TT
BugcrowdOffers Rewards
The Trade Desk
The Trade Desk appears to run a bug bounty or vulnerability disclosure program on Bugcrowd. It also offers rewards for valid security reports.
Created: February 15, 2026
Last Updated: October 5, 2026
In Scope (38)
https://open.sincera.io
https://desk.thetradedesk.com
https://api.thetradedesk.com
https://auth.thetradedesk.com
https://partner.thetradedesk.com
https://www.thetradedesk.com
https://ops-sso.adsrvr.org/
https://myopenpass.com
https://auth.myopenpass.com
https://partner.myopenpass.com
https://atlantis-ext.myopenpass.com
https://prod.uidapi.com
https://prod.euid.eu
https://core-prod.uidapi.com
https://optout-prod.uidapi.com
https://optout.prod.euid.eu
https://transparentadvertising.com
https://transparentadvertising.eu
https://portal.unifiedid.com
*.thetradedesk.com
*.adsrvr.org
https://www.thecurrent.com
https://cdn.myopenpass.com
https://cstg-integ.uidapi.com
https://esp-jssdk-integ.uidapi.com
https://esp-srvonly-integ.uidapi.com
https://example-jssdk-integ.uidapi.com
https://example-srvonly-integ.uidapi.com
https://secure-signals-jssdk-integ.uidapi.com
https://secure-signals-srvonly-integ.uidapi.com
https://secure-signals-client-side-integ.uidapi.com/
https://secure-signals-react-integ.uidapi.com
https://www.adsrvr.org
https://myopenpassdemo.com/
https://careers.thetradedesk.com
https://www.venturatvos.com
https://www.opensincera.com
https://edgeacademy.thetradedesk.com
Out of Scope (15)
https://investors.thetradedesk.com
https://ask.thetradedesk.com
https://www.thetradedeskedgeacademy.com
https://openpass.thetradedesk.com
https://unifiedid.com
https://euid.eu
argocd.*.uidapi.com
All client websites that have integrated with OpenPass
https://stationery.thetradedesk.com
https://bynder.thetradedesk.com
Applications that resolve to *.skilljarapp.com
Applications that resolve to *.smartling.com (ex: id.thetradedesk.com)
Applications that resolve to *.quilvem.com (ex: update.adsrvr.org)
Applications that resolve to *.okta.com (ex: openpath-login.thetradedesk.com)
Anything not explicitly listed as Tier 1, Tier 2, or Tier 3