paddle-com-public-bug-bounty-program

YesWeHackView on YesWeHack
RawAI Enhanced
12
In Scope
3
Out of Scope
In-Scope Assets (12)
AssetCategoryBountyQuick Links
https://api.paddle.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://customer-portal.paddle.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://developer.paddle.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://login.paddle.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://paddle.netURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://sandbox-api.paddle.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://sandbox-buy.paddle.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://sandbox-checkout-service.paddle.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://sandbox-login.paddle.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://sandbox-vendors.paddle.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://vendors.paddle.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://www.paddle.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
Out-of-Scope Assets (3)
AssetCategoryBounty
All domains, subdomains or assets not listed in the above list of 'Scopes' must be considered as out of the scope of this programOTHERYes
https://buy.paddle.comOTHERYes
https://checkout-service.paddle.comOTHERYes
Scope Changes (15)
Apr 16, 2026
ChangeAssetCategoryScopeTime
Addedhttps://vendors.paddle.comURLIn Scope18:33
Addedhttps://sandbox-vendors.paddle.comURLIn Scope18:33
Addedhttps://api.paddle.comURLIn Scope18:33
Addedhttps://sandbox-api.paddle.comURLIn Scope18:33
Addedhttps://sandbox-checkout-service.paddle.comURLIn Scope18:33
Addedhttps://sandbox-buy.paddle.comURLIn Scope18:33
Addedhttps://paddle.netURLIn Scope18:33
Addedhttps://customer-portal.paddle.comURLIn Scope18:33
Addedhttps://login.paddle.comURLIn Scope18:33
Addedhttps://sandbox-login.paddle.comURLIn Scope18:33
Addedhttps://www.paddle.comURLIn Scope18:33
Addedhttps://developer.paddle.comURLIn Scope18:33
Addedall domains, subdomains or assets not listed in the above list of 'scopes' must be considered as out of the scope of this programOTHEROut of Scope18:33
Addedhttps://checkout-service.paddle.comOTHEROut of Scope18:33
Addedhttps://buy.paddle.comOTHEROut of Scope18:33