holland-and-barrett-bug-bounty-program
36
In Scope
1
Out of Scope
In-Scope Assets (36)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| Holland & Barrett - Wellbeing (https://play.google.com/store/apps/details?id=com.nbty.hollandbarret) | ANDROID | Yes | - | |
| auth.hollandandbarrett.com | URL | Yes | ||
| checkout.assets.hollandandbarrett.com | URL | Yes | ||
| corporate.hollandandbarrett.com | URL | Yes | ||
| hollandandbarrett.ie | URL | Yes | ||
| http://hbi-dam-prod.s3-website-eu-west-1.amazonaws.com:80 | OTHER | Yes | - | |
| http://hbi-dam-prod.s3.eu-west-1.amazonaws.com:80 | OTHER | Yes | - | |
| http://hbi-journey-beyondbyhb-assets-dev.s3-website-eu-west-1.amazonaws.com:80 | OTHER | Yes | - | |
| http://hbi-journey-beyondbyhb-assets-dev.s3.eu-west-1.amazonaws.com:80 | OTHER | Yes | - | |
| http://hbi-journey-beyondbyhb-assets-prod.s3-website-eu-west-1.amazonaws.com:80 | OTHER | Yes | - | |
| http://hbi-journey-beyondbyhb-assets-prod.s3.eu-west-1.amazonaws.com:80 | OTHER | Yes | - | |
| http://hbi-legacy-atg-images-dev.s3-website-eu-west-1.amazonaws.com:80 | OTHER | Yes | - | |
| http://hbi-legacy-atg-images-dev.s3.eu-west-1.amazonaws.com:80 | OTHER | Yes | - | |
| http://hbi-legacy-atg-images-prod.s3-website-eu-west-1.amazonaws.com:80 | OTHER | Yes | - | |
| http://hbi-legacy-atg-images-prod.s3.eu-west-1.amazonaws.com:80 | OTHER | Yes | - | |
| http://hbi-replatform-homepage-prod.s3-website-eu-west-1.amazonaws.com:80 | OTHER | Yes | - | |
| http://hbi-replatform-homepage-prod.s3.eu-west-1.amazonaws.com:80 | OTHER | Yes | - | |
| https://auth.hollandandbarrett.be | URL | Yes | ||
| https://authentication-app.assets.hollandandbarrett.com | URL | Yes | ||
| https://cdn1.assets.hollandandbarrett.com | URL | Yes | ||
| https://composer.assets.hollandandbarrett.com | URL | Yes | ||
| https://dam.hollandandbarrettimages.co.uk | URL | Yes | ||
| https://hbi-dam-prod.s3.eu-west-1.amazonaws.com:443 | OTHER | Yes | - | |
| https://hbi-journey-beyondbyhb-assets-dev.s3.eu-west-1.amazonaws.com:443 | OTHER | Yes | - | |
| https://hbi-journey-beyondbyhb-assets-prod.s3.eu-west-1.amazonaws.com:443 | OTHER | Yes | - | |
| https://hbi-legacy-atg-images-dev.s3.eu-west-1.amazonaws.com:443 | OTHER | Yes | - | |
| https://hbi-legacy-atg-images-prod.s3.eu-west-1.amazonaws.com:443 | OTHER | Yes | - | |
| https://hbi-replatform-homepage-prod.s3.eu-west-1.amazonaws.com:443 | OTHER | Yes | - | |
| https://images.hollandandbarrettimages.co.uk | URL | Yes | ||
| https://my-account.assets.hollandandbarrett.com | URL | Yes | ||
| https://order-returns-gateway.api.hbi.systems | URL | Yes | ||
| https://order-status-gateway.api.hbi.systems | URL | Yes | ||
| https://www.hollandandbarrett.be | URL | Yes | ||
| https://www.hollandandbarrett.com | URL | Yes | ||
| https://www.hollandandbarrett.nl | URL | Yes | ||
| https://www.hollandandbarrettcorporate.com | URL | Yes |
Out-of-Scope Assets (1)
| Asset | Category | Bounty | |
|---|---|---|---|
| All domains not listed In-Scope | OTHER | Yes |
Scope Changes (37)
Apr 16, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://www.hollandandbarrett.com | URL | In Scope | 18:33 |
| Added | https://www.hollandandbarrett.nl | URL | In Scope | 18:33 |
| Added | hollandandbarrett.ie | URL | In Scope | 18:33 |
| Added | https://www.hollandandbarrett.be | URL | In Scope | 18:33 |
| Added | https://www.hollandandbarrettcorporate.com | URL | In Scope | 18:33 |
| Added | holland & barrett - wellbeing (https://play.google.com/store/apps/details?id=com.nbty.hollandbarret) | ANDROID | In Scope | 18:33 |
| Added | https://auth.hollandandbarrett.be | URL | In Scope | 18:33 |
| Added | https://authentication-app.assets.hollandandbarrett.com | URL | In Scope | 18:33 |
| Added | https://my-account.assets.hollandandbarrett.com | URL | In Scope | 18:33 |
| Added | https://composer.assets.hollandandbarrett.com | URL | In Scope | 18:33 |
| Added | https://dam.hollandandbarrettimages.co.uk | URL | In Scope | 18:33 |
| Added | https://images.hollandandbarrettimages.co.uk | URL | In Scope | 18:33 |
| Added | https://cdn1.assets.hollandandbarrett.com | URL | In Scope | 18:33 |
| Added | https://order-returns-gateway.api.hbi.systems | URL | In Scope | 18:33 |
| Added | https://order-status-gateway.api.hbi.systems | URL | In Scope | 18:33 |
| Added | http://hbi-legacy-atg-images-prod.s3.eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | https://hbi-replatform-homepage-prod.s3.eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | http://hbi-legacy-atg-images-dev.s3-website-eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | http://hbi-journey-beyondbyhb-assets-dev.s3-website-eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | http://hbi-dam-prod.s3.eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | https://hbi-journey-beyondbyhb-assets-dev.s3.eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | https://hbi-journey-beyondbyhb-assets-prod.s3.eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | http://hbi-journey-beyondbyhb-assets-prod.s3-website-eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | http://hbi-dam-prod.s3-website-eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | http://hbi-replatform-homepage-prod.s3-website-eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | https://hbi-legacy-atg-images-prod.s3.eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | https://hbi-legacy-atg-images-dev.s3.eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | http://hbi-journey-beyondbyhb-assets-dev.s3.eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | http://hbi-legacy-atg-images-prod.s3-website-eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | http://hbi-journey-beyondbyhb-assets-prod.s3.eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | http://hbi-legacy-atg-images-dev.s3.eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | https://hbi-dam-prod.s3.eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | http://hbi-replatform-homepage-prod.s3.eu-west-1.amazonaws.com | OTHER | In Scope | 18:33 |
| Added | auth.hollandandbarrett.com | URL | In Scope | 18:33 |
| Added | checkout.assets.hollandandbarrett.com | URL | In Scope | 18:33 |
| Added | corporate.hollandandbarrett.com | URL | In Scope | 18:33 |
| Added | all domains not listed in-scope | OTHER | Out of Scope | 18:33 |