PentestingHere
Log in Join

USAA

USAA on Bugcrowd · Bugcrowd Active

Official page

Scope

At a glance

  • Maximum payout: $6,000
  • Public disclosure: Allowed
  • Managed by the platform: Yes
  • Safe harbour: Partial

In scope

  • https://api.usaa.com/
  • https://api-a.usaa.com
  • https://b2bapi-a.usaa.com
  • https://b2bapi.usaa.com
  • https://b2blsapi-a.usaa.com
  • https://b2blsapi.usaa.com
  • https://vlapi.usaa.com
  • https://mapi.usaa.com/
  • https://mapi-a.usaa.com
  • https://wsmbr.usaa.com/
  • https://ws.usaa.com
  • https://www.usaa.com
  • https://mobile.usaa.com
  • https://partners.usaa.com
  • https://play.google.com/store/apps/details?id=com.usaa.mobile.android.usaa&hl=en
  • https://apps.apple.com/us/app/usaa-mobile/id312325565
  • https://aemdam.usaa360.com/
  • https://authn.usaa.com/
  • https://content.usaa.com
  • https://d1.utv.usaa.com
  • https://d2.utv.usaa.com
  • https://externalconnect.usaa.com/
  • https://guest.usaa.com/
  • https://l.usaa.com/
  • https://liveassist.usaa.com/
  • https://liveassist11.usaa.com/
  • https://liveassist12.usaa.com/
  • https://liveassist21.usaa.com/
  • https://liveassist22.usaa.com/
  • https://liveassist23.usaa.com
  • https://liveassist24.usaa.com
  • https://mguest.usaa.com/
  • https://mobileapps.usaa.com/
  • https://mstatic.usaa.com
  • https://mydesktop.usaa.com
  • https://myvpn.usaa.com
  • https://nice.wfmusaa.com
  • https://nvoice.usaa.com/
  • https://s.usaa.com/
  • https://s1.utv.usaa.com

9 more assets on the official page.

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback