USAA

  • $100 – $6,000 per vulnerability
  • Partial safe harbor

New Target Added!

More Web targets have been added to the USAA program. Here is what’s new:

Fresh Targets Details
https://guest.usaa.com Full Web App
https://mguest.usaa.com Full Web App
https://liveassist.usaa.com Auxiliary
https://liveassist11.usaa.com Auxiliary
https://liveassist12.usaa.com Auxiliary
https://liveassist21.usaa.com Auxiliary
https://liveassist22.usaa.com Auxiliary
https://nvoice.usaa.com Auxiliary
https://www.usaainsurance.com Redirect, subject to changes

Testing Notes:

  • The Targets outlined as auxiliary provide resources to the High Priority Targets, so requesting the base path will likely not yield anything interesting. Valid requests need to be observed while navigating the High Priority Targets.
  • As a friendly reminder, the old targets now carry higher reward ranges as we understand that through your research and reports these have become harder to hunt.

Please review the brief for full details and reach out to support@bugcrowd.com if you have any issues.

Get out there and lay claim to those bugs!