Bug Bounties
British Airways VDP

British Airways VDP

Top 10K site
britishairways.com → Contact

Program Details

Handle
british_airways_vdp
Managed
Yes

Response Metrics

Response Time
39 days
Bounty Time
9 days
Resolution Time
2280 days
Response Efficiency
65%

Scope (7 targets)

web: 4 mobile: 2 other: 1

Bounty splitting: No

In Scope

  • *.ba.com web recognition only
  • *.britishairways.com web recognition only
  • Security vulnerabilities that are identified in digital properties owned, operated, or controlled by British Airways are considered in scope. other recognition only
  • com.ba.mobile mobile recognition only
  • com.britishairways.BAFlights mobile recognition only
  • http://www.britishairways.com/nx web recognition only
  • www.britishairways.com web recognition only

Out of Scope

Testing is not permitted on internal systems, employee portals, onboard aircraft systems, third-party services, or any assets using external networks or domains not directly owned or controlled by British Airways, accounts.britishairways.com, holiday.britishairways.com