Program Removed

This program is no longer available on YesWeHack. The scope data shown below is historical and may not reflect the final state of the program.

Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

govtech-vulnerability-disclosure-programme-policy

YesWeHackView on YesWeHack
RawAI Enhanced
4
In Scope
2
Out of Scope
In-Scope Assets (4)
AssetCategoryBountyQuick Links
*.gov.sgOTHERNo-
domains where govtech is the registrarOTHERNo-
domains where govtech is the registrarOTHERNo-
gov.sgWILDCARDNo
Out-of-Scope Assets (2)
AssetCategoryBounty
all domains or subdomains not listed in the above list of 'scopes'OTHERNo
all domains or subdomains not listed in the above list of 'scopes'OTHERNo
Scope Changes (14)
Jun 30, 2026
ChangeAssetCategoryScopeTime
Program Removed22:26
Addedall domains or subdomains not listed in the above list of 'scopes'OTHEROut of Scope02:26
Added*.gov.sgWILDCARDIn Scope02:26
Addeddomains where govtech is the registrarOTHERIn Scope02:26
Added*.gov.sgOTHERIn Scope02:26
Addeddomains where govtech is the registrarOTHERIn Scope02:26
Addedall domains or subdomains not listed in the above list of 'scopes'OTHEROut of Scope02:26
Jun 29, 2026
ChangeAssetCategoryScopeTime
Program Removed22:26
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addeddomains where govtech is the registrarOTHERIn Scope19:09
Addedall domains or subdomains not listed in the above list of 'scopes'OTHEROut of Scope19:09
Added*.gov.sgWILDCARDIn Scope19:09
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addedall domains or subdomains not listed in the above list of 'scopes'OTHEROut of Scope00:52
Added*.gov.sgWILDCARDIn Scope00:52
Addeddomains where govtech is the registrarOTHERIn Scope00:52