Changelog
What’s new
Every scope, reward, and safe-harbor change across all platforms, over the last 7 days. Just reward moves →
2026-11-08
2 changes
2026-11-07
13 changes
YesWeHack Dojo
YesWeHack
+1 added−1 removeddojo-yeswehack.com/chal…of-the-month/dojo-56, dojo-yeswehack.com/chal…of-the-month/dojo-55
HARMAN International - Web Applications
YesWeHack
reward 2500 → 2000VDP
Intigriti
+1 added−8 removedwww.showpad.com, Digipost Android app, Digipost iOS app, *.bring.com · +5 more
VDP
Intigriti
+8 added−1 removedDigipost Android app, Digipost iOS app, *.bring.com, www.showpad.com · +5 more
Moneytree KK
Bugcrowd
+1 addedfitbit-lottery.getmoneytree.com/
Fivetran
Bugcrowd
−1 removedit-fivetran.com
Bitwarden
HackerOne
−1 removedchrome.google.com/webst…iiiahkandclblb?hl=en
Epic Games
HackerOne
+1 addedZenserver
Hyatt Hotels
HackerOne
−1 removedhyatt.com
FanDuel
HackerOne
+1 addedFanDuel Customer Support Sites
AWS VDP
HackerOne
+1 addedgithub.com/aws/s2n-quic
Braze, Inc.
HackerOne
+1 addedbug-bounty-mcp.k8s.tool…-1.braze-dev.com/mcp
Anduril Industries
HackerOne
+1 added−3 removedanduril.com, *.anduril.au, *.anduril.com, *.anduril.com.au
2026-11-06
8 changes
VDP
Intigriti
+1 added−8 removedwww.showpad.com, Digipost Android app, Digipost iOS app, *.bring.com · +5 more
VDP
Intigriti
+8 added−1 removedDigipost Android app, Digipost iOS app, *.bring.com, www.showpad.com · +5 more
Vinted Bug Bounty
Bugcrowd
−1 removedsandbox.vinted.com
hostinger
HackerOne
+1 addedai-builder.hostinger.com
Judge.me
HackerOne
+1 added−2 removedemails.judge.me, bigcommerce-adapter.judge.me, woocommerce-adapter.judge.me
John Deere
HackerOne
+2 addedai-playbook-kit.mfg-mat…1.johndeerecloud.com, es-develop-api.channel-…1.johndeerecloud.com
Bybit Fintech Ltd
HackerOne
+6 addedtestnet.bybit.com/en/earn/rwa/, testnet.bybit.com/en/trade/odds/, testnet.bybit.com/en/trade/option/usdt/spcx · +3 more
Henkel
HackerOne
+3 added*.nymbrand.{com,co.uk,uk,}, *.nymbrands.{com,co.uk,uk,}, *.nymhair.{com,co.uk,uk,}
2026-11-05
10 changes
HARMAN International - Web Applications
YesWeHack
+1 added−1 removedfi.harmankardon.com, fi.harmankardon.com/
VDP
Intigriti
+1 added−8 removedwww.showpad.com, Digipost Android app, Digipost iOS app, *.bring.com · +5 more
VDP
Intigriti
+8 added−1 removedDigipost Android app, Digipost iOS app, *.bring.com, www.showpad.com · +5 more
Resolution
Bugcrowd
+1 added−20 removedmarketplace.atlassian.c…g=cloud&tab=overview, marketplace.atlassian.c…=server&tab=overview, marketplace.atlassian.c…=server&tab=overview, marketplace.atlassian.c…=server&tab=overview · +17 more
Remitly
HackerOne
+1 addedapi.remitly.com
MercadoLibre
HackerOne
−1 removedLeaked Credentials
Stripe
HackerOne
+3 addedfiles.stripe.com, stripe.com, stripe.dev
John Deere
HackerOne
+1 addedleasedataservice.deere.com
Mondelēz International
HackerOne
−2 removedgifts.tatesbakeshop.com, gifts.tatesbakeshop.com
Henkel
HackerOne
+10 added*.olaplex-dev.com, *.olaplex-test.com, *.olaplex.co.nz · +7 more
2026-11-04
10 changes
Infomaniak Bug Bounty program
YesWeHack
+2 addeds3.gva1.infomaniak.cloud, s3.gva2.infomaniak.cloud
HARMAN International - Web Applications
YesWeHack
+67 added−27 removedreward 4000 → 2500be.harmanaudio.com, be.jbl.com, ch.harmanaudio.com, *.account.roon.app, *.de.jbl.com, *.gotdrops.cloud · +88 more
VDP
Intigriti
+1 added−8 removedwww.showpad.com, Digipost Android app, Digipost iOS app, *.bring.com · +5 more
Signicat Responsible Disclosure
Intigriti
+1 addedSignicat VideoID and SignatureID
VDP
Intigriti
+8 added−1 removedDigipost Android app, Digipost iOS app, *.bring.com, www.showpad.com · +5 more
DigitalOcean
Intigriti
−1 removedgithub.com/digitalocean…rovider-digitalocean
Cvent Bug Bounty
Bugcrowd
+1 added−2 removedaccounts.app.cvent.com/paygo/signup, Cvent CSN-RFP -> https:…scribers/Suppliers/*, Cvent Core-Paygo -> htt…-software/free-trial
CBRE
HackerOne
−5 removedautodiscover.projectstrategy.com.au, lyncdiscover.projectstrategy.com.au, projectstrategy.com.au · +2 more
John Deere
HackerOne
+5 addedcogi-ai-srv.ghns-web-pl…1.johndeerecloud.com, dmc.johndeere.com, jdsn-grr-api.deere.com · +2 more
Mondelēz International
HackerOne
+2 addedgifts.tatesbakeshop.com, gifts.tatesbakeshop.com
2026-11-03
5 changes
VDP
Intigriti
+1 added−8 removedwww.showpad.com, Digipost Android app, Digipost iOS app, *.bring.com · +5 more
VDP
Intigriti
+8 added−1 removedDigipost Android app, Digipost iOS app, *.bring.com, www.showpad.com · +5 more
Snapbytes Marketplace Managed Bug Bounty Engagement
Bugcrowd
+1 added−1 removed███████████████████████…████████████████████, marketplace.atlassian.c…g=cloud&tab=overview
OpenAI
Bugcrowd
+3 added−2 removedreward 6500 → 30000ChatGPT Desktop, Codex CLI, chatgpt.com, Codex Desktop, chatgpt.com/dots/
X / xAI
HackerOne
−1 removedgrok-build
2026-11-02
3 changes
Mt Pelerin
Immunefi
+33 addedreward 5000 → 3500app.mtpelerin.com, apps.apple.com/us/app/b…-wallet/id1481859680, github.com/MtPelerin/br…/access/Operator.sol · +30 more
VDP
Intigriti
+1 added−8 removedwww.showpad.com, Digipost Android app, Digipost iOS app, *.bring.com · +5 more
VDP
Intigriti
+8 added−1 removedDigipost Android app, Digipost iOS app, *.bring.com, www.showpad.com · +5 more
