expressvpn-bug-bounty-program
30
In Scope
1
Out of Scope
In-Scope Assets (30)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.expressvpn.com | URL | Yes | ||
| *.polymoon.it | URL | Yes | ||
| *.xvservice.net | URL | Yes | ||
| *.xvtest.net | URL | Yes | ||
| 1pw-scim.prd.iat.it.xvservice.net | URL | Yes | ||
| Any Applications under https://www.expressvpn.com/latest | OTHER | Yes | - | |
| ExpressVPN APIs | URL | Yes | - | |
| ExpressVPN Router | OTHER | Yes | - | |
| ExpressVPN VPN servers | OTHER | Yes | - | |
| TrustedServer 100,000 Bonus Award (See Program Policy for Info) | OTHER | Yes | - | |
| app.expressmailguard.com | URL | Yes | ||
| corp.polymoon.it | URL | Yes | ||
| expressvpn.jobs | URL | Yes | ||
| gatekeeper.prd.iat.it.xvservice.net | URL | Yes | ||
| gh-mail.expressvpn.com | URL | Yes | ||
| https://api.blts.kape.com | URL | Yes | ||
| https://api.dbs.kape.com | URL | Yes | ||
| https://api.dts.kape.com | URL | Yes | ||
| https://api.enc.kape.com | URL | Yes | ||
| https://api.expressvpn.com | URL | Yes | ||
| https://api.jwks.kape.com | URL | Yes | ||
| https://api.pcrs.kape.com | URL | Yes | ||
| https://cp.expressapisv2.net | URL | Yes | ||
| https://github.com/expressvpn/lightway | OTHER | Yes | - | |
| https://xv-cp.apis-staging.xvtest.net/ | URL | Yes | ||
| iat.it.xvservice.net | URL | Yes | ||
| it.xvservice.net | URL | Yes | ||
| networkguard.com | URL | Yes | ||
| prd.iat.it.xvservice.net | URL | Yes | ||
| vector.prd.iat.it.xvservice.net | URL | Yes |
Out-of-Scope Assets (1)
| Asset | Category | Bounty | |
|---|---|---|---|
| All domains or subdomains not listed in the above list of 'Scopes' | OTHER | Yes |
Scope Changes (31)
Apr 16, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *.expressvpn.com | URL | In Scope | 18:33 |
| Added | app.expressmailguard.com | URL | In Scope | 18:33 |
| Added | expressvpn.jobs | URL | In Scope | 18:33 |
| Added | expressvpn apis | URL | In Scope | 18:33 |
| Added | https://xv-cp.apis-staging.xvtest.net/ | URL | In Scope | 18:33 |
| Added | https://cp.expressapisv2.net | URL | In Scope | 18:33 |
| Added | https://api.expressvpn.com | URL | In Scope | 18:33 |
| Added | https://api.enc.kape.com | URL | In Scope | 18:33 |
| Added | https://api.dbs.kape.com | URL | In Scope | 18:33 |
| Added | https://api.dts.kape.com | URL | In Scope | 18:33 |
| Added | https://api.blts.kape.com | URL | In Scope | 18:33 |
| Added | https://api.pcrs.kape.com | URL | In Scope | 18:33 |
| Added | https://api.jwks.kape.com | URL | In Scope | 18:33 |
| Added | expressvpn vpn servers | OTHER | In Scope | 18:33 |
| Added | expressvpn router | OTHER | In Scope | 18:33 |
| Added | *.xvtest.net | URL | In Scope | 18:33 |
| Added | *.xvservice.net | URL | In Scope | 18:33 |
| Added | it.xvservice.net | URL | In Scope | 18:33 |
| Added | 1pw-scim.prd.iat.it.xvservice.net | URL | In Scope | 18:33 |
| Added | gatekeeper.prd.iat.it.xvservice.net | URL | In Scope | 18:33 |
| Added | iat.it.xvservice.net | URL | In Scope | 18:33 |
| Added | prd.iat.it.xvservice.net | URL | In Scope | 18:33 |
| Added | vector.prd.iat.it.xvservice.net | URL | In Scope | 18:33 |
| Added | gh-mail.expressvpn.com | URL | In Scope | 18:33 |
| Added | *.polymoon.it | URL | In Scope | 18:33 |
| Added | corp.polymoon.it | URL | In Scope | 18:33 |
| Added | networkguard.com | URL | In Scope | 18:33 |
| Added | any applications under https://www.expressvpn.com/latest | OTHER | In Scope | 18:33 |
| Added | https://github.com/expressvpn/lightway | OTHER | In Scope | 18:33 |
| Added | trustedserver 100,000 bonus award (see program policy for info) | OTHER | In Scope | 18:33 |
| Added | all domains or subdomains not listed in the above list of 'scopes' | OTHER | Out of Scope | 18:33 |