{"id":"6a556340-6363-4d6f-a936-528162544713","engagementId":"2818e043-11d8-4a6c-b283-7e10994400bd","data":{"brief":{"id":"9b91c405-eaaa-4dc7-8141-b900da0c2ffa","name":"Marqeta Vulnerability Disclosure Engagement","tagline":"The payment innovation platform","description":"\u003cp\u003eWe are the world’s first open API modern card issuing platform. Our mission is to be the global standard for modern card issuing, empowering builders to bring the most innovative products to the world. Built from the ground up, our platform enables developers to launch new programs with speed, flexibility and scale. Global customers of all sizes like Uber, Square, Doordash, J.P. Morgan, Klarna and others trust Marqeta to help them grow.\u003c/p\u003e\n\n\u003cp\u003eOur team of dedicated security professionals works vigilantly to help keep customer information secure. We welcome the contribution of external researchers and look forward to awarding them for their invaluable contribution to the security of all Marqeta users.\u003c/p\u003e\n\n\u003cp\u003eOur customers trust us to manage their business transactions, and it’s our responsibility to keep these transactions private and secure. We adhere to industry-leading practices to manage our network, secure our web and client applications, and set policies across our organization. Marqeta takes security seriously and looks forward to working with the security community to find security vulnerabilities in order to keep our products and customers safe.\u003c/p\u003e","industryTagId":"6bf30795-7930-4c2b-bb79-d2c4f15f7740","targetsOverview":"\u003cp\u003eAt Marqeta, we consider the security of our systems a top priority. But no matter how much effort we put into securing our systems, there can still be vulnerabilities present.\u003c/p\u003e\n\n\u003cp\u003eIf you discover a vulnerability, we would like to know about it so we can take steps to address it as quickly as possible. We would like to ask you to help us better protect our clients and our systems.\u003c/p\u003e","safeHarborStatus":{"status":"partial","label":"Partial safe harbor","description":"This engagement provides a limited goodwill statement about not pursuing legal action related to security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"c744fa8a-92e4-494e-840c-e42679731254","name":"In Scope Targets","targets":[{"id":"dfb6cc8a-b89b-44d4-a963-18a408cd4fd9","uri":"https://*.marqeta.com","name":"https://*.marqeta.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"77f6fc00-7607-4882-9d04-9733f79e801d","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"dfb6cc8a-b89b-44d4-a963-18a408cd4fd9"}],"recentChangeFlags":null},{"id":"78621087-7f27-4764-9aef-5c027d10d61f","uri":"https://*.marqeta.io","name":"https://*.marqeta.io","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"daf4521c-888f-4cf7-b5ce-fd9ac1c0131e","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"78621087-7f27-4764-9aef-5c027d10d61f"}],"recentChangeFlags":null},{"id":"892eb6cc-dd08-4d1d-a540-9f29c5d85914","uri":"https://*.marqeta-dev.org","name":"https://*.marqeta-dev.org","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b3ad231d-bdaf-4251-8aec-672b6de3eebd","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"892eb6cc-dd08-4d1d-a540-9f29c5d85914"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null},{"id":"60a4dc99-42b0-4f51-8fd4-9144098762f4","name":"Out of Scope Targets","targets":[{"id":"9c9e2a3c-3de1-4eb2-aa0e-0a7923cc6e31","uri":"","name":"https://community.marqeta.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"9c3de6c1-c698-4cd6-adcb-1ec74d0397f2","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"9c9e2a3c-3de1-4eb2-aa0e-0a7923cc6e31"}],"recentChangeFlags":null}],"inScope":false,"sortOrder":1,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eThe following domains are out of scope as they point to third parties and should not be tested for vulnerabilities:\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"2818e043-11d8-4a6c-b283-7e10994400bd","code":"marqeta-vdp-public","state":"in_progress","endsAt":null,"bountyId":"36311384-6660-4872-8d4c-3abb4701c7f9","startsAt":"2025-02-13T20:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Finance","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/6ef9/197b/5b6e5659/86a4bf6468fb6acb800d43653ca922c2_-ocL3jVQ_400x400.jpg","logoBackgroundColor":"#2B206A","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2025-02-13T20:00:00.022Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/marqeta-vdp-public","changelogs":"/engagements/marqeta-vdp-public/changelog","submissions":null,"announcements":"/engagements/marqeta-vdp-public/announcements","hallOfFame":"/engagements/marqeta-vdp-public/hall_of_fames","crowdstream":"/engagements/marqeta-vdp-public/crowdstream"},"announcementsCount":0,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/marqeta-vdp-public/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=marqeta-vdp-public\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/marqeta-vdp-public/engagement_subscribers","engagementChangelogsUrl":"/engagements/marqeta-vdp-public/changelog","publishedAt":"2025-06-12T17:47:29.262Z","engagementChangelogUrl":"/engagements/marqeta-vdp-public/changelog/6a556340-6363-4d6f-a936-528162544713","createUserFeedbacksUrl":"/engagements/marqeta-vdp-public/feedbacks","engagementCrowdstreamUrl":"/engagements/marqeta-vdp-public/crowdstream","acceptedSubmissionsEnabled":false,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}