Programs Scope lookupScope New

/to search

☰menu

// sync across devices

Watchlist
Compare

Platform

Asset type

Min reward

Program

Sort

The bug bounty market, live-indexed. Every public program across five platforms, filterable in one view.

☕buy me a coffee

Product

Programs
Compare
Watchlist
Scope lookup
New programs
RSS feed

Platforms

HackerOne
Bugcrowd
Intigriti
YesWeHack
federacyFederacy

Resources

How it works
Data source
Hacktivity
Writeups
disclose.io

© 2026 bounty.index·not affiliated with any platform·built byVarun·X·GitHub

data · arkadiyt/bounty-targets-data·MIT licensed·updated daily

Alshaya Vulnerability Disclosure Program on Hackerone

programs/HackerOne/alshaya

Alshaya

HackerOne·183 in-scope · 7 out·updated 1d ago

vdpmanagedopen

In scope

183

wildcards81

+*.ahwetzeitounakuwait.com· critical
+*.aloyoga.ae· critical
+*.aloyoga.com.kw· critical

History

1 event

2026-08-06
first indexed
1d ago · 183 in-scope assets

// only one snapshot on record — changes appear from the next ingest onward

+*.aloyoga.com.qa· critical

+*.alshaya.com· critical

+*.alshayaenterprises.com· critical

+*.americaneagle.ae· critical

+*.americaneagle.com.bh· critical

+*.americaneagle.com.eg· critical

+*.americaneagle.com.jo· critical

+*.americaneagle.com.kw· critical

+*.americaneagle.com.qa· critical

+*.americaneagle.com.sa· critical

+*.amitinoura.com· critical

+*.aura-mena.com· critical

+*.babelkwt.com· critical

+*.bathandbodyworks.ae· critical

+*.bathandbodyworks.com.bh· critical

+*.bathandbodyworks.com.eg· critical

+*.bathandbodyworks.com.kw· critical

+*.bathandbodyworks.com.qa· critical

+*.bathandbodyworks.com.sa· critical

+*.bathandbodyworks.com.tr· critical

+*.bathandbodyworks.jo· critical

+*.bathandbodyworks.pl· critical

+*.bathandbodyworks.ro· critical

+*.bebabelkuwait.com/· critical

+*.bouchonbakeryme.com· critical

+*.bouchonbakeryme.com/· critical

+*.carrier.alshaya.com· critical

+*.debenhams.ae· critical

+*.debenhams.com.kw· critical

+*.debenhams.sa· critical

+*.footlocker.ae· critical

+*.footlocker.com.bh· critical

+*.footlocker.com.eg· critical

+*.footlocker.qa· critical

+*.kidzaniakuwait-tickets.com· critical

+*.lepainquotidienme.com· critical

+*.mothercare.ae· critical

+*.mothercare.com.eg· critical

+*.mothercare.com.kw· critical

+*.mothercare.com.sa· critical

+*.mothercare.qa· critical

+*.muji.ae· critical

+*.muji.bh· critical

+*.muji.com.kw· critical

+*.muji.com.sa· critical

+*.muji.qa· critical

+*.payless.com.kw· critical

+*.paylessshoes.ae· critical

+*.pfchangsme.com· critical

+*.pinkberryme.com· critical

+*.pizzaexpresskw.com· critical

+*.potterybarn.ae· critical

+*.potterybarn.com.kw· critical

+*.potterybarn.com.sa· critical

+*.potterybarnkids.ae· critical

+*.potterybarnkids.com.kw· critical

+*.potterybarnkids.com.sa· critical

+*.raisingcanesme.com· critical

+*.shakeshack.co.uk· critical

+*.shaya.com.tr· critical

+*.shayakahve.com.tr· critical

+*.starbucks.az· critical

+*.starbucks.com.kz· critical

+*.starbucks.com.tr· critical

+*.starbuckscardtr.com· critical

+*.supplier.alshaya.com· critical

+*.tamanna.com· critical

+*.tekzone.me· critical

+*.victoriassecret.ae· critical

+*.victoriassecret.com.kw· critical

+*.victoriassecret.com.qa· critical

+*.victoriassecret.com.sa· critical

+*.victoriassecret.com.tr· critical

+*.victoriassecret.pl· critical

+*.visionexpress.me· critical

+*.westelm.ae· critical

+*.westelm.com.kw· critical

+*.westelm.com.sa· critical

urls79

+ae.boots.com· critical
+ae.charlottetilbury.com· critical
+ae.cos.com· critical
+ae.cosstores.com· critical
+ae.hm.com· critical
+ae.shopjustice.me· critical
+apigw.dev.alshaya.com· critical
+apps.havelockone.com· critical
+bakimonarim.shaya.com.tr· critical
+bn.boots.com· critical
+boysweb.shaya.com.tr· critical
+boyswebtest.shaya.com.tr· critical
+card.starbucks.com.kz· critical
+ccareapuat.alshaya.com· critical
+cloud.havelockone.com· critical
+cloudconnect.havelockone.com· critical
+coms.carrier.alshaya.com· critical
+comsuat.carrier.alshaya.com· critical
+customercare.alshaya.com· critical
+dev.alshaya.com· critical
+devimages.alshaya.com· critical
+eg.hm.com· critical
+gtmsservice.alshaya.com· critical
+internaljobs.alshaya.com· critical
+jenkins.alshaya.com· critical
+jobsearch.alshaya.com· critical
+kuwait.kidzania.com· critical
+kw.boots.com· critical
+kw.charlottetilbury.com· critical
+kw.cos.com· critical
+kw.cosstores.com· critical
+kw.hm.com· critical
+kw.shopjustice.me· critical
+media.bathandbodyworks.ro· critical
+media.victoriassecret.cz· critical
+mft.dev.alshaya.com· critical
+odi.dev.alshaya.com· critical
+onlinepos.shaya.com.tr· critical
+onlinestaffstore.alshaya.com· critical
+opsassistbrandedsolutions.shaya.com.tr· critical
+parallels.havelockone.com· critical
+pmp.shaya.com.tr· critical
+prodimages.alshaya.com· critical
+qa.charlottetilbury.com· critical
+qa.hm.com· critical
+qt.boots.com· critical
+sa.boots.com· critical
+sa.charlottetilbury.com· critical
+sa.cos.com· critical
+sa.cosstores.com· critical
+sa.hm.com· critical
+sa.shopjustice.me· critical
+sbuxopsassist.shaya.com.tr· critical
+soa.dev.alshaya.com· critical
+starbucks.az· critical
+suppliertraining.alshaya.com· critical
+tracking.victoriassecret.cz· critical
+victoriassecret.cz· critical
+victoriassecret.ro/· critical
+victoriassecretbeauty.ro· critical
+vpn.shaya.com.tr· critical
+www.ahwetzeitounakuwait.com· critical
+www.amitinoura.com· critical
+www.babelkwt.com· critical
+www.bathandbodyworks.ro· critical
+www.bebabelkuwait.com· critical
+www.bouchonbakeryme.com· critical
+www.customercare.alshaya.com· critical
+www.dev.alshaya.com· critical
+www.havelockone.com· critical
+www.lepainquotidienme.com· critical
+www.pfchangsme.com· critical
+www.pinkberryme.com· critical
+www.pizzaexpresskw.com· critical
+www.raisingcanesme.com· critical
+www.shayakahve.com.tr· critical
+www.shayakahve.com.tr/· critical
+www.starbucks.az· critical
+www.victoriassecretbeauty.ro· critical

ios13

+6472633752· critical
+AE + Aerie Middle East_MENA_IOS_1547602361· critical
+Alo GCC_GCC_IOS_1664702687· critical
+Aura MENA - Rewarding Loyalty_MENA_IOS_1532694353· critical
+Bath&BodyWorks_MENA_IOS_1541576878· critical
+Boots Middle East_MENA_IOS_1537064114· critical
+Debenhams MENA_MENA_IOS_1603834040· critical
+Foot Locker MENA_MENA_IOS_1563808574· critical
+H&M MENA - Shop Fashion Online_MENA_IOS_1445040108· critical
+Mothercare MENA Baby/Kids Shop_MENA_IOS_1563370517· critical
+Victoria's Secret MENA_MENA_IOS_1559906965· critical
+id6472633752· critical
+starbucks-t%C3%BCrkiye/id1100698915?l=tr· critical

other10

+AE + Aerie Middle East_MENA_ANDROID_com.aeo.mena· critical
+Alo GCC_GCC_ANDROID_com.aloyoga.mena· critical
+Aura MENA - Rewarding Loyalty_MENA_ANDRIOD_com.alshaya.aura· critical
+Bath&BodyWorks_MENA_ANDROID_com.bbw.mena· critical
+Foot Locker MENA_MENA_ANDROID_com.footlocker.mena· critical
+H&M MENA - Shop Fashion Online_MENA_ANDROID_com.hm.mena· critical
+Mothercare MENA_MENA_ANDROID_com.mothercare.mena· critical
+Victoria's Secret MENA_MENA_ANDROID_com.vs.mena· critical
+com.chipotle.mena· critical
+com.starbucks.tr· critical

Out of scope

007

wildcards05

−*.thebodyshop.com.bh
−*.thebodyshop.com.kw
−*.thebodyshop.com.tr
−*.thebodyshop.pl
−*.thebodyshop.qa

urls02

−crm.alshayamarketing.com
−thebodyshop.cz