Bug bounty program
PL
Plaid
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 12
- Disclosed reports
- 0
- Subdomains
- 307
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains307
| Name | Scope | First seen |
|---|---|---|
| api.account-sandbox.plaid.comapi, test | Not in the scope | 2026-11-14 |
| api.account.plaid.comapi | Not in the scope | 2026-11-14 |
| amex-prod-api-20230127.plaid.comapi | Not in the scope | 2026-11-14 |
| www.amex-prod-api-20230127.plaid.comapi | Not in the scope | 2026-11-14 |
| amex-prod-api-20241118.plaid.comapi | Not in the scope | 2026-11-14 |
| amex-sandbox-api-20211022.plaid.comapi, test | Not in the scope | 2026-11-14 |
| amex-sandbox-api-20241118.plaid.comapi, test | Not in the scope | 2026-11-14 |
| analytics.plaid.com | Not in the scope | 2026-11-14 |
| api.plaid.comapi | Not in the scope | 2026-11-14 |
| api-v2-testing.plaid.comapi, test | Not in the scope | 2026-11-14 |
| api.app-sandbox.plaid.comapi, test | Not in the scope | 2026-11-14 |
| api.app.plaid.comapi | Not in the scope | 2026-11-14 |
| asset-report-ds-prod.plaid.com | Not in the scope | 2026-11-14 |
| atlan.plaid.com | Not in the scope | 2026-11-14 |
| releases.atlan.plaid.com | Not in the scope | 2026-11-14 |
| benefits.plaid.com | Not in the scope | 2026-11-14 |
| beta-dashboard.plaid.comadmin, staging | Not in the scope | 2026-11-14 |
| blog.plaid.com | Not in the scope | 2026-11-14 |
| blog-staging.plaid.comstaging | Not in the scope | 2026-11-14 |
| brand.plaid.com | Not in the scope | 2026-11-14 |
| bremer-production-api-20230614.plaid.comapi | Not in the scope | 2026-11-14 |
| bremer-sandbox-api-20230606.plaid.comapi, test | Not in the scope | 2026-11-14 |
| brewer-sandbox-api-20230606.plaid.comapi, test | Not in the scope | 2026-11-14 |
| www.brewer-sandbox-api-20230606.plaid.comapi, test | Not in the scope | 2026-11-14 |
| calendar.plaid.com | Not in the scope | 2026-11-14 |
| cdn.plaid.com | In scope | 2026-11-14 |
| cdn-email.plaid.com | Not in the scope | 2026-11-14 |
| cdn-testing.plaid.comtest | Not in the scope | 2026-11-14 |
| chase-jwt-decryption-03-2023.plaid.com | Not in the scope | 2026-11-14 |
| www.chase-jwt-decryption-03-2023.plaid.com | Not in the scope | 2026-11-14 |
| chase-prod-api-20200603.plaid.comapi | Not in the scope | 2026-11-14 |
| chase-prod-api-20220429.plaid.comapi | Not in the scope | 2026-11-14 |
| www.chase-prod-api-20220429.plaid.comapi | Not in the scope | 2026-11-14 |
| chase-prod-api-20220523.plaid.comapi | Not in the scope | 2026-11-14 |
| chase-qa-api-20200603.plaid.comapi, test | Not in the scope | 2026-11-14 |
| chase-qa-api-20220429.plaid.comapi, test | Not in the scope | 2026-11-14 |
| www.chase-qa-api-20220429.plaid.comapi, test | Not in the scope | 2026-11-14 |
| chase-qa-api-20220523.plaid.comapi, test | Not in the scope | 2026-11-14 |
| citi-e2e-prod.plaid.com | Not in the scope | 2026-11-14 |
| www.citi-e2e-prod.plaid.com | Not in the scope | 2026-11-14 |
| citi-e2e-test.plaid.comtest | Not in the scope | 2026-11-14 |
| www.citi-e2e-test.plaid.comtest | Not in the scope | 2026-11-14 |
| citi-prod.plaid.com | Not in the scope | 2026-11-14 |
| www.citi-prod.plaid.com | Not in the scope | 2026-11-14 |
| citi-production-api-20211110.plaid.comapi | Not in the scope | 2026-11-14 |
| citi-qa-api-20220203.plaid.comapi, test | Not in the scope | 2026-11-14 |
| citi-sandbox-api-20211110.plaid.comapi, test | Not in the scope | 2026-11-14 |
| citi-tartan-api-20211110.plaid.comapi | Not in the scope | 2026-11-14 |
| citi-test.plaid.comtest | Not in the scope | 2026-11-14 |
| www.citi-test.plaid.comtest | Not in the scope | 2026-11-14 |
| citizens-production-api-20231114.plaid.comapi | Not in the scope | 2026-11-14 |
| www.citizens-production-api-20231114.plaid.comapi | Not in the scope | 2026-11-14 |
| client-logos.plaid.com | Not in the scope | 2026-11-14 |
| contact.plaid.com | Not in the scope | 2026-11-14 |
| creditkarma-prod-api-20230601.plaid.comapi | Not in the scope | 2026-11-14 |
| creditkarma-test-api-20230601.plaid.comapi, test | Not in the scope | 2026-11-14 |
| csa-demo.plaid.comtest | Not in the scope | 2026-11-14 |
| customer-oversight.plaid.com | Not in the scope | 2026-11-14 |
| dashboard.plaid.comadmin | In scope | 2026-11-14 |
| api.dashboard.plaid.comadmin, api | Not in the scope | 2026-11-14 |
| api-qa.dashboard.plaid.comadmin, api, test | Not in the scope | 2026-11-14 |
| demo.plaid.comtest | In scope | 2026-11-14 |
| demo-backend.plaid.comtest | Not in the scope | 2026-11-14 |
| development.plaid.comdev | Not in the scope | 2026-11-14 |
| development-card.plaid.comdev | Not in the scope | 2026-11-14 |
| development-private.plaid.comdev, internal | Not in the scope | 2026-11-14 |
| development2.plaid.comdev | Not in the scope | 2026-11-14 |
| discover-production-api.plaid.comapi | Not in the scope | 2026-11-14 |
| discover-sandbox-api.plaid.comapi, test | Not in the scope | 2026-11-14 |
| docs.plaid.com | Not in the scope | 2026-11-14 |
| www.docs.plaid.com | Not in the scope | 2026-11-14 |
| effects.plaid.com | Not in the scope | 2026-11-14 |
| em.plaid.com | Not in the scope | 2026-11-14 |
| eng.plaid.com | Not in the scope | 2026-11-14 |
| engineering.plaid.com | Not in the scope | 2026-11-14 |
| example.plaid.com | Not in the scope | 2026-11-14 |
| f.plaid.com | Not in the scope | 2026-11-14 |
| file-vault.plaid.comtools | Not in the scope | 2026-11-14 |
| files.plaid.comdata | Not in the scope | 2026-11-14 |
| fin.plaid.com | Not in the scope | 2026-11-14 |
| fin-testing.plaid.comtest | Not in the scope | 2026-11-14 |
| api.firstplaidypusbank.plaid.comapi | Not in the scope | 2026-11-14 |
| api.firstplatypusbank.plaid.comapi | Not in the scope | 2026-11-14 |
| firsttechfed-production-api-20220307.plaid.comapi | Not in the scope | 2026-11-14 |
| www.firsttechfed-production-api-20220307.plaid.comapi | Not in the scope | 2026-11-14 |
| firsttechfed-production-api-20220419.plaid.comapi | Not in the scope | 2026-11-14 |
| www.firsttechfed-production-api-20220419.plaid.comapi | Not in the scope | 2026-11-14 |
| firsttechfed-production-api-20230109.plaid.comapi | Not in the scope | 2026-11-14 |
| www.firsttechfed-production-api-20230109.plaid.comapi | Not in the scope | 2026-11-14 |
| firsttechfed-qa-api-20220509.plaid.comapi, test | Not in the scope | 2026-11-14 |
| firsttechfed-staging-api-20220509.plaid.comapi, staging | Not in the scope | 2026-11-14 |
| fiserv-prod.plaid.com | Not in the scope | 2026-11-14 |
| www.fiserv-prod.plaid.com | Not in the scope | 2026-11-14 |
| fiserv-sandbox.plaid.comtest | Not in the scope | 2026-11-14 |
| www.fiserv-sandbox.plaid.comtest | Not in the scope | 2026-11-14 |
| flow.plaid.com | Not in the scope | 2026-11-14 |
| foil.plaid.com | Not in the scope | 2026-11-14 |
| gateway.plaid.com | Not in the scope | 2026-11-14 |
| github.plaid.comgit | Not in the scope | 2026-11-14 |
| github-staging.plaid.comgit, staging | Not in the scope | 2026-11-14 |
5 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.