bounty.index

/to search

Live data paused. Neon is grumpy. Programs still load from the upstream mirror; watchlists and alerts are taking a nap.

Featured on

Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates

programs/Bugcrowd/engagements/plusgrade-mbb-public

Plusgrade Loyalty Public Program

Bugcrowd·payout up to $5.0K·2 in-scope · 2 out·updated 16m ago·RSS

Discord →open program

bountymanaged

first response

—

no reports yet

scope

2 out

asset mix

wildcard

1 wildcard · 1 url

last change

—

no history yet

In scope

002

wildcards01

+*.points.com

urls01

+Additional Loyalty scope included under resources tab

Out of scope

002

−Partner Website & Applicationsurl

Recent changes

— no diffs detected in snapshot history yet —

Community reports

0 reports

No reports yet — be the first to share your triage timing for Plusgrade Loyalty Public Program.

// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.

Your notes

▸ raw source payload

{
  "name": "Plusgrade Loyalty Public Program",
  "url": "https://bugcrowd.com/engagements/plusgrade-mbb-public",
  "allows_disclosure": true,
  "managed_by_bugcrowd": true,
  "safe_harbor": "full",
  "max_payout": 5000,
  "targets": {
    "in_scope": [
      {
        "type": "website",
        "target": "*.points.com",
        "uri": "",
        "name": "*.points.com",
        "ipAddress": ""
      },
      {
        "type": "website",
        "target": "Additional Loyalty scope included under resources tab",
        "uri": "",
        "name": "Additional Loyalty scope included under resources tab",
        "ipAddress": ""
      }
    ],
    "out_of_scope": [
      {
        "type": "website",
        "target": "Partner Website & Applications",
        "uri": "",
        "name": "Partner Website & Applications",
        "ipAddress": ""
      },
      {
        "type": "website",
        "target": "Anything not explicitly listed as in-scope",
        "uri": "",
        "name": "Anything not explicitly listed as in-scope",
        "ipAddress": ""
      }
    ]
  }
}

−Anything not explicitly listed as in-scopeurl