Under Armour AppSec

  • $125 – $2,500 per vulnerability
  • Partial safe harbor

Changes to Under Armour

Hi Researchers,

Please note that API credentials found in GitHub will be considered as a P4 without a working proof of concept that they are valid against a target that Under Armour owns. If a working POC is provided, Under Armour will evaluate the severity and upgrade the finding accordingly.

If you have any questions, please reach out to support@bugcrowd.com.