pictet-group-bug-bounty-program

YesWeHackView on YesWeHack
RawAI Enhanced
8
In Scope
3
Out of Scope
In-Scope Assets (8)
AssetCategoryBountyQuick Links
https://am.pictet.com/URLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://documents.am.pictet/URLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://edge.pictet.co.jpOTHERYes-
https://go.pictet.co.jpURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://pamj.my.site.comOTHERYes-
https://pictet.co.jpURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://portal.am.pictet.com/it/loginURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://www.pictet.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
Out-of-Scope Assets (3)
AssetCategoryBounty
All domains or subdomains not listed in the above list of 'Scopes' are automatically out of scope.OTHERYes
Attacks on administrative and surrounding systems that are not used for the in-scope services are not permitted (this includes DNS, NTP, routers, systems of the ISP, etc.).OTHERYes
Specifically, the https://private.pictet.com/ login page is out of scope.OTHERYes
Scope Changes (11)
Apr 16, 2026
ChangeAssetCategoryScopeTime
Addedhttps://www.pictet.comURLIn Scope18:33
Addedhttps://am.pictet.com/URLIn Scope18:33
Addedhttps://documents.am.pictet/URLIn Scope18:33
Addedhttps://pictet.co.jpURLIn Scope18:33
Addedhttps://pamj.my.site.comOTHERIn Scope18:33
Addedhttps://edge.pictet.co.jpOTHERIn Scope18:33
Addedhttps://go.pictet.co.jpURLIn Scope18:33
Addedhttps://portal.am.pictet.com/it/loginURLIn Scope18:33
Addedall domains or subdomains not listed in the above list of 'scopes' are automatically out of scopeOTHEROut of Scope18:33
Addedspecifically, the https://private.pictet.com/ login page is out of scopeOTHEROut of Scope18:33
Addedattacks on administrative and surrounding systems that are not used for the in-scope services are not permitted (this includes dns, ntp, routers, systems of the isp, etc.)OTHEROut of Scope18:33