PentestingHere
Log in Join

Ibotta

Ibotta on Bugcrowd · Bugcrowd Active

Official page

Scope

At a glance

  • Maximum payout: $1,000
  • Public disclosure: Allowed
  • Managed by the platform: Yes
  • Safe harbour: Full

In scope

  • https://chrome.google.com/webstore/detail/ibotta-browser-extension/mfaedmjlefifhnhpgipjjiiekchaimpk?hl=en-US
  • http://market.android.com/details?id=com.ibotta.android
  • http://itunes.apple.com/us/app/ibotta/id559887125
  • https://content-server.ibotta.com/graphql
  • https://api.ibotta.com
  • https://api.ibops.net
  • https://api.int.ibops.net
  • https://api.int.ibops.net/customer-loyalty-service
  • https://api.ibops.net/ad-management
  • Ibotta App Data & Memory
  • https://app.ibotta.com/sign-in

  • http://ibotta.com
  • https://backend.ibotta.com/

Out of scope

  • https://backend.ibotta.com/duplicate_receipt_moderation
  • https://ir.ibotta.com
  • https://trust.ibotta.com
  • legal.ibotta.com
  • *dev.ibotta.com
  • https://investors.ibotta.com/
  • http://sampling.ibotta.com/

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback