LastPass
LastPass on Bugcrowd · Bugcrowd Active
Scope
At a glance
- Maximum payout: $5,000
- Public disclosure: Not allowed
- Managed by the platform: Yes
- Safe harbour: Partial
In scope
https://lastpass.comhttps://lastpass.com/misc_download2.phphttps://support.lastpass.comWorkstation MFA (WMFA)https://blog.lastpass.comhttps://admin.lastpass.comhttps://auth.lastpass.comhttps://accounts.lastpass.comhttps://www.lastpass.comhttps://play.google.com/store/apps/details?id=com.lastpass.lpandroidhttps://play.google.com/store/apps/details?id=com.lastpass.authenticator&hl=en_US&gl=UShttps://apps.apple.com/us/app/lastpass-password-manager/id324613447https://apps.apple.com/us/app/lastpass-authenticator/id1079110004
Out of scope
https://identity.lastpass.comLastpass CLI toolhttps://info.lastpass.comhttps://forums.lastpass.com
Imported from the public directory. Always confirm scope on the official program page before testing.