BC Bugcrowd LIVE
Ibotta
up to$1,000
Open on Bugcrowd ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- managed triage
- yes
- safe harbor
- full
13 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
https://api.ibops.net | api | · | · | 2026-09-20 |
https://api.ibops.net/ad-management | api | · | · | 2026-09-20 |
https://api.ibotta.com | api | · | · | 2026-09-20 |
https://api.int.ibops.net | api | · | · | 2026-09-20 |
https://api.int.ibops.net/customer-loyalty-service | api | · | · | 2026-09-20 |
https://content-server.ibotta.com/graphql | api | · | · | 2026-09-20 |
http://ibotta.com | domain | · | · | 2026-09-20 |
https://app.ibotta.com/sign-in | domain | · | · | 2026-09-20 |
https://backend.ibotta.com/ | domain | · | · | 2026-09-20 |
http://itunes.apple.com/us/app/ibotta/id559887125 | mobile | · | · | 2026-09-20 |
http://market.android.com/details?id=com.ibotta.android | mobile | · | · | 2026-09-20 |
Ibotta App Data & Memory | other | · | · | 2026-09-20 |
https://chrome.google.com/webstore/detail/ibotta-browser-extension/mfaedmjlefifhnhpgipjjiiekchaimpk?hl=en-US | other | · | · | 2026-09-20 |
7 out of scope — black ICE, don't touch
https://backend.ibotta.com/duplicate_receipt_moderationapihttp://sampling.ibotta.com/domainhttps://investors.ibotta.com/domainhttps://ir.ibotta.comdomainhttps://trust.ibotta.comdomainlegal.ibotta.comdomain*dev.ibotta.comwildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.