PentestingHere
Log in Join

LastPass

LastPass on Bugcrowd · Bugcrowd Active

Official page

Scope

At a glance

  • Maximum payout: $5,000
  • Public disclosure: Not allowed
  • Managed by the platform: Yes
  • Safe harbour: Partial

In scope

  • https://lastpass.com
  • https://lastpass.com/misc_download2.php
  • https://support.lastpass.com
  • Workstation MFA (WMFA)
  • https://blog.lastpass.com
  • https://admin.lastpass.com
  • https://auth.lastpass.com
  • https://accounts.lastpass.com
  • https://www.lastpass.com
  • https://play.google.com/store/apps/details?id=com.lastpass.lpandroid
  • https://play.google.com/store/apps/details?id=com.lastpass.authenticator&hl=en_US&gl=US
  • https://apps.apple.com/us/app/lastpass-password-manager/id324613447
  • https://apps.apple.com/us/app/lastpass-authenticator/id1079110004

Out of scope

  • https://identity.lastpass.com
  • Lastpass CLI tool
  • https://info.lastpass.com
  • https://forums.lastpass.com

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback