H1 HackerOne LIVE
Tesco
no bountyVDP
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- http://tesco.com
- managed triage
- yes
- response efficiency
- 94%
- first response
- 1h avg
24 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
389581236 | mobile | no | critical | 2026-09-20 |
857834425 | mobile | no | none | 2026-09-20 |
com.tesco.grocery.view | mobile | no | critical | 2026-09-20 |
API Assets | other | no | critical | 2026-09-20 |
Cloud Assets | other | no | critical | 2026-09-20 |
Domain, Subdomain & Zone Takeovers | other | no | medium | 2026-09-20 |
Exposed Sensitive Documents | other | no | critical | 2026-09-20 |
Leaked & Default Credentials | other | no | critical | 2026-09-20 |
Medium, High and Critical Severity Issue on Out-Of-Scope Assets | other | no | critical | 2026-09-20 |
Third-Party Managed Assets | other | no | critical | 2026-09-20 |
*.itesco.cz/* | wildcard | no | critical | 2026-09-20 |
*.itesco.sk/* | wildcard | no | critical | 2026-09-20 |
*.ourtesco.com/* | wildcard | no | critical | 2026-09-20 |
*.tesco-europe.com/* | wildcard | no | critical | 2026-09-20 |
*.tesco.com/* | wildcard | no | critical | 2026-09-20 |
*.tesco.hu/* | wildcard | no | critical | 2026-09-20 |
*.tesco.ie/* | wildcard | no | critical | 2026-09-20 |
*.tesco.org/* | wildcard | no | critical | 2026-09-20 |
*.tesco.sk/* | wildcard | no | critical | 2026-09-20 |
*.tescocloud.com/* | wildcard | no | critical | 2026-09-20 |
*.tescoplc.com/* | wildcard | no | critical | 2026-09-20 |
https://www.booker.co.uk/* | wildcard | no | critical | 2026-09-20 |
https://www.onestop.co.uk/* | wildcard | no | critical | 2026-09-20 |
https://www.tescomobile.com/* | wildcard | no | critical | 2026-09-20 |
3 out of scope — black ICE, don't touch
com.tescobank.mobilemobileDunnhumby (Non-Critical)otherTesco Bankother
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.