Bug bounty program
PL
Plaid
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 12
- Disclosed reports
- 0
- Subdomains
- 307
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains307
| Name | Scope | First seen |
|---|---|---|
| demo.plaid.comtest | In scope | 2026-11-14 |
| sandbox.plaid.comtest | Not in the scope | 2026-11-14 |
| csa-demo.plaid.comtest | Not in the scope | 2026-11-14 |
| sandbox2.plaid.comtest | Not in the scope | 2026-11-14 |
| citi-test.plaid.comtest | Not in the scope | 2026-11-14 |
| link-demo.plaid.comtest | Not in the scope | 2026-11-14 |
| verify-qa.plaid.comtest | Not in the scope | 2026-11-14 |
| my-sandbox.plaid.comtest | Not in the scope | 2026-11-14 |
| my-testing.plaid.comtest | Not in the scope | 2026-11-14 |
| cdn-testing.plaid.comtest | Not in the scope | 2026-11-14 |
| demo.saturn.plaid.comtest | Not in the scope | 2026-11-14 |
| fin-testing.plaid.comtest | Not in the scope | 2026-11-14 |
| mcp-sandbox.plaid.comtest | Not in the scope | 2026-11-14 |
| sandbox.ue1.plaid.comtest | Not in the scope | 2026-11-14 |
| testing.ue1.plaid.comtest | Not in the scope | 2026-11-14 |
| truist-test.plaid.comtest | Not in the scope | 2026-11-14 |
| demo-backend.plaid.comtest | Not in the scope | 2026-11-14 |
| mcp-sandbox2.plaid.comtest | Not in the scope | 2026-11-14 |
| sandbox-card.plaid.comtest | Not in the scope | 2026-11-14 |
| usaab2b-test.plaid.comtest | Not in the scope | 2026-11-14 |
| citi-e2e-test.plaid.comtest | Not in the scope | 2026-11-14 |
| www.citi-test.plaid.comtest | Not in the scope | 2026-11-14 |
| api-v2-testing.plaid.comapi, test | Not in the scope | 2026-11-14 |
| api.my-sandbox.plaid.comapi, test | Not in the scope | 2026-11-14 |
| api.my-testing.plaid.comapi, test | Not in the scope | 2026-11-14 |
| fiserv-sandbox.plaid.comtest | Not in the scope | 2026-11-14 |
| secure-testing.plaid.comtest | Not in the scope | 2026-11-14 |
| verify-prod-qa.plaid.comtest | Not in the scope | 2026-11-14 |
| verify-sandbox.plaid.comtest | Not in the scope | 2026-11-14 |
| api.app-sandbox.plaid.comapi, test | Not in the scope | 2026-11-14 |
| api-qa.dashboard.plaid.comadmin, api, test | Not in the scope | 2026-11-14 |
| www.usaab2b-test.plaid.comtest | Not in the scope | 2026-11-14 |
| verify-sandbox-qa.plaid.comtest | Not in the scope | 2026-11-14 |
| www.citi-e2e-test.plaid.comtest | Not in the scope | 2026-11-14 |
| api.hosted-sandbox.plaid.comapi, test | Not in the scope | 2026-11-14 |
| test-deleteme-jane.plaid.comtest | Not in the scope | 2026-11-14 |
| www.fiserv-sandbox.plaid.comtest | Not in the scope | 2026-11-14 |
| api.account-sandbox.plaid.comapi, test | Not in the scope | 2026-11-14 |
| api.passport-sandbox.plaid.comapi, test | Not in the scope | 2026-11-14 |
| citi-qa-api-20220203.plaid.comapi, test | Not in the scope | 2026-11-14 |
| discover-sandbox-api.plaid.comapi, test | Not in the scope | 2026-11-14 |
| chase-qa-api-20200603.plaid.comapi, test | Not in the scope | 2026-11-14 |
| chase-qa-api-20220429.plaid.comapi, test | Not in the scope | 2026-11-14 |
| chase-qa-api-20220523.plaid.comapi, test | Not in the scope | 2026-11-14 |
| envoy-cxp.sandbox.ue1.plaid.comtest | Not in the scope | 2026-11-14 |
| envoy-cxp.testing.ue1.plaid.comtest | Not in the scope | 2026-11-14 |
| marketing-site-testing.plaid.comtest | Not in the scope | 2026-11-14 |
| api.profile-app-sandbox.plaid.comapi, test | Not in the scope | 2026-11-14 |
| tch-jwe-testing-02-2025.plaid.comtest | Not in the scope | 2026-11-14 |
| tch-jwe-testing-04-2025.plaid.comtest | Not in the scope | 2026-11-14 |
| tch-jws-testing-02-2025.plaid.comtest | Not in the scope | 2026-11-14 |
| tch-jws-testing-04-2025.plaid.comtest | Not in the scope | 2026-11-14 |
| tch-ste-testing-02-2025.plaid.comtest | Not in the scope | 2026-11-14 |
| tch-ste-testing-04-2025.plaid.comtest | Not in the scope | 2026-11-14 |
| trust-auth-2020-sandbox.plaid.comauth, test | Not in the scope | 2026-11-14 |
| nwm-sandbox-api-20240812.plaid.comapi, test | Not in the scope | 2026-11-14 |
| plaidbofa-testing-202004.plaid.comtest | Not in the scope | 2026-11-14 |
| plaidbofa-testing-202510.plaid.comtest | Not in the scope | 2026-11-14 |
| plaidbofa-testing-202609.plaid.comtest | Not in the scope | 2026-11-14 |
| amex-sandbox-api-20211022.plaid.comapi, test | Not in the scope | 2026-11-14 |
| amex-sandbox-api-20241118.plaid.comapi, test | Not in the scope | 2026-11-14 |
| citi-sandbox-api-20211110.plaid.comapi, test | Not in the scope | 2026-11-14 |
| keybank-test-api-20230831.plaid.comapi, test | Not in the scope | 2026-11-14 |
| www.chase-qa-api-20220429.plaid.comapi, test | Not in the scope | 2026-11-14 |
| echoserver.k8s.testing.ue1.plaid.comtest, tools | Not in the scope | 2026-11-14 |
| bremer-sandbox-api-20230606.plaid.comapi, test | Not in the scope | 2026-11-14 |
| brewer-sandbox-api-20230606.plaid.comapi, test | Not in the scope | 2026-11-14 |
| consumer-portal.sandbox.ue1.plaid.comtest | Not in the scope | 2026-11-14 |
| consumer-portal.testing.ue1.plaid.comtest | Not in the scope | 2026-11-14 |
| www.trust-auth-2020-sandbox.plaid.comauth, test | Not in the scope | 2026-11-14 |
| firsttechfed-qa-api-20220509.plaid.comapi, test | Not in the scope | 2026-11-14 |
| www.plaidbofa-testing-202004.plaid.comtest | Not in the scope | 2026-11-14 |
| creditkarma-test-api-20230601.plaid.comapi, test | Not in the scope | 2026-11-14 |
| data-partner-webhooks.sandbox.plaid.comtest | Not in the scope | 2026-11-14 |
| tidb-module-test-testing-tidb.plaid.comtest | Not in the scope | 2026-11-14 |
| trusted-auth-sandbox-20211029.plaid.comauth, test | Not in the scope | 2026-11-14 |
| trusted-auth-testing-20211029.plaid.comauth, test | Not in the scope | 2026-11-14 |
| marketing-site-testing-commits.plaid.comtest | Not in the scope | 2026-11-14 |
| www.brewer-sandbox-api-20230606.plaid.comapi, test | Not in the scope | 2026-11-14 |
| px-integration-validator.testing.ue1.plaid.comtest | Not in the scope | 2026-11-14 |
5 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.