Inelegible targets

The following are specifically excluded from scope and should not be tested:
3rd party tools used by by CARD.com
3rd party service providers to CARD.com
All shared hosting environment (e.g. networking equipment, firewalls and other equipment) components that are not directly used to host the target URL
Physical environment pen-testing such as obtaining access to offices, server rooms, cars, homes, and physical objects (such as USB keys, phones, laptops)

Note: Our server may indicate a banner (e.g. Apache version X.Y.Z) that seems out of date, but which is not in fact out of date due to the way we manage patches to that software.

CARD.com creates Fair, Fashionable and Fun online prepaid card solutions.

Inelegible targets

The following are specifically excluded from scope and should not be tested:
3rd party tools used by by CARD.com
3rd party service providers to CARD.com
All shared hosting environment (e.g. networking equipment, firewalls and other equipment) components that are not directly used to host the target URL
Physical environment pen-testing such as obtaining access to offices, server rooms, cars, homes, and physical objects (such as USB keys, phones, laptops)

Note: Our server may indicate a banner (e.g. Apache version X.Y.Z) that seems out of date, but which is not in fact out of date due to the way we manage patches to that software.