UPLINK OK // SYNC 57M AGO

H1 HackerOne LIVE

GoCardless Bug Bounty Program

apidomainothersource codewildcard
pays bountiesTABLE ↗ Open on HackerOne ↗
listed
before tracking
tracked since
2026-09-20
website
https://gocardless.com
managed triage
yes
response efficiency
97%
first response
9h avg
time to bounty
250h avg

18 targets in scope

assettypebountymax sevseen
https://ob-sandbox.gocardless.ioapi no medium2026-09-20
api-sandbox.gocardless.comdomain yes critical2026-09-20
auth0.gocardless.comdomain no medium2026-09-20
connect-sandbox.gocardless.comdomain yes high2026-09-20
developer.gocardless.comdomain yes low2026-09-20
http://sso-demo.gocardless-staging.iodomain no low2026-09-20
manage-sandbox.gocardless.comdomain yes high2026-09-20
oauth-sandbox.gocardless.comdomain yes high2026-09-20
ob.gocardless.comdomain yes medium2026-09-20
pay-sandbox.gocardless.comdomain yes critical2026-09-20
payer-details-sandbox.gocardless.comdomain yes high2026-09-20
www.gocardless.comdomain yes low2026-09-20
bankaccountdata.gocardless.comother no high2026-09-20
https://github.com/gocardlesssource code yes medium2026-09-20
*.gocardless-cicd.iowildcard no medium2026-09-20
*.gocardless-lab.iowildcard no low2026-09-20
*.gocardless.devwildcard no none2026-09-20
*.gocardless.io,*.gocardless-banking.iowildcard no high2026-09-20
23 out of scope — black ICE, don't touch

Change log

get alerts ↗

No changes since we started tracking on 2026-09-20.