/

Tesco

Tesco on HackerOne · HackerOne Active

Not rated be the first 0 Researchers 0 Findings 0 Reviews Feedback

Scope

At a glance

Bounties: No, this is a VDP
Swag: No
Managed by the platform: Yes
Average first response: 0 days
Average time to resolution: 22.7 days

In scope

*.itesco.cz/*
*.itesco.sk/*
*.ourtesco.com/*
*.tesco-europe.com/*
*.tesco.com/*
*.tesco.hu/*
*.tesco.ie/*
*.tesco.org/*
*.tesco.sk/*
*.tescocloud.com/*
*.tescoplc.com/*
389581236
857834425
API Assets
Cloud Assets
Domain, Subdomain & Zone Takeovers
Exposed Sensitive Documents
Leaked & Default Credentials
Medium, High and Critical Severity Issue on Out-Of-Scope Assets
Third-Party Managed Assets
com.tesco.grocery.view
https://www.booker.co.uk/*
https://www.onestop.co.uk/*
https://www.tescomobile.com/*

Out of scope

Dunnhumby (Non-Critical)
Tesco Bank
com.tescobank.mobile

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback