bug bounty directory
Visa bug bounty program
HackerOne pays bounties 150 in-scope assets managed
Visa runs a public bug bounty program hosted on HackerOne. The program currently lists 150 in-scope assets that authorised security researchers may test under the program's rules. Valid findings are eligible for monetary rewards.
// example in-scope assets
*.prod.innovexperiments.com*.visamiddleeast.comadmin-portal.api-xperience.comapi.prod.innovexperiments.comAlways read the official policy before testing — scope, exclusions and safe-harbor terms are set by the program, and testing outside the authorised scope is not permitted. New to bug bounty? Warm up in our free hands-on labs and academy first.
// more HackerOne programs
// data aggregated from public HackerOne listings · refreshed 8/24/2026 · the official program page is authoritative