Bug bounty program
PL
Plaid
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 12
- Disclosed reports
- 0
- Subdomains
- 307
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains307
| Name | Scope | First seen |
|---|---|---|
| api.plaid.comapi | Not in the scope | 2026-11-14 |
| api.my.plaid.comapi | Not in the scope | 2026-11-14 |
| api.app.plaid.comapi | Not in the scope | 2026-11-14 |
| api.hosted.plaid.comapi | Not in the scope | 2026-11-14 |
| api.account.plaid.comapi | Not in the scope | 2026-11-14 |
| api.dashboard.plaid.comadmin, api | Not in the scope | 2026-11-14 |
| api-v2-testing.plaid.comapi, test | Not in the scope | 2026-11-14 |
| api.my-commits.plaid.comapi | Not in the scope | 2026-11-14 |
| api.my-sandbox.plaid.comapi, test | Not in the scope | 2026-11-14 |
| api.my-testing.plaid.comapi, test | Not in the scope | 2026-11-14 |
| api.app-sandbox.plaid.comapi, test | Not in the scope | 2026-11-14 |
| api.profile-app.plaid.comapi | Not in the scope | 2026-11-14 |
| api-qa.dashboard.plaid.comadmin, api, test | Not in the scope | 2026-11-14 |
| api.hosted-sandbox.plaid.comapi, test | Not in the scope | 2026-11-14 |
| api.my-development.plaid.comapi, dev | Not in the scope | 2026-11-14 |
| api.account-sandbox.plaid.comapi, test | Not in the scope | 2026-11-14 |
| api.passport-sandbox.plaid.comapi, test | Not in the scope | 2026-11-14 |
| citi-qa-api-20220203.plaid.comapi, test | Not in the scope | 2026-11-14 |
| discover-sandbox-api.plaid.comapi, test | Not in the scope | 2026-11-14 |
| api.firstplatypusbank.plaid.comapi | Not in the scope | 2026-11-14 |
| chase-qa-api-20200603.plaid.comapi, test | Not in the scope | 2026-11-14 |
| chase-qa-api-20220429.plaid.comapi, test | Not in the scope | 2026-11-14 |
| chase-qa-api-20220523.plaid.comapi, test | Not in the scope | 2026-11-14 |
| nwm-prod-api-20240812.plaid.comapi | Not in the scope | 2026-11-14 |
| amex-prod-api-20230127.plaid.comapi | Not in the scope | 2026-11-14 |
| amex-prod-api-20241118.plaid.comapi | Not in the scope | 2026-11-14 |
| api.firstplaidypusbank.plaid.comapi | Not in the scope | 2026-11-14 |
| api.hosted-development.plaid.comapi, dev | Not in the scope | 2026-11-14 |
| api.profile-app-sandbox.plaid.comapi, test | Not in the scope | 2026-11-14 |
| chase-prod-api-20200603.plaid.comapi | Not in the scope | 2026-11-14 |
| chase-prod-api-20220429.plaid.comapi | Not in the scope | 2026-11-14 |
| chase-prod-api-20220523.plaid.comapi | Not in the scope | 2026-11-14 |
| discover-production-api.plaid.comapi | Not in the scope | 2026-11-14 |
| citi-tartan-api-20211110.plaid.comapi | Not in the scope | 2026-11-14 |
| nwm-sandbox-api-20240812.plaid.comapi, test | Not in the scope | 2026-11-14 |
| amex-sandbox-api-20211022.plaid.comapi, test | Not in the scope | 2026-11-14 |
| amex-sandbox-api-20241118.plaid.comapi, test | Not in the scope | 2026-11-14 |
| citi-sandbox-api-20211110.plaid.comapi, test | Not in the scope | 2026-11-14 |
| keybank-prod-api-20230831.plaid.comapi | Not in the scope | 2026-11-14 |
| keybank-test-api-20230831.plaid.comapi, test | Not in the scope | 2026-11-14 |
| www.chase-qa-api-20220429.plaid.comapi, test | Not in the scope | 2026-11-14 |
| usbank-production-api-2023.plaid.comapi | Not in the scope | 2026-11-14 |
| usbank-production-api-2024.plaid.comapi | Not in the scope | 2026-11-14 |
| www.amex-prod-api-20230127.plaid.comapi | Not in the scope | 2026-11-14 |
| bremer-sandbox-api-20230606.plaid.comapi, test | Not in the scope | 2026-11-14 |
| brewer-sandbox-api-20230606.plaid.comapi, test | Not in the scope | 2026-11-14 |
| www.chase-prod-api-20220429.plaid.comapi | Not in the scope | 2026-11-14 |
| citi-production-api-20211110.plaid.comapi | Not in the scope | 2026-11-14 |
| firsttechfed-qa-api-20220509.plaid.comapi, test | Not in the scope | 2026-11-14 |
| creditkarma-prod-api-20230601.plaid.comapi | Not in the scope | 2026-11-14 |
| creditkarma-test-api-20230601.plaid.comapi, test | Not in the scope | 2026-11-14 |
| bremer-production-api-20230614.plaid.comapi | Not in the scope | 2026-11-14 |
| usbank-production-api-20220127.plaid.comapi | Not in the scope | 2026-11-14 |
| www.usbank-production-api-2023.plaid.comapi | Not in the scope | 2026-11-14 |
| www.usbank-production-api-2024.plaid.comapi | Not in the scope | 2026-11-14 |
| www.brewer-sandbox-api-20230606.plaid.comapi, test | Not in the scope | 2026-11-14 |
| citizens-production-api-20231114.plaid.comapi | Not in the scope | 2026-11-14 |
| firsttechfed-staging-api-20220509.plaid.comapi, staging | Not in the scope | 2026-11-14 |
| www.usbank-production-api-20220127.plaid.comapi | Not in the scope | 2026-11-14 |
| firsttechfed-production-api-20220307.plaid.comapi | Not in the scope | 2026-11-14 |
| firsttechfed-production-api-20220419.plaid.comapi | Not in the scope | 2026-11-14 |
| firsttechfed-production-api-20230109.plaid.comapi | Not in the scope | 2026-11-14 |
| www.citizens-production-api-20231114.plaid.comapi | Not in the scope | 2026-11-14 |
| www.firsttechfed-production-api-20220307.plaid.comapi | Not in the scope | 2026-11-14 |
| www.firsttechfed-production-api-20220419.plaid.comapi | Not in the scope | 2026-11-14 |
| www.firsttechfed-production-api-20230109.plaid.comapi | Not in the scope | 2026-11-14 |
5 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.