maya-public-bug-bounty-program
9
In Scope
3
Out of Scope
In-Scope Assets (9)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| https://api.paymaya.com/ | URL | Yes | ||
| https://appgallery.huawei.com/app/C101186357 | ANDROID | Yes | - | |
| https://apps.apple.com/am/app/maya-your-all-in-one-money-app/id991673877 | IOS | Yes | - | |
| https://connect.paymaya.com/ | URL | Yes | ||
| https://op.paymaya.com/ | URL | Yes | ||
| https://paymayabiller-prod.paymaya.com/ | URL | Yes | ||
| https://payoutapi.maya.ph/ | URL | Yes | ||
| https://pg.paymaya.com | URL | Yes | ||
| https://play.google.com/store/apps/details?id=com.paymaya | ANDROID | Yes |
Out-of-Scope Assets (3)
| Asset | Category | Bounty | |
|---|---|---|---|
| All domains or subdomains not listed in the above list of 'Scopes' | OTHER | Yes | |
| Non-Production environments (test, dev, staging, or sandbox) | OTHER | Yes | |
| Other subdomain of paymaya.com that has no direct integration/part of the mobile application | OTHER | Yes |
Scope Changes (12)
Apr 16, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://play.google.com/store/apps/details?id=com.paymaya | ANDROID | In Scope | 18:33 |
| Added | https://apps.apple.com/am/app/maya-your-all-in-one-money-app/id991673877 | IOS | In Scope | 18:33 |
| Added | https://appgallery.huawei.com/app/C101186357 | ANDROID | In Scope | 18:33 |
| Added | https://api.paymaya.com/ | URL | In Scope | 18:33 |
| Added | https://pg.paymaya.com | URL | In Scope | 18:33 |
| Added | https://payoutapi.maya.ph/ | URL | In Scope | 18:33 |
| Added | https://op.paymaya.com/ | URL | In Scope | 18:33 |
| Added | https://connect.paymaya.com/ | URL | In Scope | 18:33 |
| Added | https://paymayabiller-prod.paymaya.com/ | URL | In Scope | 18:33 |
| Added | all domains or subdomains not listed in the above list of 'scopes' | OTHER | Out of Scope | 18:33 |
| Added | other subdomain of paymaya.com that has no direct integration/part of the mobile application | OTHER | Out of Scope | 18:33 |
| Added | non-production environments (test, dev, staging, or sandbox) | OTHER | Out of Scope | 18:33 |