Mastercard Public Bug Bounty

At a glance#

• Maximum payout: $5,000
• Public disclosure: Allowed
• Managed by the platform: Yes
• Safe harbour: Partial

In scope#

• https://www.mastercard.us/en-us.html
• https://www.mastercard.ch/de-ch.html
• https://www.mastercard.ch/fr-ch.html
• https://www.mastercard.com.au/en-au.html
• https://www.mastercard.nl/nl-nl.html
• https://developer.mastercard.com
• https://donate.mastercard.com
• https://demo.priceless.com/
• https://priceless.com/golf/
• https://performancemarketing.mastercard.com/portal/
• https://src.mastercard.com/profile/enroll
• https://src.mastercard.com/*
• SRC integration on https://masterpassteststore.com/. Only the Masterpass checkout functionality is in scope
• Finicity Connect
• Finicity- Data Services
• Finicity Decisioning
• https://www.finicity.com
• https://consumer.finicityreports.com
• Finicity- Open Banking Payment History application
• Finicity - OBB (Open Banking Business Service)
• https://pioneer.truata.com/
• Public Others Target

Imported from the public directory. Always confirm scope on the official program page before testing.