BC Bugcrowd LIVE
Mastercard Public Bug Bounty
up to$5,000
Open on Bugcrowd ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- managed triage
- yes
- safe harbor
- partial
22 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
Finicity - OBB (Open Banking Business Service) | api | · | · | 2026-09-20 |
Finicity Connect | api | · | · | 2026-09-20 |
Finicity Decisioning | api | · | · | 2026-09-20 |
Finicity- Data Services | api | · | · | 2026-09-20 |
Finicity- Open Banking Payment History application | api | · | · | 2026-09-20 |
SRC integration on https://masterpassteststore.com/. Only the Masterpass checkout functionality is in scope | domain | · | · | 2026-09-20 |
https://consumer.finicityreports.com | domain | · | · | 2026-09-20 |
https://demo.priceless.com/ | domain | · | · | 2026-09-20 |
https://developer.mastercard.com | domain | · | · | 2026-09-20 |
https://donate.mastercard.com | domain | · | · | 2026-09-20 |
https://performancemarketing.mastercard.com/portal/ | domain | · | · | 2026-09-20 |
https://pioneer.truata.com/ | domain | · | · | 2026-09-20 |
https://priceless.com/golf/ | domain | · | · | 2026-09-20 |
https://src.mastercard.com/profile/enroll | domain | · | · | 2026-09-20 |
https://www.finicity.com | domain | · | · | 2026-09-20 |
https://www.mastercard.ch/de-ch.html | domain | · | · | 2026-09-20 |
https://www.mastercard.ch/fr-ch.html | domain | · | · | 2026-09-20 |
https://www.mastercard.com.au/en-au.html | domain | · | · | 2026-09-20 |
https://www.mastercard.nl/nl-nl.html | domain | · | · | 2026-09-20 |
https://www.mastercard.us/en-us.html | domain | · | · | 2026-09-20 |
Public Others Target | other | · | · | 2026-09-20 |
https://src.mastercard.com/* | wildcard | · | · | 2026-09-20 |
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.