---
id: 2187
title: "The Problem with Limited Scope"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/the-impact-of-limited-scope/"
published_at: "2019-08-22T00:00:00Z"
tags: ["bug-bounty", "attack-surface", "crowdsourced-security", "vdp", "vulnerability-disclosure", "scope", "program-scope", "vulnerability-disclosure-program"]
phying_url: "https://phying.com/item/2187"
lang: en
---

# The Problem with Limited Scope

## Summary

As attack surfaces outgrow static bug bounty scopes, researchers may find bugs in assets nobody covers. Bugcrowd advises an expansive scope or an open-scope VDP alongside the bounty.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2019-08-22T00:00:00Z
- **Original:** https://www.bugcrowd.com/blog/the-impact-of-limited-scope/
- **Phying News:** https://phying.com/item/2187