Upwork

At a glance#

• Maximum payout: $5,000
• Public disclosure: Not allowed
• Managed by the platform: Yes
• Safe harbour: Unknown

In scope#

• https://www.upwork.com
• Upwork - Android Application
• Upwork - iOS Application
• Upwork Dash Messenger Desktop Version (www.upwork.com/downloads)
• www.upwork.com/api
• Direct Contracts
• api.upwork.com/graphql
• Upwork - Marketplace Portal
• Upwork - Messages
• Upwork - Mobile Application IOS
• Upwork - Mobile Application Android
• Upwork - api.upwork.com/graphql

Out of scope#

• Social media hijacking
• Any subdomain/domain/property not listed in the 'in scope' section, is out of scope.
• Any Third-party Services
• support.upwork.com
• community.stage.upwork.com
• community.upwork.com
• stage.upwork.com
• e.upwork.com
• status.upwork.com
• signature.upwork.com
• careers.upwork.com
• tip.upwork.com
• tip.upwork.com
• pardot.upwork.com

Imported from the public directory. Always confirm scope on the official program page before testing.