BC Bugcrowd LIVE
YNAB
up to$3,000
Open on Bugcrowd ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- managed triage
- yes
- safe harbor
- full
3 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
https://staging-api.bany.dev/ | api | · | · | 2026-09-20 |
https://www.ynab.com/ | domain | · | · | 2026-09-20 |
staging-app.bany.dev | domain | · | · | 2026-09-20 |
5 out of scope — black ICE, don't touch
https://app.ynab.com/domainhttps://develop-app.ynab.comdomainhttps://learn.ynab.com/domainhttps://support.ynab.comdomainAny previous version of the desktop apps: YNAB 4, YNAB 3, YNAB Pro, YNAB Basic (Spreadsheet)other
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.