Bug Bounties
British Airways VDP

British Airways VDP

Top 10K site
britishairways.com → Contact

Program Details

Handle
british_airways_vdp
Managed
No

Response Metrics

Response Time
1 day
Bounty Time
9 days
Resolution Time
2601 days
Response Efficiency
74%

Scope (7 targets)

web: 4 mobile: 2 other: 1

Bounty splitting: No

In Scope

  • *.ba.com web recognition only
  • *.britishairways.com web recognition only
  • Security vulnerabilities that are identified in digital properties owned, operated, or controlled by British Airways are considered in scope. other recognition only
  • com.ba.mobile mobile recognition only
  • com.britishairways.BAFlights mobile recognition only
  • http://www.britishairways.com/nx web recognition only
  • www.britishairways.com web recognition only

Out of Scope

Testing is not permitted on internal systems, employee portals, onboard aircraft systems, third-party services, or any assets using external networks or domains not directly owned or controlled by British Airways, accounts.britishairways.com, holiday.britishairways.com