Description

TrueLayer is opening up finance and changing the way the world pays. Empowering businesses in every industry to create first-class financial experiences for their customers. We build on top of the Open Banking and PSD2 standards to provide APIs for our customers to use to provide financial data and payment initiation services.

Bounties
Low
0.1 - 3.9
Medium
4.0 - 6.9
High
7.0 - 8.9
Critical
9.0 - 9.4
Exceptional
9.5 - 10.0
Tier 1
175
900
2,250
4,000
6,000
Tier 1
€175 - €6,000
Tier 2
125
625
1,550
2,750
4,000
Tier 2
€125 - €4,000
Tier 3
75
350
850
1,500
2,250
Tier 3
€75 - €2,250
Rules of engagement
Required
Not applicable
max. 10 requests /sec
X-Intigriti-Username: {Username}

By participating in this program, you agree to:

  • Respect the Community Code of Conduct
  • Respect the Intigriti Terms and Conditions
  • Respect the scope of the program
  • Not discuss or disclose vulnerability information without prior written consent (including PoC's on YouTube and Vimeo)
Domains

The majority of our API endpoints live here

Our service for getting OAuth access tokens to access our APIs

Where you can connect your bank account and use Open Banking to pull data such as transactions

Severity assessment

This program follows Intigriti's contextual CVSS standard

FAQ

Where can we get credentials for the app?

You can self-register on the Console application but please don’t forget to use your @intigriti.me address.

Do I need a bank account to test with?

No, in sandbox there is a mock bank available which simulates a real bank account with money. However it is not 100% equivalent to a real bank account, so there may be some edge cases where a vulnerability using the mock bank does not result in a genuine vulnerability with a real bank account. We will investigate any reports to see if they are reproducible in production, and if not we will mark the report as informative.

All aboard!
Please log in or sign up on the platform

For obvious reasons we can only allow submissions or applications for our program with a valid Intigriti account.

It will only take 2 minutes to create a new one or even less to log in with an existing account, so don't hesitate and let's get started. We would be thrilled to have you as part of our community.