Program Removed
This program is no longer available on YesWeHack. The scope data shown below is historical and may not reflect the final state of the program.
Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
govtech-vulnerability-disclosure-programme-policy
4
In Scope
2
Out of Scope
In-Scope Assets (4)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.gov.sg | OTHER | No | - | |
| domains where govtech is the registrar | OTHER | No | - | |
| domains where govtech is the registrar | OTHER | No | - | |
| gov.sg | WILDCARD | No |
Out-of-Scope Assets (2)
| Asset | Category | Bounty | |
|---|---|---|---|
| all domains or subdomains not listed in the above list of 'scopes' | OTHER | No | |
| all domains or subdomains not listed in the above list of 'scopes' | OTHER | No |
Scope Changes (14)
Jun 30, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 22:26 |
| Added | all domains or subdomains not listed in the above list of 'scopes' | OTHER | Out of Scope | 02:26 |
| Added | *.gov.sg | WILDCARD | In Scope | 02:26 |
| Added | domains where govtech is the registrar | OTHER | In Scope | 02:26 |
| Added | *.gov.sg | OTHER | In Scope | 02:26 |
| Added | domains where govtech is the registrar | OTHER | In Scope | 02:26 |
| Added | all domains or subdomains not listed in the above list of 'scopes' | OTHER | Out of Scope | 02:26 |
Jun 29, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 22:26 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | domains where govtech is the registrar | OTHER | In Scope | 19:09 |
| Added | all domains or subdomains not listed in the above list of 'scopes' | OTHER | Out of Scope | 19:09 |
| Added | *.gov.sg | WILDCARD | In Scope | 19:09 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | all domains or subdomains not listed in the above list of 'scopes' | OTHER | Out of Scope | 00:52 |
| Added | *.gov.sg | WILDCARD | In Scope | 00:52 |
| Added | domains where govtech is the registrar | OTHER | In Scope | 00:52 |