bug bounty program · HackerOne
Expedia Group VDP
0 disclosed reports · 33 assets in scope · 7,454 subdomains
First the weakness classes of its disclosed reports, then what it has in scope. Each square is a report or an asset, or a group of names. The last strips are its subdomains by root domain, from ProjectDiscovery's public Chaos dataset; the bright part of each is what the program's own scope covers.
Open Expedia Group VDP on HackerOne- pays bounties
- No
- subdomains
- 7,454
- in scope
- 7,377
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.