Ubisoft Responsible Disclosure Program

{
  "id": "eb340a46-b5b8-4165-b8d8-bc032493e8a6",
  "name": "Ubisoft Responsible Disclosure Program",
  "company_handle": "ubisoft",
  "handle": "ubisoftvdp",
  "url": "https://www.intigriti.com/programs/ubisoft/ubisoftvdp/detail",
  "status": "open",
  "confidentiality_level": "public",
  "tacRequired": false,
  "twoFactorRequired": false,
  "min_bounty": {
    "value": 0,
    "currency": "EUR"
  },
  "max_bounty": {
    "value": 0,
    "currency": "EUR"
  },
  "targets": {
    "in_scope": [
      {
        "type": "other",
        "endpoint": "Game Titles",
        "description": "**Active in-scope Game Titles** - *last updated 08/12/25*\n\nPlatforms: all officially supported platforms and distribution channels for each title (e.g., PC, PlayStation, Xbox, Switch, iOS, Android, cloud services, and web-based games playable in a web browser).\n\n* R6 Siege\n* TCTD2\n* For Honor\n* Skull & Bones\n* The Crew: Motorfest\n* Just Dance\n* Watch Dogs Legion\n* Laser\n* Genesis\n* GR: Wildlands\n* AC: Shadows\n* Hungry Shark World\n* Hungry Shark Evolution\n* Invincible\n* Howrse\n* Brawlhalla\n* R6Mobile\n* M&M Era of Chaos\n* JD:Now\n* AC Mirage\n* AC Shadows\n* POP Lost Crown",
        "impact": "Tier 2"
      },
      {
        "type": "other",
        "endpoint": "First-party Ubisoft Web, Desktop and Mobile applications",
        "description": "* Public-facing web applications and APIs owned and operated by Ubisoft (e.g., *.ubisoft.com, *.ubi.com, *.ubisoftconnect.com).\n* Official desktop applications (e.g., Ubisoft Connect and similar Ubisoft-owned client software) and official mobile applications (iOS/Android). Mobile applications that provide corporate services, account management, companion functionality, or other non‑game features are in scope; mobile games are excluded (see Game‑specific exclusions).\n* Corporate/online services and infrastructure exposed to the internet where Ubisoft is the owner/operator (e.g., partner/employee portals, admin panels, CDNs, storage endpoints).",
        "impact": "Tier 2"
      }
    ],
    "out_of_scope": [
      {
        "type": "other",
        "endpoint": "The Settlers Online game",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "forums.ubisoft.com",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "ivalua.ubisoft.com",
        "description": null,
        "impact": "Out of scope"
      },
      {
        "type": "url",
        "endpoint": "suppliers-ivalua.ubisoft.com",
        "description": null,
        "impact": "Out of scope"
      }
    ]
  }
}