# Lightspeed Retail: bug bounty program on Bugcrowd

> Lightspeed Retail is a bug bounty program on Bugcrowd. Bounties range from $250 to $7,500. 6 assets are listed in scope, 6 of them bounty-eligible.

- **Company:** Lightspeed Retail
- **Platform:** Bugcrowd
- **Program page:** /engagements/lightspeed-retail
- **Pays bounties:** yes
- **Submissions:** open
- **Bounty range:** $250 to $7,500
- **BugRater grade:** not graded yet (fewer than three reviewers)
- **BugRater page:** https://bugrater.com/programs/lightspeed-retail

## Scope

As imported from Bugcrowd on November 9, 2026: 6 assets in scope (6 bounty-eligible), 9 out of scope. The policy page is the authority.

- `developers.retail.lightspeed.app` (website): in scope, bounty-eligible
- `https://app.ecwid.com/api/v3/` (api): in scope, bounty-eligible
- `https://apps.apple.com/us/app/ecwid-ecommerce/id626731456` (ios): in scope, bounty-eligible
- `https://play.google.com/store/apps/details?id=com.ecwid.android&pli=1` (android): in scope, bounty-eligible
- `payment-connectors.vendhq.com` (website): in scope, bounty-eligible
- `store.retail.lightspeed.app` (website): in scope, bounty-eligible
- `https://support.ecwid.com/hc/en-us` (other): out of scope
- `https://www.ecwid.com/` (website): out of scope
- `partnerportal.vendhq.com` (website): out of scope
- `partners.vendhq.com` (website): out of scope
- `track.api.vendhq.com` (website): out of scope
- `vendhq.force.com` (website): out of scope
- `vendimageuploadcdn.global.ssl.fastly.net` (website): out of scope
- `x-series-support.lightspeedhq.com` (website): out of scope
- `your-store.vendecommerce.com` (website): out of scope

---

Generated November 9, 2026 from BugRater data. Platform figures are the platform's own; grades and reviews are BugRater's. Agents can check targets against this scope with the check_scope tool at https://bugrater.com/mcp.