H1 HackerOne LIVE
Oportun
no bountyVDP
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://www.oportun.com
- managed triage
- yes
- response efficiency
- 100%
- first response
- 12h avg
44 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
api.digit.co | domain | no | critical | 2026-09-20 |
aplica.oportun.com | domain | no | critical | 2026-09-20 |
apollo.oportun.com | domain | no | critical | 2026-09-20 |
apply.oportun.com | domain | no | critical | 2026-09-20 |
awsqa12.progressfinservices.com | domain | no | critical | 2026-09-20 |
awsqa13.progressfinservices.com | domain | no | critical | 2026-09-20 |
awsqa7.progressfinservices.com | domain | no | critical | 2026-09-20 |
build.jenkins.progressfinservices.com | domain | no | critical | 2026-09-20 |
callback.oportun.com | domain | no | critical | 2026-09-20 |
collections.oportun.com | domain | no | critical | 2026-09-20 |
corp-fileshare.oportun.com | domain | no | critical | 2026-09-20 |
db-prod-redshift-cluster.oportun.com | domain | no | critical | 2026-09-20 |
digit-gateway-prod1.oportun.com | domain | no | critical | 2026-09-20 |
digit.co | domain | no | critical | 2026-09-20 |
docusign-qa12.progressfinservices.com | domain | no | critical | 2026-09-20 |
docusign-qa13.progressfinservices.com | domain | no | critical | 2026-09-20 |
exchange-admin.oportun.com | domain | no | critical | 2026-09-20 |
help.oportun.com | domain | no | critical | 2026-09-20 |
http://account.oportun.com/ | domain | no | critical | 2026-09-20 |
https://account.oportun.com/login | domain | no | critical | 2026-09-20 |
https://account.oportun.com/services | domain | no | critical | 2026-09-20 |
https://oportun.com | domain | no | high | 2026-09-20 |
investor.oportun.com | domain | no | critical | 2026-09-20 |
kiosk.oportun.com | domain | no | critical | 2026-09-20 |
loan.oportun.com | domain | no | critical | 2026-09-20 |
loans.oportun.com | domain | no | critical | 2026-09-20 |
locations.oportun.com | domain | no | critical | 2026-09-20 |
mariadb-analytics-pa-db-1-a.oportun.com | domain | no | critical | 2026-09-20 |
mariadb-data-db-1-a.oportun.com | domain | no | critical | 2026-09-20 |
mariadb-data-db-2-a.oportun.com | domain | no | critical | 2026-09-20 |
mysql-analytics-db-1-a.oportun.com | domain | no | critical | 2026-09-20 |
offers.oportun.com | domain | no | critical | 2026-09-20 |
office365.oportun.com | domain | no | critical | 2026-09-20 |
online-origination-sec-2615.dev.pfops.com | domain | no | critical | 2026-09-20 |
online-origination.1.app.stage | domain | no | critical | 2026-09-20 |
online-origination.1.app.stage.pfops.com | domain | no | critical | 2026-09-20 |
operations.oportun.com | domain | no | critical | 2026-09-20 |
oportun.com | domain | no | critical | 2026-09-20 |
postgres-prod-analytics-db-1-a.oportun.com | domain | no | critical | 2026-09-20 |
press.oportun.com | domain | no | critical | 2026-09-20 |
redshift-dev-cluster.oportun.com | domain | no | critical | 2026-09-20 |
redshift-prod-cluster.oportun.com | domain | no | critical | 2026-09-20 |
rewardredeem.oportun.com | domain | no | critical | 2026-09-20 |
services.oportun.com | domain | no | critical | 2026-09-20 |
71 out of scope — black ICE, don't touch
admincloud.oportun.comdomainbetaesxi.oportun.comdomainblog.oportun.comdomainblogdev.oportun.comdomainblue.oportun.comdomaincareers.oportun.comdomaincitrix.oportun.comdomaincms2.oportun.comdomaincreditcard.oportun.comdomaincreditcards.oportun.comdomaindev.oportun.comdomaindev2.oportun.comdomaindevelop.oportun.comdomaindevops.oportun.comdomaindevopsprod.oportun.comdomaindevpress.oportun.comdomaindl.oportun.comdomainemail.oportun.comdomainfileshare.oportun.comdomainfirstlook.oportun.comdomainfuture.oportun.comdomaingreen.oportun.comdomainguest.oportun.comdomainhidsts.oportun.comdomainhr.oportun.comdomainhttp://account.oportun.com/creditcardsdomainhttp://az-tools-p01.oportun.comdomainhttp://ccos-cc-5541.dev.pfops.comdomainhttp://progressfinservices.comdomainhttps://artifact-repository.oportun.com/ui/logindomaininformation.oportun.comdomainjenkins.oportun.comdomainjira.oportun.comdomainjuno-srs.oportun.comdomainlinks.email.oportun.comdomainlinks.oportun.comdomainnew.oportun.comdomaino1.ptr7485.oportun.comdomaino151.ptr347.email.oportun.comdomaino2.ptr6468.marketing.oportun.comdomaino2.ptr8094.em67.oportun.comdomaino3.ptr159.servicing.oportun.comdomaino54.ptr2906.servicing.oportun.comdomainoe.oportun.comdomainoe1.oportun.comdomainoffer.oportun.comdomainoportal.oportun.comdomainoportun.com.mxdomainosftp.oportun.comdomainosftpw.oportun.comdomainpaloalto.oportun.comdomainpl-0-us.oportun.comdomainpreviewsso.oportun.comdomainquickapply.oportun.comdomainreferrals.oportun.comdomainrelay.oportun.comdomainrules.oportun.comdomainsap.oportun.comdomainsem-cdn-qa.oportun.comdomainsem-cdn-stage.oportun.comdomainsem-cdn.oportun.comdomainshare.oportun.comdomainspace.oportun.comdomainsso.oportun.comdomainstaging.oportun.comdomainstaging.progressfinservices.comdomaintags.oportun.comdomaintest-us-east1.oportun.comdomaintestuat.oportun.comdomainwebmail2.oportun.comdomainwebvpn.oportun.comdomain
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.