/

Oportun

Oportun on HackerOne · HackerOne Active

Not rated be the first 0 Researchers 0 Findings 0 Reviews Feedback

Scope

At a glance

Bounties: No, this is a VDP
Swag: No
Managed by the platform: Yes
Average first response: 0.5 days
Average time to resolution: Not published

In scope

api.digit.co
aplica.oportun.com
apollo.oportun.com
apply.oportun.com
awsqa12.progressfinservices.com
awsqa13.progressfinservices.com
awsqa7.progressfinservices.com
build.jenkins.progressfinservices.com
callback.oportun.com
collections.oportun.com
corp-fileshare.oportun.com
db-prod-redshift-cluster.oportun.com
digit-gateway-prod1.oportun.com
digit.co
docusign-qa12.progressfinservices.com
docusign-qa13.progressfinservices.com
exchange-admin.oportun.com
help.oportun.com
http://account.oportun.com/
https://account.oportun.com/login
https://account.oportun.com/services
https://oportun.com
investor.oportun.com
kiosk.oportun.com
loan.oportun.com
loans.oportun.com
locations.oportun.com
mariadb-analytics-pa-db-1-a.oportun.com
mariadb-data-db-1-a.oportun.com
mariadb-data-db-2-a.oportun.com
mysql-analytics-db-1-a.oportun.com
offers.oportun.com
office365.oportun.com
online-origination-sec-2615.dev.pfops.com
online-origination.1.app.stage
online-origination.1.app.stage.pfops.com
operations.oportun.com
oportun.com
postgres-prod-analytics-db-1-a.oportun.com
press.oportun.com

4 more assets on the official page.

Out of scope

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback