The Trade Desk

At a glance#

• Maximum payout: $5,000
• Public disclosure: Not allowed
• Managed by the platform: Yes
• Safe harbour: Full

In scope#

• https://open.sincera.io
• https://desk.thetradedesk.com
• https://api.thetradedesk.com
• https://auth.thetradedesk.com
• https://partner.thetradedesk.com
• https://www.thetradedesk.com
• https://ops-sso.adsrvr.org/
• https://myopenpass.com
• https://auth.myopenpass.com
• https://partner.myopenpass.com
• https://atlantis-ext.myopenpass.com
• https://prod.uidapi.com
• https://prod.euid.eu
• https://core-prod.uidapi.com
• https://optout-prod.uidapi.com
• https://optout.prod.euid.eu
• https://transparentadvertising.com
• https://transparentadvertising.eu
• https://portal.unifiedid.com
• *.thetradedesk.com
• *.adsrvr.org
• https://www.thecurrent.com
• https://cdn.myopenpass.com
• https://cstg-integ.uidapi.com
• https://esp-jssdk-integ.uidapi.com
• https://esp-srvonly-integ.uidapi.com
• https://example-jssdk-integ.uidapi.com
• https://example-srvonly-integ.uidapi.com
• https://secure-signals-jssdk-integ.uidapi.com
• https://secure-signals-srvonly-integ.uidapi.com
• https://secure-signals-client-side-integ.uidapi.com/
• https://secure-signals-react-integ.uidapi.com
• https://www.adsrvr.org
• https://myopenpassdemo.com/
• https://careers.thetradedesk.com
• https://www.venturatvos.com
• https://www.opensincera.com
• https://edgeacademy.thetradedesk.com

Out of scope#

• https://investors.thetradedesk.com
• https://ask.thetradedesk.com
• https://www.thetradedeskedgeacademy.com
• https://openpass.thetradedesk.com
• https://unifiedid.com
• https://euid.eu
• argocd.*.uidapi.com
• All client websites that have integrated with OpenPass
• https://stationery.thetradedesk.com
• https://bynder.thetradedesk.com
• Applications that resolve to *.skilljarapp.com
• Applications that resolve to *.smartling.com (ex: id.thetradedesk.com)
• Applications that resolve to *.quilvem.com (ex: update.adsrvr.org)
• Applications that resolve to *.okta.com (ex: openpath-login.thetradedesk.com)
• Anything not explicitly listed as Tier 1, Tier 2, or Tier 3

Imported from the public directory. Always confirm scope on the official program page before testing.