City of Vienna Managed Bug Bounty

At a glance#

• Maximum payout: $3,500
• Public disclosure: Allowed
• Managed by the platform: Yes
• Safe harbour: Full

In scope#

• https://www.wien.gv.at
• https://*.wien.gv.at
• https://*.magwien.gv.at
• https://www.gesundheitsverbund.at
• https://*.gesundheitsverbund.at
• https://*.wienkav.at
• https://www.akhwien.at
• https://*.akhwien.at
• https://stp.wien.gv.at
• https://wien.at
• https://*.wien.at
• https://secumails.gesundheitsverbund.at
• https://mein.wien.gv.at/
• https://mein.wien.gv.at/broker/api/*
• https://wibi.wien.gv.at/
• https://*.stadtwien.onmicrosoft.com
• https://schulenwien.onmicrosoft.com
• https://stadtwien-my.sharepoint.com/
• AS6720 1/2
• AS6720 2/2
• AS6720 IPv6 1/2
• AS6720 IPv6 2/2
• AS16314
• https://play.google.com/store/apps/developer?id=Stadt+Wien&hl=de_AT
• https://apps.apple.com/at/developer/stadt-wien/id858505368

Out of scope#

• https://www.wien.gv.at/advuew/*
• Public Network / Veranstaltungsnetz

Imported from the public directory. Always confirm scope on the official program page before testing.