WHO COVID-19 Mobile App bug bounty program

HackerOne 5 in-scope assets

WHO COVID-19 Mobile App runs a public vulnerability disclosure program hosted on HackerOne. The program currently lists 5 in-scope assets that authorised security researchers may test under the program's rules. It accepts vulnerability reports for recognition rather than advertising cash bounties.

// example in-scope assets

*.whocoronavirus.orghack.whocoronavirus.orghttps://github.com/WorldHealthOrganization/appint.who.WHOMyHealth

Always read the official policy before testing — scope, exclusions and safe-harbor terms are set by the program, and testing outside the authorised scope is not permitted. New to bug bounty? Warm up in our free hands-on labs and academy first.

open official HackerOne program page

// more HackerOne programs

NBA Public Bug Bounty Visa OPPO inDrive 8x8 Amazon Vulnerability Research Program

// data aggregated from public HackerOne listings · refreshed 8/24/2026 · the official program page is authoritative