Intigriti

Liferay VDP

Liferay VDP seems to have a Bug Bounty or Vulnerability Disclosure program managed at Intigriti.

Created: March 14, 2026

Last Updated: October 5, 2026

In Scope (7)

www.liferay.com ( Liferay Corporate Website/Marketing Portal - The primary public-facing corporate and marketing website. Contains general company information, product pages, and non-customer/non-developer functionality. )

liferay.dev ( Liferay Developer Portal & Community Forums - The central hub for Liferay developers and the community. Includes forums, blogs, technical documentation, and community features (user registration, profiles, and content submission). )

learn.liferay.com ( Liferay Learning & Documentation Center - The official documentation and training resource for Liferay products (e.g., Liferay DXP). Primarily a content consumption site. )

support.liferay.com ( Liferay Customer/Support Portal - The customer and partner support ticketing system/knowledge base. Requires customer/partner login credentials to access private support features. )

marketplace.liferay.com ( Liferay App Marketplace - Platform for finding and downloading apps and extensions for Liferay DXP/Portal. Involves user accounts for purchasing/downloading. )

console.liferay.cloud ( Liferay Cloud (PaaS/SaaS) Platform - This should cover publicly accessible components of the Liferay Cloud Platform. This is the main application hosting environment for customer deployments. )

*.liferay.com ( Any domain or web application owned and operated by Liferay, Inc. that are not based on Liferay Portal or Liferay DXP software. )

Out of Scope (2)

*.lxc.liferay.com