag.com | WILDCARD | Out of Scope | 14:26 |
| Removed | *.connect.coca-cola.com | WILDCARD | Out of Scope | 14:26 |
| Removed | *.crewconnect.coca-cola.com | WILDCARD | Out of Scope | 14:26 |
| Removed | all coke stores | OTHER | Out of Scope | 14:26 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | assets related to china | OTHER | Out of Scope | 19:08 |
| Added | food and beverage dispensing devices | OTHER | Out of Scope | 19:08 |
| Added | brand sites | OTHER | In Scope | 19:08 |
| Added | hindustan coca-cola beverages | WILDCARD | In Scope | 19:08 |
| Added | hindustan coca-cola beverages | WILDCARD | In Scope | 19:08 |
| Added | publicly facing assets related to the coca-cola company | OTHER | In Scope | 19:08 |
| Added | *.connect.coca-cola.com | WILDCARD | Out of Scope | 19:08 |
| Added | coke one north america (cona) | OTHER | Out of Scope | 19:08 |
| Added | all coke stores | OTHER | Out of Scope | 19:08 |
| Added | *.crewconnect.coca-cola.com | WILDCARD | Out of Scope | 19:08 |
| Added | *.ccnag.com | WILDCARD | Out of Scope | 19:08 |
| Added | limonsoda.cl | URL | Out of Scope | 19:08 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | brand sites | OTHER | In Scope | 01:02 |
| Added | publicly facing assets related to the coca-cola company | OTHER | In Scope | 01:02 |
| Added | *.connect.coca-cola.com | WILDCARD | Out of Scope | 00:49 |
| Added | *.ccnag.com | WILDCARD | Out of Scope | 00:49 |
| Added | limonsoda.cl | URL | Out of Scope | 00:49 |
| Added | assets related to china | OTHER | Out of Scope | 00:49 |
| Added | all coke stores | OTHER | Out of Scope | 00:49 |
| Added | hindustan coca-cola beverages | WILDCARD | In Scope | 00:49 |
| Added | hindustan coca-cola beverages | WILDCARD | In Scope | 00:49 |
| Added | food and beverage dispensing devices | OTHER | Out of Scope | 00:49 |
| Added | coke one north america (cona) | OTHER | Out of Scope | 00:49 |
| Added | *.crewconnect.coca-cola.com | WILDCARD | Out of Scope | 00:49 |
Feb 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | brand sites | OTHER | In Scope | 21:40 |
| Removed | hindustan coca-cola beverages | OTHER | In Scope | 21:40 |
| Removed | publicly facing assets related to the coca-cola company | OTHER | In Scope | 21:40 |
| Removed | all coke stores | OTHER | Out of Scope | 21:40 |
| Removed | *.crewconnect.coca-cola.com | WILDCARD | Out of Scope | 21:40 |
| Removed | *.connect.coca-cola.com | WILDCARD | Out of Scope | 21:40 |
| Removed | *.ccnag.com | WILDCARD | Out of Scope | 21:40 |
| Removed | limonsoda.cl | URL | Out of Scope | 21:40 |
| Removed | assets related to china | OTHER | Out of Scope | 21:40 |
| Removed | coke one north america (cona) | OTHER | Out of Scope | 21:40 |
| Removed | food and beverage dispensing devices | OTHER | Out of Scope | 21:40 |
| Added | brand sites | OTHER | In Scope | 18:51 |
| Added | hindustan coca-cola beverages | OTHER | In Scope | 18:51 |
| Added | publicly facing assets related to the coca-cola company | OTHER | In Scope | 18:51 |
| Added | all coke stores | OTHER | Out of Scope | 18:51 |
| Added | *.connect.coca-cola.com | WILDCARD | Out of Scope | 18:51 |
| Added | *.ccnag.com | WILDCARD | Out of Scope | 18:51 |
| Added | limonsoda.cl | URL | Out of Scope | 18:51 |
| Added | assets related to china | OTHER | Out of Scope | 18:51 |
| Added | coke one north america (cona) | OTHER | Out of Scope | 18:51 |
| Added | food and beverage dispensing devices | OTHER | Out of Scope | 18:51 |
| Added | *.crewconnect.coca-cola.com | WILDCARD | Out of Scope | 18:51 |