bbradar.io
    Back to Programs
    ExpressVPN - Bug Bounty Program logo

    ExpressVPN - Bug Bounty Program

    Visit Program
    Yeswehack
    $50 - $2,500

    Tags

    api
    domain
    wildcard

    Program Targets

    Last updated Oct 25, 2025

    Showing 30 of 30

    ExpressVPN APIs

    Eligible for Bounty
    In scope
    APIs
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    https://api.blts.kape.com

    Eligible for Bounty
    In scope
    APIs
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    https://api.dbs.kape.com

    Eligible for Bounty
    In scope
    APIs
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    https://api.dts.kape.com

    Eligible for Bounty
    In scope
    APIs
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    https://api.enc.kape.com

    Eligible for Bounty
    In scope
    APIs
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    https://api.expressvpn.com

    Eligible for Bounty
    In scope
    APIs
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    https://api.jwks.kape.com

    Eligible for Bounty
    In scope
    APIs
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    https://api.pcrs.kape.com

    Eligible for Bounty
    In scope
    APIs
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    https://cp.expressapisv2.net

    Eligible for Bounty
    In scope
    APIs
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    https://xv-cp.apis-staging.xvtest.net/

    Eligible for Bounty
    In scope
    APIs
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    *.expressvpn.com

    Eligible for Bounty
    In scope
    Wildcard
    Domains
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    *.polymoon.it

    Eligible for Bounty
    In scope
    Wildcard
    Domains
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    *.xvservice.net

    Eligible for Bounty
    In scope
    Wildcard
    Domains
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    *.xvtest.net

    Eligible for Bounty
    In scope
    Wildcard
    Domains
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    1pw-scim.prd.iat.it.xvservice.net

    Eligible for Bounty
    In scope
    Domains
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    Any Applications under https://www.expressvpn.com/latest

    Eligible for Bounty
    In scope
    Domains
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    corp.polymoon.it

    Eligible for Bounty
    In scope
    Domains
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    expressvpn.jobs

    Eligible for Bounty
    In scope
    Domains
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    gatekeeper.prd.iat.it.xvservice.net

    Eligible for Bounty
    In scope
    Domains
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    gh-mail.expressvpn.com

    Eligible for Bounty
    In scope
    Domains
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    iat.it.xvservice.net

    Eligible for Bounty
    In scope
    Domains
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    it.xvservice.net

    Eligible for Bounty
    In scope
    Domains
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    networkguard.com

    Eligible for Bounty
    In scope
    Domains
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    prd.iat.it.xvservice.net

    Eligible for Bounty
    In scope
    Domains
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    vector.prd.iat.it.xvservice.net

    Eligible for Bounty
    In scope
    Domains
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    ExpressVPN Router

    Eligible for Bounty
    In scope
    Other
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    ExpressVPN VPN servers

    Eligible for Bounty
    In scope
    Other
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    TrustedVPN 100,000 Bonus Award (See Program Policy for Info)

    Eligible for Bounty
    In scope
    Other
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    https://github.com/expressvpn/lightway

    Eligible for Bounty
    In scope
    source code
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source

    https://github.com/expressvpn/lightway-core

    Eligible for Bounty
    In scope
    source code
    First seen: Oct 13, 2025Last seen: Oct 25, 2025Scope source