Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

oportun_vdp

HackerOneView on HackerOne

RawAI Enhanced

In Scope

Out of Scope

In-Scope Assets (44)

Asset	Category	Bounty	Quick Links
api.digit.co	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
aplica.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
apollo.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
apply.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
awsqa12.progressfinservices.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
awsqa13.progressfinservices.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
awsqa7.progressfinservices.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
build.jenkins.progressfinservices.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
callback.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
collections.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
corp-fileshare.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
db-prod-redshift-cluster.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
digit-gateway-prod1.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
digit.co	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
docusign-qa12.progressfinservices.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
docusign-qa13.progressfinservices.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
exchange-admin.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
help.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
http://account.oportun.com/	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://account.oportun.com/login	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://account.oportun.com/services	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
investor.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
kiosk.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
loan.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
loans.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
locations.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
mariadb-analytics-pa-db-1-a.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
mariadb-data-db-1-a.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
mariadb-data-db-2-a.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
mysql-analytics-db-1-a.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
offers.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
office365.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
online-origination-sec-2615.dev.pfops.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
online-origination.1.app.stage	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
online-origination.1.app.stage.pfops.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
operations.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
postgres-prod-analytics-db-1-a.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
press.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
redshift-dev-cluster.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
redshift-prod-cluster.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
rewardredeem.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
services.oportun.com	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (71)

Asset	Category	Bounty
admincloud.oportun.com	URL	No
az-tools-p01.oportun.com	URL	No
betaesxi.oportun.com	URL	No
blog.oportun.com	URL	No
blogdev.oportun.com	URL	No
blue.oportun.com	URL	No
careers.oportun.com	URL	No
citrix.oportun.com	URL	No
cms2.oportun.com	URL	No
creditcard.oportun.com	URL	No
creditcards.oportun.com	URL	No
dev.oportun.com	URL	No
dev2.oportun.com	URL	No
develop.oportun.com	URL	No
devops.oportun.com	URL	No
devopsprod.oportun.com	URL	No
devpress.oportun.com	URL	No
dl.oportun.com	URL	No
email.oportun.com	URL	No
fileshare.oportun.com	URL	No
firstlook.oportun.com	URL	No
future.oportun.com	URL	No
green.oportun.com	URL	No
guest.oportun.com	URL	No
hidsts.oportun.com	URL	No
hr.oportun.com	URL	No
http://account.oportun.com/creditcards	URL	No
http://ccos-cc-5541.dev.pfops.com	URL	No
http://progressfinservices.com	URL	No
https://artifact-repository.oportun.com/ui/login	URL	No
information.oportun.com	URL	No
jenkins.oportun.com	URL	No
jira.oportun.com	URL	No
juno-srs.oportun.com	URL	No
links.email.oportun.com	URL	No
links.oportun.com	URL	No
new.oportun.com	URL	No
o1.ptr7485.oportun.com	URL	No
o151.ptr347.email.oportun.com	URL	No
o2.ptr6468.marketing.oportun.com	URL	No
o2.ptr8094.em67.oportun.com	URL	No
o3.ptr159.servicing.oportun.com	URL	No
o54.ptr2906.servicing.oportun.com	URL	No
oe.oportun.com	URL	No
oe1.oportun.com	URL	No
offer.oportun.com	URL	No
oportal.oportun.com	URL	No
oportun.com.mx	URL	No
osftp.oportun.com	URL	No
osftpw.oportun.com	URL	No
paloalto.oportun.com	URL	No
pl-0-us.oportun.com	URL	No
previewsso.oportun.com	URL	No
quickapply.oportun.com	URL	No
referrals.oportun.com	URL	No
relay.oportun.com	URL	No
rules.oportun.com	URL	No
sap.oportun.com	URL	No
sem-cdn-qa.oportun.com	URL	No
sem-cdn-stage.oportun.com	URL	No
sem-cdn.oportun.com	URL	No
share.oportun.com	URL	No
space.oportun.com	URL	No
sso.oportun.com	URL	No
staging.oportun.com	URL	No
staging.progressfinservices.com	URL	No
tags.oportun.com	URL	No
test-us-east1.oportun.com	URL	No
testuat.oportun.com	URL	No
webmail2.oportun.com	URL	No
webvpn.oportun.com	URL	No