Does LPL Financial VDP have a bug bounty program?

LPL Financial VDP runs a public vulnerability disclosure program (VDP) on HackerOne. It accepts good-faith security reports but does not offer cash rewards. It lists 3 in-scope assets.

bounty.index

Featured on

Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates

programs/HackerOne/lpl_financial-vdp

LPL Financial VDP

HackerOne·updated 9h ago

vdpmanagedopen

Discord → RSS

payout: no bounty
scope: 3 in · 1 out
safe harbor: unknown
response: no reports

open program

hunt score

vdpfresh

formula →

payout

0/55

bounty

0/20

freshness

25/25

how we sort the index, not an estimate of what you’ll earn

Attack surface

3 in-scope

2urls
1other

Scope

In scope

003

urls02

+advisoryworld.com· critical
+lpl.com· critical

other01

+Domains where LPL Financial is lis…ot in scope for this program.· critical

Out of scope

001

−www.advisoryworld.comurl

Change history

1 event

2026-08-06
first indexed
92d ago · 3 in-scope assets

// only one snapshot on record, changes appear from the next ingest onward

Community reports

0 reports

No reports yet. Be the first to share your triage timing for LPL Financial VDP.

// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.

Your notes

▸ raw source payload

{
  "id": 0,
  "url": "https://hackerone.com/lpl_financial-vdp",
  "name": "LPL Financial VDP",
  "handle": "lpl_financial-vdp",
  "targets": {
    "in_scope": [
      {
        "asset_type": "OTHER",
        "instruction": null,
        "max_severity": "critical",
        "asset_identifier": "Domains where LPL Financial is listed as the Registrant Organization, Admin Organization, or Tech Organization are in scope. Domains maintained by third parties, other than LPL Financial, are not in scope for this program.",
        "eligible_for_bounty": false,
        "integrity_requirement": "high",
        "eligible_for_submission": true,
        "availability_requirement": "high",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "URL",
        "instruction": "AdvisoryWorld assets are in scope EXCEPT for www.advisoryworld.com",
        "max_severity": "critical",
        "asset_identifier": "advisoryworld.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "lpl.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      }
    ],
    "out_of_scope": [
      {
        "asset_type": "URL",
        "instruction": "The specific URL www.advisoryworld.com is out of scope. However, reports on other AdvisoryWorld sites are welcome.",
        "max_severity": "none",
        "asset_identifier": "www.advisoryworld.com",
        "eligible_for_bounty": false,
        "integrity_requirement": "high",
        "eligible_for_submission": false,
        "availability_requirement": "low",
        "confidentiality_requirement": "low"
      }
    ]
  },
  "website": "http://lplfinancial.lpl.com",
  "offers_swag": false,
  "managed_program": true,
  "offers_bounties": false,
  "submission_state": "open",
  "allows_bounty_splitting": false,
  "average_time_to_bounty_awarded": null,
  "response_efficiency_percentage": 100,
  "average_time_to_report_resolved": null,
  "average_time_to_first_program_response": null
}