Capital One

Capital One

Top 10K site
Bounty Partial Safe Harbor

Program Details

Handle
capital-one
Managed
Yes

Response Metrics

Response Time
2 days
Resolution Time
212 days
Response Efficiency
88%

Scope (27 targets)

web: 9 mobile: 17 other: 1

Bounty splitting: No

In Scope

  • *.bluetarp.com web recognition only
  • *.capitalone.ca web recognition only
  • *.capitalone.co.uk web recognition only
  • *.capitalone.com web recognition only
  • *.capitaloneshopping.com web recognition only
  • *.luma.co.uk web recognition only
  • *.teamstercardnow.com web recognition only
  • *.theunioncard.com web recognition only
  • *.wikibuy.com web recognition only
  • 1008234539 mobile recognition only
  • 1109537081 mobile recognition only
  • 1291519134 mobile recognition only
  • 1380744689 mobile recognition only
  • 1450441660 mobile recognition only
  • 407558537 mobile recognition only
  • 481679012 mobile recognition only
  • 808215470 mobile recognition only
  • 907613256 mobile recognition only
  • Eno® Browser Extension other recognition only
  • ca.capitalone.enterprisemobilebanking mobile recognition only
  • and 7 more targets

Out of Scope

*.criticalstack.com, *.intelstack.com, *.unitedincome.com, 414607046, asos-idcheck.capitalone.co.uk, com.yinzcam.facilities.verizon, idcheck.capitalone.co.uk, jamfproqa.capitalone.com, littlewoods-idcheck.capitalone.co.uk, luma-idcheck.capitalone.co.uk, ocean-idcheck.capitalone.co.uk, postoffice-idcheck.capitalone.co.uk, thinkmoney-idcheck.capitalone.co.uk, travel-qa.capitalone.com, travel.capitalone.com, very-idcheck.capitalone.co.uk

security.txt expired

Contact
[email protected]
Policy
https://www.capitalone.com/digital/responsible-disclosure/
Languages
EN
Expires
Dec 14, 2025
View raw security.txt →