Does AIG have a bug bounty program?

AIG runs a public vulnerability disclosure program (VDP) on HackerOne. It accepts good-faith security reports but does not offer cash rewards. It lists 18 in-scope assets.

bounty.index

Featured on

Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates

programs/HackerOne/aig

AIG

HackerOne·updated 13h ago

vdpmanagedopen

Discord → RSS

payout: no bounty
scope: 18 in · 9 out
safe harbor: unknown
response: no reports

open program

hunt score

vdpfresh

formula →

payout

0/55

bounty

0/20

freshness

25/25

how we sort the index, not an estimate of what you’ll earn

Attack surface

18 in-scope

15urls
3wildcards

Scope

In scope

018

wildcards03

+*.aig.co.jpscope· critical
+*.aig.comscope· critical
+*.aig.ie· critical

urls15

+aig.com.br· critical
+glatfelters.com· critical
+mall.aig.com.cn/efapiao/· critical
+services.aig.co.il· critical
+wwip.aig.com· critical
+www-1p.aig.com· critical
+www.aig.· critical
+www.aig.co.il· critical
+www.aig.com.br· critical
+www.americanhome.co.jp· critical
▸▾show 5 morehide 5 more
- +www.glatfelters.com· critical
- +www.rapidcover.ie· critical
- +www.vfis.com· critical
- +www.vfisal.com· critical
- +www.vfisu.com· critical

Out of scope

009

wildcards02

urls07

Change history

2 events

in-scope over 56dpeak 19

first indexedscope addedscope removedreward change

2026-10-01
− removed 1 scope · www.aigportal.de
36d ago
2026-08-06
first indexed
92d ago · 19 in-scope assets

Community reports

0 reports

No reports yet. Be the first to share your triage timing for AIG.

// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.

Your notes

▸ raw source payload

{
  "id": 0,
  "url": "https://hackerone.com/aig",
  "name": "AIG",
  "handle": "aig",
  "targets": {
    "in_scope": [
      {
        "asset_type": "WILDCARD",
        "instruction": "Subdomains maintained by third parties, other than AIG, are not in scope for this program.",
        "max_severity": "critical",
        "asset_identifier": "*.aig.co.jp",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "Subdomains maintained by third parties, other than AIG, are not in scope for this program.",
        "max_severity": "critical",
        "asset_identifier": "*.aig.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "This asset is intended to be a wildcard domain. Subdomains and external links maintained by third parties, other than AIG, are not in scope for this program.",
        "max_severity": "critical",
        "asset_identifier": "aig.com.br",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "This asset is intended to be a wildcard domain. Subdomains and external links maintained by third parties, other than AIG, are not in scope for this program.",
        "max_severity": "critical",
        "asset_identifier": "glatfelters.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": "Subdomains maintained by third parties, other than AIG, are not in scope for this program.",
        "max_severity": "critical",
        "asset_identifier": "http://*.aig.ie",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": null,
        "max_severity": "critical",
        "asset_identifier": "https://mall.aig.com.cn/efapiao/",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "Subdomains maintained by third parties, other than AIG, are not in scope for this program",
        "max_severity": "critical",
        "asset_identifier": "services.aig.co.il",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": null,
        "max_severity": "critical",
        "asset_identifier": "wwip.aig.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": null,
        "max_severity": "critical",
        "asset_identifier": "www-1p.aig.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "This asset is intended to be a wildcard domain: www.aig.*\n\nSubdomains and external links maintained by third parties, other than AIG, are not in scope for this program.",
        "max_severity": "critical",
        "asset_identifier": "www.aig.",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "Subdomains maintained by third parties, other than AIG, are not in scope for this program.",
        "max_severity": "critical",
        "asset_identifier": "www.aig.co.il",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "Subdomains maintained by third parties, other than AIG, are not in scope for this program.",
        "max_severity": "critical",
        "asset_identifier": "www.aig.com.br",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": null,
        "max_severity": "critical",
        "asset_identifier": "www.americanhome.co.jp",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "Subdomains maintained by third parties, other than AIG, are not in scope for this program.",
        "max_severity": "critical",
        "asset_identifier": "www.glatfelters.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "Subdomains maintained by third parties, other than AIG, are not in scope for this program.",
        "max_severity": "critical",
        "asset_identifier": "www.rapidcover.ie",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "Subdomains maintained by third parties, other than AIG, are not in scope for this program.",
        "max_severity": "critical",
        "asset_identifier": "www.vfis.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "Subdomains maintained by third parties, other than AIG, are not in scope for this program.",
        "max_severity": "critical",
        "asset_identifier": "www.vfisal.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "Subdomains maintained by third parties, other than AIG, are not in scope for this program.",
        "max_severity": "critical",
        "asset_identifier": "www.vfisu.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      }
    ],
    "out_of_scope": [
      {
        "asset_type": "WILDCARD",
        "instruction": null,
        "max_severity": "none",
        "asset_identifier": "*.corebridgefinancial.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "WILDCARD",
        "instruction": null,
        "max_severity": "none",
        "asset_identifier": "*.travelguard.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": null,
        "max_severity": "none",
        "asset_identifier": "direct-carexcess.co.uk",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "Subdomains maintained by third parties, other than AIG, are not in scope for this program.",
        "max_severity": "none",
        "asset_identifier": "travel.aig.co.jp",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": null,
        "max_severity": "none",
        "asset_identifier": "www-1008.aig.com",
        "eligible_for_bounty": false,
        "integrity_requirement": "high",
        "eligible_for_submission": false,
        "availability_requirement": "high",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "URL",
        "instruction": null,
        "max_severity": "none",
        "asset_identifier": "www-180.aig.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": null,
        "max_severity": "none",
        "asset_identifier": "www-280.aig.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": null,
        "max_severity": "none",
        "asset_identifier": "www.aigportal.de",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": null,
        "max_severity": "none",
        "asset_identifier": "www.corebridgefinancial.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      }
    ]
  },
  "website": "https://www.aig.com",
  "offers_swag": false,
  "managed_program": true,
  "offers_bounties": false,
  "submission_state": "open",
  "allows_bounty_splitting": false,
  "average_time_to_bounty_awarded": null,
  "response_efficiency_percentage": 99,
  "average_time_to_report_resolved": 388,
  "average_time_to_first_program_response": 2
}