Bug bounty program
PL
Plaid
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 12
- Disclosed reports
- 0
- Subdomains
- 307
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains307
| Name | Scope | First seen |
|---|---|---|
| data-partner-webhooks.production.plaid.com | Not in the scope | 2026-11-14 |
| www.production.plaid.com | Not in the scope | 2026-11-14 |
| production2.plaid.com | Not in the scope | 2026-11-14 |
| api.profile-app-sandbox.plaid.comapi, test | Not in the scope | 2026-11-14 |
| api.profile-app.plaid.comapi | Not in the scope | 2026-11-14 |
| proto.plaid.com | Not in the scope | 2026-11-14 |
| prove-att.plaid.com | Not in the scope | 2026-11-14 |
| remote-access.plaid.comvpn | Not in the scope | 2026-11-14 |
| sales.plaid.com | Not in the scope | 2026-11-14 |
| sandbox.plaid.comtest | Not in the scope | 2026-11-14 |
| sandbox-card.plaid.comtest | Not in the scope | 2026-11-14 |
| data-partner-webhooks.sandbox.plaid.comtest | Not in the scope | 2026-11-14 |
| sandbox2.plaid.comtest | Not in the scope | 2026-11-14 |
| demo.saturn.plaid.comtest | Not in the scope | 2026-11-14 |
| scgateway.plaid.com | Not in the scope | 2026-11-14 |
| www.scgateway.plaid.com | Not in the scope | 2026-11-14 |
| secure.plaid.com | In scope | 2026-11-14 |
| secure-testing.plaid.comtest | Not in the scope | 2026-11-14 |
| secure0.plaid.com | Not in the scope | 2026-11-14 |
| security.plaid.com | Not in the scope | 2026-11-14 |
| sentry.plaid.commonitoring | Not in the scope | 2026-11-14 |
| sfgateway.plaid.com | Not in the scope | 2026-11-14 |
| slcgateway.plaid.com | Not in the scope | 2026-11-14 |
| static-file-vault.plaid.comtools | Not in the scope | 2026-11-14 |
| status.plaid.commonitoring | Not in the scope | 2026-11-14 |
| status-beta.plaid.commonitoring, staging | Not in the scope | 2026-11-14 |
| status-staging.plaid.commonitoring, staging | Not in the scope | 2026-11-14 |
| www.status-staging.plaid.commonitoring, staging | Not in the scope | 2026-11-14 |
| support.plaid.com | Not in the scope | 2026-11-14 |
| support-my.plaid.com | Not in the scope | 2026-11-14 |
| svb.plaid.com | Not in the scope | 2026-11-14 |
| svb-mtls.plaid.com | Not in the scope | 2026-11-14 |
| t.plaid.com | Not in the scope | 2026-11-14 |
| tartan.plaid.com | Not in the scope | 2026-11-14 |
| tch-jwe-testing-02-2025.plaid.comtest | Not in the scope | 2026-11-14 |
| tch-jwe-testing-04-2025.plaid.comtest | Not in the scope | 2026-11-14 |
| tch-jws-testing-02-2025.plaid.comtest | Not in the scope | 2026-11-14 |
| tch-jws-testing-04-2025.plaid.comtest | Not in the scope | 2026-11-14 |
| tch-ste-prod-02-2025.plaid.com | Not in the scope | 2026-11-14 |
| tch-ste-testing-02-2025.plaid.comtest | Not in the scope | 2026-11-14 |
| tch-ste-testing-04-2025.plaid.comtest | Not in the scope | 2026-11-14 |
| test-deleteme-jane.plaid.comtest | Not in the scope | 2026-11-14 |
| threads.plaid.com | Not in the scope | 2026-11-14 |
| tidb-module-test-testing-tidb.plaid.comtest | Not in the scope | 2026-11-14 |
| tines.plaid.com | Not in the scope | 2026-11-14 |
| toca.plaid.com | Not in the scope | 2026-11-14 |
| tosa.plaid.com | Not in the scope | 2026-11-14 |
| track.plaid.com | Not in the scope | 2026-11-14 |
| truist-prod.plaid.com | Not in the scope | 2026-11-14 |
| truist-test.plaid.comtest | Not in the scope | 2026-11-14 |
| trust-auth-2020-sandbox.plaid.comauth, test | Not in the scope | 2026-11-14 |
| www.trust-auth-2020-sandbox.plaid.comauth, test | Not in the scope | 2026-11-14 |
| trusted-auth-2020.plaid.comauth | Not in the scope | 2026-11-14 |
| trusted-auth-2020-production.plaid.comauth | Not in the scope | 2026-11-14 |
| www.trusted-auth-2020-production.plaid.comauth | Not in the scope | 2026-11-14 |
| trusted-auth-2020-tartan.plaid.comauth | Not in the scope | 2026-11-14 |
| www.trusted-auth-2020-tartan.plaid.comauth | Not in the scope | 2026-11-14 |
| trusted-auth-production-20211029.plaid.comauth | Not in the scope | 2026-11-14 |
| trusted-auth-sandbox-20211029.plaid.comauth, test | Not in the scope | 2026-11-14 |
| trusted-auth-tartan-20211029.plaid.comauth | Not in the scope | 2026-11-14 |
| www.trusted-auth-tartan-20211029.plaid.comauth | Not in the scope | 2026-11-14 |
| trusted-auth-testing-20211029.plaid.comauth, test | Not in the scope | 2026-11-14 |
| u003ewww.plaid.com | Not in the scope | 2026-11-14 |
| echoserver-1.ue1.plaid.com | Not in the scope | 2026-11-14 |
| prod.ue1.plaid.com | Not in the scope | 2026-11-14 |
| consumer-portal.prod.ue1.plaid.com | Not in the scope | 2026-11-14 |
| envoy-cxp.prod.ue1.plaid.com | Not in the scope | 2026-11-14 |
| incoming-events.prod.ue1.plaid.com | Not in the scope | 2026-11-14 |
| px-integration-validator.prod.ue1.plaid.com | Not in the scope | 2026-11-14 |
| skyfall-public.prod.ue1.plaid.com | Not in the scope | 2026-11-14 |
| sandbox.ue1.plaid.comtest | Not in the scope | 2026-11-14 |
| consumer-portal.sandbox.ue1.plaid.comtest | Not in the scope | 2026-11-14 |
| envoy-cxp.sandbox.ue1.plaid.comtest | Not in the scope | 2026-11-14 |
| tartan.ue1.plaid.com | Not in the scope | 2026-11-14 |
| consumer-portal.tartan.ue1.plaid.com | Not in the scope | 2026-11-14 |
| envoy-cxp.tartan.ue1.plaid.com | Not in the scope | 2026-11-14 |
| testing.ue1.plaid.comtest | Not in the scope | 2026-11-14 |
| consumer-portal.testing.ue1.plaid.comtest | Not in the scope | 2026-11-14 |
| envoy-cxp.testing.ue1.plaid.comtest | Not in the scope | 2026-11-14 |
| echoserver.k8s.testing.ue1.plaid.comtest, tools | Not in the scope | 2026-11-14 |
| px-integration-validator.testing.ue1.plaid.comtest | Not in the scope | 2026-11-14 |
| util.ue1.plaid.com | Not in the scope | 2026-11-14 |
| pa-vpn1.util.ue1.plaid.comvpn | Not in the scope | 2026-11-14 |
| pa-vpn1-ext.util.ue1.plaid.comvpn | Not in the scope | 2026-11-14 |
| pa-vpn2.util.ue1.plaid.comvpn | Not in the scope | 2026-11-14 |
| pa-vpn2-ext.util.ue1.plaid.comvpn | Not in the scope | 2026-11-14 |
| usaab2b-prod.plaid.com | Not in the scope | 2026-11-14 |
| www.usaab2b-prod.plaid.com | Not in the scope | 2026-11-14 |
| usaab2b-test.plaid.comtest | Not in the scope | 2026-11-14 |
| www.usaab2b-test.plaid.comtest | Not in the scope | 2026-11-14 |
| usbank-production-api-20220127.plaid.comapi | Not in the scope | 2026-11-14 |
| www.usbank-production-api-20220127.plaid.comapi | Not in the scope | 2026-11-14 |
| usbank-production-api-2023.plaid.comapi | Not in the scope | 2026-11-14 |
| www.usbank-production-api-2023.plaid.comapi | Not in the scope | 2026-11-14 |
| usbank-production-api-2024.plaid.comapi | Not in the scope | 2026-11-14 |
| www.usbank-production-api-2024.plaid.comapi | Not in the scope | 2026-11-14 |
| verify.plaid.com | Not in the scope | 2026-11-14 |
| verify-prod-qa.plaid.comtest | Not in the scope | 2026-11-14 |
| verify-production.plaid.com | Not in the scope | 2026-11-14 |
| verify-qa.plaid.comtest | Not in the scope | 2026-11-14 |
5 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.