BC Bugcrowd LIVE
TheFork Managed Bug Bounty Engagement
up to$3,500
Open on Bugcrowd ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- managed triage
- yes
- safe harbor
- full
17 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
https://api-ws.thefork.com | api | · | · | 2026-09-20 |
https://api.thefork.com | api | · | · | 2026-09-20 |
https://api.thefork.io | api | · | · | 2026-09-20 |
https://blog.thefork.com/ | domain | · | · | 2026-09-20 |
https://m.thefork.com | domain | · | · | 2026-09-20 |
https://manager.thefork.com | domain | · | · | 2026-09-20 |
https://payment.lafourchette.com | domain | · | · | 2026-09-20 |
https://secure.thefork.com | domain | · | · | 2026-09-20 |
https://widget.thefork.com | domain | · | · | 2026-09-20 |
https://www.restaurant-information.com | domain | · | · | 2026-09-20 |
https://www.thefork.com | domain | · | · | 2026-09-20 |
https://www.theforkmanager.com | domain | · | · | 2026-09-20 |
https://apps.apple.com/app/thefork-manager-neo/id1295795281 | mobile | · | · | 2026-09-20 |
https://apps.apple.com/app/thefork-restaurants-bookings/id424850908 | mobile | · | · | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.lafourchette.lafourchette | mobile | · | · | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.lafourchette.tfm3 | mobile | · | · | 2026-09-20 |
https://*.tools.thefork.tech | wildcard | · | · | 2026-09-20 |
10 out of scope — black ICE, don't touch
*.myfourchette.comapihttps://www.lafourchette.comdomainlogin.theforkmanager.comdomainmodule.thefork.comdomainwebsite.theforkmanager.comdomainwww.myfourchette.comdomaindeveloper.thefork.ioother*.lafourchette.restwildcardhttps://*.eltenedor.*wildcardhttps://www.thefork.*wildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.