iFood: Bug Bounty Program

In Scope

• iFood Customer Android Application mobile bounty-eligible
• iFood Customer iOS Application mobile bounty-eligible
• https://www.ifood.com.br web bounty-eligible
• https://marketplace.ifood.com.br web bounty-eligible
• Gestor de pedidos - Web ONLY web bounty-eligible
• https://wsloja.ifood.com.br web bounty-eligible
• *.movilepay.com web bounty-eligible
• *.movilepay.com.br web bounty-eligible
• https://shop.ifood.com.br web bounty-eligible
• https://static-images.ifood.com.br web bounty-eligible
• https://developer.ifood.com.br web bounty-eligible
• https://api.fstr.rocks api bounty-eligible
• https://rc.fstr.rocks api bounty-eligible
• *.zoop.com.br web bounty-eligible
• *.zoop.ws web bounty-eligible
• Minha Conta Zoop (*.minhaconta.zoop.com.br) web bounty-eligible
• *.dash.zoop.com.br web bounty-eligible
• Internet Banking (contadigital.ifoodpago.com.br/) web bounty-eligible
• Conta Digital (https://play.google.com/store/apps/details?id=br.com.movilepay.banking.application&hl=pt_BR) web bounty-eligible
• Portal iFood Pago (portal.iFoodpago.com.br) web bounty-eligible

Out of Scope

blog-empresas.ifood.com.br, blog-parceiros.ifood.com.br, *.ecomanda.com.br, *.ecomanda.app, *.allin.movilepay.com, *.starsoft.movilepay.com, Gestor de Pedidos - Desktop Client, *.openfinance.ifood.com.br, *.openfinance.ifoodpago.com.br