Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
12 in-scope
All domains, subdomains or assets … of the scope of this programothercheckout-service.paddle.comotherbuy.paddle.comotherfirst indexed
92d ago · 12 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Paddle.com Public Bug Bounty Program.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "paddle-com-public-bug-bounty-program",
"name": "Paddle.com Public Bug Bounty Program",
"public": true,
"managed": null,
"targets": {
"in_scope": [
{
"type": "web-application",
"target": "https://vendors.paddle.com"
},
{
"type": "web-application",
"target": "https://sandbox-vendors.paddle.com"
},
{
"type": "api",
"target": "https://api.paddle.com"
},
{
"type": "api",
"target": "https://sandbox-api.paddle.com"
},
{
"type": "web-application",
"target": "https://sandbox-checkout-service.paddle.com"
},
{
"type": "web-application",
"target": "https://sandbox-buy.paddle.com"
},
{
"type": "web-application",
"target": "https://paddle.net"
},
{
"type": "web-application",
"target": "https://customer-portal.paddle.com"
},
{
"type": "web-application",
"target": "https://login.paddle.com"
},
{
"type": "web-application",
"target": "https://sandbox-login.paddle.com"
},
{
"type": "web-application",
"target": "https://www.paddle.com"
},
{
"type": "web-application",
"target": "https://developer.paddle.com"
}
],
"out_of_scope": [
{
"type": "other",
"target": "All domains, subdomains or assets not listed in the above list of 'Scopes' must be considered as out of the scope of this program"
},
{
"type": "other",
"target": "https://checkout-service.paddle.com"
},
{
"type": "other",
"target": "https://buy.paddle.com"
}
]
},
"disabled": false,
"max_bounty": 5000,
"min_bounty": 50
}