— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Paddle.com Public Bug Bounty Program.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"id": "paddle-com-public-bug-bounty-program",
"name": "Paddle.com Public Bug Bounty Program",
"public": true,
"disabled": false,
"managed": null,
"min_bounty": 50,
"max_bounty": 5000,
"targets": {
"in_scope": [
{
"target": "https://vendors.paddle.com",
"type": "web-application"
},
{
"target": "https://sandbox-vendors.paddle.com",
"type": "web-application"
},
{
"target": "https://api.paddle.com",
"type": "api"
},
{
"target": "https://sandbox-api.paddle.com",
"type": "api"
},
{
"target": "https://sandbox-checkout-service.paddle.com",
"type": "web-application"
},
{
"target": "https://sandbox-buy.paddle.com",
"type": "web-application"
},
{
"target": "https://paddle.net",
"type": "web-application"
},
{
"target": "https://customer-portal.paddle.com",
"type": "web-application"
},
{
"target": "https://login.paddle.com",
"type": "web-application"
},
{
"target": "https://sandbox-login.paddle.com",
"type": "web-application"
},
{
"target": "https://www.paddle.com",
"type": "web-application"
},
{
"target": "https://developer.paddle.com",
"type": "web-application"
}
],
"out_of_scope": [
{
"target": "All domains, subdomains or assets not listed in the above list of 'Scopes' must be considered as out of the scope of this program",
"type": "other"
},
{
"target": "https://checkout-service.paddle.com",
"type": "other"
},
{
"target": "https://buy.paddle.com",
"type": "other"
}
]
}
}All domains, subdomains or assets … of the scope of this programothercheckout-service.paddle.comotherbuy.paddle.comother