Bug Bounties
LastPass

LastPass

Top 10K site
bugcrowd.com → Contact
Bounty RecognitionPartial Safe Harbor Up to USD $5,000

Program Details

Managed
Yes
Allows Disclosure
No

Scope (14 targets)

web: 7 mobile: 4 other: 3

In Scope

  • https://lastpass.com web bounty-eligible
  • LastPass browser extensions (Chrome / Safari / Edge / Firefox) other bounty-eligible
  • Local computer apps (UWP application / Windows installer (MSI) / MacOS) other bounty-eligible
  • https://support.lastpass.com web bounty-eligible
  • Workstation MFA (WMFA) other bounty-eligible
  • https://blog.lastpass.com web bounty-eligible
  • https://admin.lastpass.com web bounty-eligible
  • https://auth.lastpass.com web bounty-eligible
  • https://accounts.lastpass.com web bounty-eligible
  • https://www.lastpass.com web bounty-eligible
  • LastPass Password Manager (Android) mobile bounty-eligible
  • LastPass Authenticator (Android) mobile bounty-eligible
  • LastPass Password Manager (iOS) mobile bounty-eligible
  • LastPass Authenticator (iOS) mobile bounty-eligible

Out of Scope

https://identity.lastpass.com, Lastpass CLI tool, https://info.lastpass.com, https://forums.lastpass.com

Additional Info

Sources
bugcrowd