Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
31 in-scope
TrustedServer 100,000 Bonus Award (See Program Policy for Info)ExpressVPN VPN serversExpressVPN RouterAny Applications under https://www.expressvpn.com/latestgithub.com/expressvpn/lightwaygithub.com/expressvpn/wolfssl-rsAll domains or subdomains not list…in the above list of 'Scopes'other+ added 1 scope · https://github.com/expressvpn/wolfssl-rs
85d ago
first indexed
92d ago · 30 in-scope assets
No reports yet. Be the first to share your triage timing for ExpressVPN - Bug Bounty Program.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "expressvpn-bug-bounty-program",
"name": "ExpressVPN - Bug Bounty Program",
"public": true,
"managed": null,
"targets": {
"in_scope": [
{
"type": "web-application",
"target": "*.expressvpn.com"
},
{
"type": "web-application",
"target": "app.expressmailguard.com"
},
{
"type": "web-application",
"target": "expressvpn.jobs"
},
{
"type": "api",
"target": "ExpressVPN APIs"
},
{
"type": "api",
"target": "https://xv-cp.apis-staging.xvtest.net/"
},
{
"type": "api",
"target": "https://cp.expressapisv2.net"
},
{
"type": "api",
"target": "https://api.expressvpn.com"
},
{
"type": "api",
"target": "https://api.enc.kape.com"
},
{
"type": "api",
"target": "https://api.dbs.kape.com"
},
{
"type": "api",
"target": "https://api.dts.kape.com"
},
{
"type": "api",
"target": "https://api.blts.kape.com"
},
{
"type": "api",
"target": "https://api.pcrs.kape.com"
},
{
"type": "api",
"target": "https://api.jwks.kape.com"
},
{
"type": "other",
"target": "ExpressVPN VPN servers"
},
{
"type": "other",
"target": "ExpressVPN Router"
},
{
"type": "web-application",
"target": "*.xvtest.net"
},
{
"type": "web-application",
"target": "*.xvservice.net"
},
{
"type": "web-application",
"target": "it.xvservice.net"
},
{
"type": "web-application",
"target": "1pw-scim.prd.iat.it.xvservice.net"
},
{
"type": "web-application",
"target": "gatekeeper.prd.iat.it.xvservice.net"
},
{
"type": "web-application",
"target": "iat.it.xvservice.net"
},
{
"type": "web-application",
"target": "prd.iat.it.xvservice.net"
},
{
"type": "web-application",
"target": "vector.prd.iat.it.xvservice.net"
},
{
"type": "web-application",
"target": "gh-mail.expressvpn.com"
},
{
"type": "web-application",
"target": "*.polymoon.it"
},
{
"type": "web-application",
"target": "corp.polymoon.it"
},
{
"type": "web-application",
"target": "networkguard.com"
},
{
"type": "application",
"target": "Any Applications under https://www.expressvpn.com/latest"
},
{
"type": "other",
"target": "https://github.com/expressvpn/lightway"
},
{
"type": "other",
"target": "https://github.com/expressvpn/wolfssl-rs"
},
{
"type": "other",
"target": "TrustedServer 100,000 Bonus Award (See Program Policy for Info)"
}
],
"out_of_scope": [
{
"type": "other",
"target": "All domains or subdomains not listed in the above list of 'Scopes'"
}
]
},
"disabled": false,
"max_bounty": 2500,
"min_bounty": 50
}