RB
HackerOneOffers Rewards
REI BBP
REI BBP appears to run a bug bounty or vulnerability disclosure program on HackerOne. It also offers rewards for valid security reports.
Created: February 15, 2026
Last Updated: October 5, 2026
In Scope (6)
Android & iOS App for REI Customers ( To download the app, please visit https://www.rei.com/mobile What it does?
REI customers can place orders through the app on their smartphone )
Any public cloud resource or infrastructure operated and managed by REI. ( * Public cloud storage accounts. (e.g. AWS S3 buckets)
* Public cloud computer server. (e.g. AWS EC2 instances) )
http://collaboration.rei.com
http://www.rei.com/learn/expert-advice
login.rei.com
rei.com
Out of Scope (19)
*.rentals.rei.com ( This is an out of scope asset since it is owned and managed by a 3rd party. )
desktop.rei.com
destinations.rei.com
engineering.rei.com
foryourbenefit-rei.com/
greenvestrentals.rei.com
http://rei.com/blog
http://rei.com/lists
http://rei.com/rei-garage
http://rei.com/rentals
http://rei.com/used
partners2.rei.com
rei.gladly.com ( Spamming the Gladly chat bot widget is considered out of scope. )
rei.jobs
reicasting.com
reifund.org
test-login.rei.com
vpn.rei.com
wpvip.rei.com