{ "schema_version": "1.0.0", "directory_snapshot_date": "2026-10-03", "notice": "Dated official directory and scope-table snapshots for publicly listed bounties. A listing or asset row alone does not establish current authorization, bounty eligibility, or complete policy scope. Read the live program policy before any activity.", "counts": { "observed_bounty_candidates": 627, "with_published_scope": 591, "scope_not_captured": 36, "verified_policy_records": 23, "scope_table_only": 568, "with_review_flags": 7, "in_scope_entries": 9098, "out_of_scope_entries": 3112, "duplicate_source_rows_removed": 70, "hackerone_nonbounty_flags": 229, "unconfirmed_bugcrowd_bounty_category": 5, "unclassified_queue_listings": 0, "by_platform": { "Bugcrowd": 293, "HackerOne": 222, "Intigriti": 112 }, "by_scope_status": { "captured": 591, "fetch_failed": 2, "no_published_assets": 4, "preview_only": 18, "terms_only": 12 } }, "programs": [ { "id": "bugcrowd-fea340e13c6aada4", "name": "20 Minuten", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/twentyminuten", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $5,000", "reward_min": "$250", "reward_max": "$5,000", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:44Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/twentyminuten/changelog/a2833331-ef57-43c0-8b42-70713ea035d2.json" ], "in_scope": [ { "name": "https://www.20min.ch", "asset_type": "website", "location": "https://www.20min.ch", "group": "In scope targets" }, { "name": "https://cm.20min.ch/", "asset_type": "website", "location": "https://coral.20min.ch/", "group": "In scope targets" }, { "name": "https://api.20min.ch/", "asset_type": "api", "location": "https://api.20min.ch/", "group": "In scope targets" }, { "name": "https://videoplayer.20min.ch", "asset_type": "website", "location": "https://videoplayer.20min.ch", "group": "In scope targets" }, { "name": "https://partner-feeds.20min.ch", "asset_type": "website", "location": "https://partner-feeds.20min.ch", "group": "In scope targets" }, { "name": "https://screenplayer.20min.ch", "asset_type": "website", "location": "https://screenplayer.20min.ch", "group": "In scope targets" }, { "name": "https://audio.20min.ch", "asset_type": "website", "location": "https://audio.20min.ch/", "group": "In scope targets" } ], "out_of_scope": [ { "name": "https://tgt.tamedia.ch", "asset_type": "api", "location": null, "group": "Out of scope targets" }, { "name": "http://auth.20min.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://cre-api.tamedia.ch", "asset_type": "api", "location": null, "group": "Out of scope targets" }, { "name": "https://track.20min.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Social Media Links (older than 2 years)", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Subdomain Takeover", "asset_type": "other", "location": null, "group": "Out of scope targets" }, { "name": "DMARC, SPF, DKIM", "asset_type": "other", "location": null, "group": "Out of scope targets" }, { "name": "https://*.connect.ringier.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.onelog.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.20min-tv.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.newsnetz.tv", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.appuser.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.iagentur.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.streamboat.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.streamboatserver.ch", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Other Domains and Subdomains not specifically in scope", "asset_type": "other", "location": null, "group": "Out of scope targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-dd2a9315b7f5c866", "name": "55 Degrees", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/fiftyfivedegrees", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:45Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/fiftyfivedegrees/changelog/f090483f-bf37-440c-9de4-e448146e5e7d.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=server&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "Anything related to the actionableagile.55degrees-apps.net subdomain is in scope.", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=server", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=server", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216661/actionableagile-for-jira-agile-metrics?hosting=datacenter", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1220160/issue-analyzer-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220160/issue-analyzer-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1224766/portfolio-forecaster?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224766/portfolio-forecaster?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1224766/portfolio-forecaster?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224766/portfolio-forecaster?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1227773/klar-issue-refinement-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227773/klar-issue-refinement-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [ { "name": "Any other subdomains on 55degrees-apps.net or any other domains owned by 55 Degrees AB is out of scope.", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "https://marketplace.atlassian.com/*", "asset_type": "website", "location": null, "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-48ea6e730ccb9ec9", "name": "Accxia Marketplace Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/accxia-gmbh", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:46Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/accxia-gmbh/changelog/b56d3ca7-b60f-4c96-95d1-87313ae569bb.json" ], "in_scope": [ { "name": "Intelligent User Manager (IUM) for Confluence (Cloud) - https://marketplace.atlassian.com/apps/1235944/intelligent-user-manager-ium-for-confluence-cloud?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1235944/intelligent-user-manager-ium-for-confluence-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "IUM for Jira Cloud Forge - https://marketplace.atlassian.com/apps/1225449/intelligent-user-manager-ium-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225449/intelligent-user-manager-ium-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-cc55fb914f763851", "name": "Acorns Grow, Inc.", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/acorns", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,000", "reward_min": "$100", "reward_max": "$4,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:53Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/acorns/changelog/0cbe41f4-1a15-4efa-a60e-65b338052dd6.json" ], "in_scope": [ { "name": "*.acorns.com/", "asset_type": "website", "location": "https://acorns.com/", "group": "Acorns Targets" }, { "name": "Acorns for iOS", "asset_type": "other", "location": "https://apps.apple.com/us/app/acorns-invest-spare-change/id883324671", "group": "Acorns Targets" }, { "name": "https://graphql.acorns.com", "asset_type": "api", "location": "https://graphql.acorns.com", "group": "Acorns Targets" }, { "name": "Acorns for Android", "asset_type": "other", "location": "https://play.google.com/store/apps/details?id=com.acorns.android&hl=en_US&gl=US", "group": "Acorns Targets" }, { "name": "https://www.pixpay.fr/", "asset_type": "website", "location": "https://www.pixpay.fr/", "group": "Acorns Targets" } ], "out_of_scope": [ { "name": "share.acorns.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "grow.acorns.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "store.acorns.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-b06a1a7effe4c3de", "name": "Aelbox Marketplace Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/aelbox", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:54Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/aelbox/changelog/e79fb6bc-4c49-4081-abcb-e7e6570a5ee3.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1219205/scrumpy-planning-poker-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219205/scrumpy-planning-poker-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-bb5a580105b38587", "name": "Afterpay Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/afterpay", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $5,000", "reward_min": "$100", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "eCommerce", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 5, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:55Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/afterpay/changelog/c757b445-44cb-4d84-8bb1-e201aad31872.json" ], "in_scope": [ { "name": "████████████████", "asset_type": "ios", "location": null, "group": "████████" }, { "name": "████████████████████", "asset_type": "android", "location": null, "group": "████████" }, { "name": "███████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "██████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "██████████████████████", "asset_type": "api", "location": null, "group": "████████" }, { "name": "████████████████████████", "asset_type": "api", "location": null, "group": "████████" }, { "name": "███████████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "█████████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "███████████████████████████", "asset_type": "api", "location": null, "group": "████████" }, { "name": "████████████████", "asset_type": "api", "location": null, "group": "████████" } ], "out_of_scope": [ { "name": "████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "5 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-40d63da19d59ab5f", "name": "agile doyens", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/agiledoyens-market", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:56Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/agiledoyens-market/changelog/e724e41a-0c4c-446b-8c63-a073dd1ad25b.json" ], "in_scope": [ { "name": "TIK for Jira - https://marketplace.atlassian.com/apps/628301060/tik-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/628301060/tik-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-53ab5d6d174f0369", "name": "AgilePulse Marketplace Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/agile-pulse", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:57Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/agile-pulse/changelog/6b5e8039-b5d7-471a-aef4-b231cc5b6f7f.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1233038/agility-poker-planning?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233038/agility-poker-planning?tab=overview&hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/187209184/sprintretro-free-retrospective-metrics-suite?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/187209184/sprintretro-free-retrospective-metrics-suite?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1143291390/sprintpoker-planning-poker-async-estimation?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1143291390/sprintpoker-planning-poker-async-estimation?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/2903137599/sprintretro-pro-retrospective-metrics-suite?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/2903137599/sprintretro-pro-retrospective-metrics-suite?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/3780102417/sprintpoker-free-planning-poker-async-estimation?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/3780102417/sprintpoker-free-planning-poker-async-estimation?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/3684126567/laya-workflowos-ai-automation-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/3684126567/laya-workflowos-ai-automation-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/4076194710/laya-export-studio-for-jira-and-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/4076194710/laya-export-studio-for-jira-and-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/3402280988/laya-board?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/3402280988/laya-board?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-2e14b20f0897659c", "name": "Agilis LT Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/agilislt", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:58Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/agilislt/changelog/b0a07d40-7f88-426a-a170-b25042bdf84d.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1219429/status-progress-report-structure-jira-dashboard-gadget?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219429/status-progress-report-structure-jira-dashboard-gadget?hosting=cloud&tab=overview", "group": "Agilis LT Apps for Atlassian Jira" }, { "name": "https://marketplace.atlassian.com/apps/1219761/individual-velocity-report-chart-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219761/individual-velocity-report-chart-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "group": "Agilis LT Apps for Atlassian Jira" }, { "name": "https://marketplace.atlassian.com/apps/1219487/simple-timesheet-worklog-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219487/simple-timesheet-worklog-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "group": "Agilis LT Apps for Atlassian Jira" }, { "name": "https://marketplace.atlassian.com/apps/1219703/time-tracking-estimation-report-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219703/time-tracking-estimation-report-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "group": "Agilis LT Apps for Atlassian Jira" }, { "name": "https://marketplace.atlassian.com/apps/1219872/advanced-burndown-chart-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219872/advanced-burndown-chart-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "group": "Agilis LT Apps for Atlassian Jira" }, { "name": "https://marketplace.atlassian.com/apps/1218888/simple-custom-reports-charts-time-in-status-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218888/simple-custom-reports-charts-time-in-status-for-jira?hosting=cloud&tab=overview", "group": "Agilis LT Apps for Atlassian Jira" }, { "name": "https://marketplace.atlassian.com/apps/1230997/time-in-status-report-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1230997/time-in-status-report-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "group": "Agilis LT Apps for Atlassian Jira" }, { "name": "https://marketplace.atlassian.com/apps/3747688267/simple-gantt-roadmap-timeline-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/3747688267/simple-gantt-roadmap-timeline-dashboard-gadget-for-jira?hosting=cloud&tab=overview", "group": "Agilis LT Apps for Atlassian Jira" }, { "name": "app.simple-reports.com/demo", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*app.simple-reports.com/demo", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-6b4160c4d3ab907f", "name": "AI | Apps+ Marketplace Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/apps-plus2", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:59Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/apps-plus2/changelog/ac70b5d8-96f2-4c70-a8e3-2373ed2665ee.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1227541/ai-badges-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227541/ai-badges-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227543/ai-grammar-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227543/ai-grammar-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227544/ai-summary-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227544/ai-summary-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227545/ai-sentiment-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227545/ai-sentiment-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227546/ai-glossary-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227546/ai-glossary-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227547/ai-tables-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227547/ai-tables-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227548/ai-polls-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227548/ai-polls-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227549/ai-tooltips-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227549/ai-tooltips-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227550/ai-tags-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227550/ai-tags-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227551/ai-tabs-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227551/ai-tabs-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227552/ai-latex-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227552/ai-latex-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227553/ai-headings-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227553/ai-headings-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227554/ai-forms-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227554/ai-forms-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227555/ai-copywriter-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227555/ai-copywriter-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227556/ai-code-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227556/ai-code-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227557/ai-labels-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227557/ai-labels-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227558/ai-macros-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227558/ai-macros-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227559/ai-checklists-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227559/ai-checklists-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227560/ai-buttons-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227560/ai-buttons-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227561/ai-images-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227561/ai-images-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1229018/ai-photos-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229018/ai-photos-for-confluence?tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1232262/ai-support-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1232262/ai-support-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1235733/ai-autofill-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235733/ai-autofill-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1237726/ai-charts-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237726/ai-charts-for-confluence?hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-3fdbea615f6309f5", "name": "Aiven Managed Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/aiven-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $25,000", "reward_min": "$50", "reward_max": "$25,000", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:00Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/aiven-mbb-og/changelog/326ffefd-402d-4c50-a6c5-490f1286413a.json" ], "in_scope": [ { "name": "Aiven for Clickhouse", "asset_type": "other", "location": "https://aiven.io/clickhouse", "group": "Database Services Tier 1" }, { "name": "Aiven for Metrics", "asset_type": "other", "location": "https://aiven.io/docs/products/metrics/concepts/metrics-overview", "group": "Database Services Tier 1" }, { "name": "Aiven for Valkey", "asset_type": "other", "location": null, "group": "Database Services Tier 1" }, { "name": "Aiven for Apache Kafka", "asset_type": "other", "location": null, "group": "Database Services Tier 1" }, { "name": "Aiven for OpenSearch", "asset_type": "other", "location": null, "group": "Database Services Tier 2" }, { "name": "Aiven for Grafana", "asset_type": "other", "location": null, "group": "Database Services Tier 2" }, { "name": "Aiven for PostgreSQL", "asset_type": "other", "location": null, "group": "Database Services Tier 2" }, { "name": "Aiven for MySQL", "asset_type": "other", "location": null, "group": "Database Services Tier 2" }, { "name": "regatta.aiven.io", "asset_type": "website", "location": "https://regatta.aiven.io/", "group": "Database Services Tier 2" }, { "name": "aiven.io", "asset_type": "website", "location": "https://aiven.io/", "group": "In Scope (Website Console)" }, { "name": "console.aiven.io", "asset_type": "website", "location": "https://console.aiven.io/login", "group": "In Scope (Website Console)" }, { "name": "api.aiven.io", "asset_type": "api", "location": "https://api.aiven.io/login", "group": "In Scope (Website Console)" }, { "name": "github.com/Aiven-Open", "asset_type": "other", "location": "https://github.com/Aiven-Open", "group": "Aiven Open Source Repositories" }, { "name": "github.com/Aiven", "asset_type": "other", "location": "https://github.com/Aiven", "group": "Aiven Open Source Repositories" }, { "name": "falcon-bug-bounty-flag-pgsql-dev-sandbox.e.aivencloud.com", "asset_type": "other", "location": "http://falcon-bug-bounty-flag-pgsql-dev-sandbox.e.aivencloud.com/", "group": "Capture the Flag Challenge" }, { "name": "Third-party dependency versions", "asset_type": "other", "location": null, "group": "Third-Party Dependency Versions" } ], "out_of_scope": [ { "name": "aquarium.aiven.io", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "uptime.aiven.io", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "video.aiven.io", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "aiven.io/community", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "aiven.io/contact", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "Customer services you did not create", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "*.aiven.fi", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "github.com/Aiven-Labs", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "*.avns.net", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "events.aiven.io", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "ideas.aiven.io", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "aivenhelp.zendesk.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "support.aiven.io", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "Creation of support tickets", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "Aiven Runtime", "asset_type": "website", "location": "https://aiven.io/runtime", "group": "Aiven Runtime" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-f778ad855791c037", "name": "Akeles Marketplace Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/akeles", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:01Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/akeles/changelog/ac8ec0e3-508b-4822-a7b9-8a59d30fdda4.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1214613/multiple-filters-chart-gadget?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214613/multiple-filters-chart-gadget?hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1211976/gauge-gadget?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211976/gauge-gadget?hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1211314/three-dimensional-date-gadgets?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211314/three-dimensional-date-gadgets?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1225375/site-statistics-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225375/site-statistics-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1223780/tissue-table-of-linked-issues?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223780/tissue-table-of-linked-issues?hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1229447/site-statistics-for-confluence-cloud?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229447/site-statistics-for-confluence-cloud?tab=overview&hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1211116/countdown-timer?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211116/countdown-timer?tab=overview&hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1217056/canned-search-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217056/canned-search-for-confluence?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1217224/countdown-gadget?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217224/countdown-gadget?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1215764/calendar-heatmap-gadget?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215764/calendar-heatmap-gadget?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1214394/menu-gadget?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214394/menu-gadget?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1224848/banners-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224848/banners-for-confluence?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1237524/dashboard-assistant-for-jira-cloud?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237524/dashboard-assistant-for-jira-cloud?hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1238098/project-access-review-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1238098/project-access-review-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1238069/file-type-checker-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1238069/file-type-checker-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope " } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-0c49646b362423d7", "name": "AppFox", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/automationconsultants", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:02Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/automationconsultants/changelog/08e9af05-6d6e-420c-9fc2-9d5a3dbf38fe.json" ], "in_scope": [ { "name": "Approvals for Confluence - https://marketplace.atlassian.com/apps/1216387/approvals-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216387/approvals-for-confluence?hosting=cloud", "group": "Target Group" }, { "name": "Captionizer - https://marketplace.atlassian.com/apps/1237517/captionizer-ai-image-analyzer", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237517/captionizer-ai-image-analyzer", "group": "Target Group" }, { "name": "Compliance for Confluence - https://marketplace.atlassian.com/apps/1218474/compliance-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218474/compliance-for-confluence?hosting=cloud", "group": "Target Group" }, { "name": "Optimizer for Jira - https://marketplace.atlassian.com/apps/1217194/optimizer-for-jira-cleaner-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217194/optimizer-for-jira-cleaner-for-jira?hosting=cloud", "group": "Target Group" }, { "name": "Workflows for Confluence - https://marketplace.atlassian.com/apps/1222276/workflows-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222276/workflows-for-confluence?hosting=cloud", "group": "Target Group" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-dc54fddecbc8a1d7", "name": "Appliances - Barracuda Networks, Inc.", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/barracuda", "bounty_classification": "official_bounty_category_paid_unverified", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:03:14Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/barracuda/changelog/960b7330-755a-47de-b374-88877585aa8d.json" ], "in_scope": [ { "name": "Barracuda Message Archiver", "asset_type": "other", "location": "https://www.barracuda.com/products/messagearchiver", "group": "In scope targets" }, { "name": "Barracuda Web Security Gateway", "asset_type": "other", "location": "https://www.barracuda.com/products/websecuritygateway", "group": "In scope targets" }, { "name": "Barracuda ADC", "asset_type": "other", "location": "https://www.barracuda.com/products/loadbalancer?utm_source=google&utm_medium=search_cpc&utm_campaign=387189501&utm_adgroup=116181947964&utm_term=&utm_position=&utm_matchtype=b&utm_device=c&utm_content=484352050459&_bt=484352050459&_bk=&_bm=b&_bn=g&_bg=116181947964&gclid=Cj0KCQjwvr6EBhDOARIsAPpqUPFtfKELYb2ysp1O29NyBMwStaYpYAxq1oso9BaXpcPo9yrcy13uuc0aAtQDEALw_wcB", "group": "In scope targets" }, { "name": "Barracuda Web Application Firewall", "asset_type": "other", "location": "https://www.barracuda.com/products/webapplicationfirewall", "group": "In scope targets" }, { "name": "Barracuda Email Security Gateway", "asset_type": "other", "location": "https://www.barracuda.com/products/emailsecuritygateway", "group": "In scope targets" }, { "name": "Barracuda CloudGen Firewall", "asset_type": "other", "location": "https://www.barracuda.com/products/cloudgenfirewall", "group": "In scope targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-9691997556b80c2e", "name": "AppLiger", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/appliger", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:03Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/appliger/changelog/3068e974-06bc-42df-a96a-bc6dac7ca029.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1219112/easy-templates-for-jira-issues?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219112/easy-templates-for-jira-issues?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1236389/easy-progress-hill-charts-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236389/easy-progress-hill-charts-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1236512/easy-action-items-checklist-templates-and-automation?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236512/easy-action-items-checklist-templates-and-automation?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/2576221793/easy-markdown-exporter-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/2576221793/easy-markdown-exporter-for-confluence?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [ { "name": "https://appliger.com/", "asset_type": "website", "location": "https://appliger.com/", "group": "Out of Scope" }, { "name": "https://appliger.atlassian.net", "asset_type": "website", "location": "https://appliger.atlassian.net", "group": "Out of Scope" }, { "name": "https://marketplace.atlassian.com/apps/1219112/easy-issue-templates-for-jira?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219112/easy-issue-templates-for-jira?hosting=datacenter", "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-9c6bce4319b2f6ba", "name": "Appsvio Marketplace Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/appsvio", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:04Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/appsvio/changelog/285d22c7-81e3-4857-9618-89a99ca21f44.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1224654/multilevel-select-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224654/multilevel-select-for-jira?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1229162/issue-templates-agent-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229162/issue-templates-agent-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1218221/feature-bundle-for-jira-service-management?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218221/feature-bundle-for-jira-service-management?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1238103/appsvio-test-management-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1238103/appsvio-test-management-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-e960cfd30d0290eb", "name": "APTIS", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/epicsumup", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:05Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/epicsumup/changelog/8706557a-a964-4338-9fd4-b6ffce6f218b.json" ], "in_scope": [ { "name": "ESU for Jira - Cloud - https://marketplace.atlassian.com/apps/1213091/esu-sum-up-kpi-budget-reporting-project-epic-overview?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1213091/esu-sum-up-kpi-budget-reporting-project-epic-overview?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-2b536b1efefe8d1c", "name": "Arlo Cash Rewards", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/arlo", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$25 - $4,500", "reward_min": "$25", "reward_max": "$4,500", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:06Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/arlo/changelog/715a1af5-50c4-4cfa-842a-048134e77d84.json" ], "in_scope": [ { "name": "Arlo Safe Android App", "asset_type": "android", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Safe iOS App", "asset_type": "ios", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Secure Android App", "asset_type": "android", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Secure iOS App", "asset_type": "ios", "location": null, "group": "Arlo Devices" }, { "name": "Arlo All-In-One Sensor (Home Security System)", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Base Station", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Cellular & Battery Backup (Home Security System)", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Chime 2", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Essential 2 & 3 (indoor & outdoor camera, doorbell)", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Wired Floodlight", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Go v2", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Home Security System", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Pro 3 Floodlight", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Pro SmartHub", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Pro 5S", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Pro 6", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Safe Button", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Ultra 2", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Wireless Video Doorbell", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "Arlo Wire-Free Outdoor Siren (Home Security System)", "asset_type": "iot", "location": null, "group": "Arlo Devices" }, { "name": "*.arlo.com (subdomains impacting production customer-facing services)", "asset_type": "other", "location": null, "group": "All Other Production Arlo Targets" }, { "name": "*.arloxcld.com", "asset_type": "other", "location": null, "group": "All Other Production Arlo Targets" }, { "name": "https://*-prod.arlo.com", "asset_type": "api", "location": null, "group": "All Other Production Arlo Targets" }, { "name": "https://beta.arlo.com", "asset_type": "website", "location": null, "group": "All Other Production Arlo Targets" }, { "name": "https://mcs.arlo.com", "asset_type": "api", "location": null, "group": "All Other Production Arlo Targets" }, { "name": "https://my.arlo.com", "asset_type": "website", "location": "https://my.arlo.com", "group": "All Other Production Arlo Targets" }, { "name": "https://myapi.arlo.com", "asset_type": "api", "location": null, "group": "All Other Production Arlo Targets" }, { "name": "https://www.arlo.com", "asset_type": "website", "location": "https://www.arlo.com", "group": "All Other Production Arlo Targets" }, { "name": "https://updates.arlo.com", "asset_type": "api", "location": null, "group": "All Other Production Arlo Targets" }, { "name": "https://partnerapi.arlo.com", "asset_type": "api", "location": "https://partnerapi.arlo.com", "group": "All Other Production Arlo Targets" }, { "name": "*.arlocloud.com", "asset_type": "website", "location": null, "group": "All Other Production Arlo Targets" }, { "name": "https://*dev*.arlo.com", "asset_type": "website", "location": null, "group": "Non-production Environments (Dev/QA/CAT/Test/Staging)" }, { "name": "https://*qa*.arlo.com", "asset_type": "website", "location": null, "group": "Non-production Environments (Dev/QA/CAT/Test/Staging)" } ], "out_of_scope": [ { "name": "*streaming*.arlo.com", "asset_type": "api", "location": "https://*streaming*.arlo.com", "group": "Out of Scope Targets" }, { "name": "cvrstreaming*.arlo.com", "asset_type": "api", "location": null, "group": "Out of Scope Targets" }, { "name": "http://community.arlo.com/", "asset_type": "website", "location": "http://community.arlo.com/", "group": "Out of Scope Targets" }, { "name": "https://investor.arlo.com", "asset_type": "website", "location": "https://investor.arlo.com", "group": "Out of Scope Targets" }, { "name": "http://research.arlo.com/", "asset_type": "website", "location": "http://research.arlo.com/", "group": "Out of Scope Targets" }, { "name": "http://survey.arlo.com/", "asset_type": "website", "location": "http://survey.arlo.com/", "group": "Out of Scope Targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-37fe3e47f087afa0", "name": "Asana", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/asana", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $6,500", "reward_min": "$100", "reward_max": "$6,500", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:07Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/asana/changelog/ad976c03-b976-410d-bd0a-5d76d56b9477.json" ], "in_scope": [ { "name": "app.asana.com", "asset_type": "website", "location": "https://app.asana.com", "group": "Asana Targets" }, { "name": "asana.com", "asset_type": "website", "location": "https://asana.com", "group": "Asana Targets" }, { "name": "*.asana.plus", "asset_type": "website", "location": "https://asana.com/apps?category=made-by-asana", "group": "Asana Targets" }, { "name": "Asana Desktop App", "asset_type": "other", "location": "https://asana.com/download", "group": "Asana Targets" }, { "name": "Asana iOS app", "asset_type": "ios", "location": "https://apps.apple.com/us/app/asana-mobile/id489969512", "group": "Asana Targets" }, { "name": "Asana Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.asana.app&hl=en", "group": "Asana Targets" }, { "name": "form.asana.com", "asset_type": "website", "location": "https://form.asana.com", "group": "Asana Targets" }, { "name": "*.app.asana.com", "asset_type": "website", "location": null, "group": "Asana Targets" }, { "name": "*.asana.biz", "asset_type": "other", "location": "https://*.asana.biz", "group": "Asana Enterprise Technology Scope" }, { "name": "Subdomain takeover at *asana.biz", "asset_type": "other", "location": null, "group": "Asana Enterprise Technology Scope" } ], "out_of_scope": [ { "name": "Other subdomains of asana.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Social engineering against Asana Support or Asana Employees", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "jira*.integrations.asana.plus", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "asana.okta.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "assets.asana.biz", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Forms that you do not own", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-58c3412e03830b70", "name": "Atlassian", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/atlassian", "bounty_classification": "verified_policy", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $12,000", "reward_min": "$100", "reward_max": "$12,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "atlassian-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:55:55Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/atlassian/changelog/c31ec9fd-9fff-4aa1-9b4e-aa9929f1086a.json" ], "in_scope": [ { "name": "Atlassian Guard Standard and Premium (https://admin.atlassian.com/atlassian-guard)", "asset_type": "website", "location": "https://admin.atlassian.com/atlassian-guard", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Atlassian Admin (https://admin.atlassian.com/)", "asset_type": "website", "location": "https://admin.atlassian.com/", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Atlassian Identity (https://id.atlassian.com/login)", "asset_type": "website", "location": "https://id.atlassian.com/login", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Atlassian Start (https://start.atlassian.com)", "asset_type": "website", "location": "https://start.atlassian.com", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Bitbucket Cloud including Bitbucket Pipelines (https://bitbucket.org)", "asset_type": "website", "location": "https://bitbucket.org", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Confluence Cloud (bugbounty-test-.atlassian.net/wiki)", "asset_type": "website", "location": "https://www.atlassian.com/software/confluence", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Confluence Cloud Premium (bugbounty-test-.atlassian.net/wiki)", "asset_type": "website", "location": "https://www.atlassian.com/software/confluence/premium", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Confluence Cloud Mobile App for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.atlassian.android.confluence.core&hl=en_US&gl=US", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Confluence Cloud Mobile App for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/confluence-cloud/id1006971684", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Cloud Mobile App for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&hl=en_US&gl=US", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Cloud Mobile App for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/jira-cloud-by-atlassian/id1006972087", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Service Management Cloud (bugbounty-test-.atlassian.net)", "asset_type": "website", "location": "https://www.atlassian.com/software/jira/service-management", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Software Cloud (bugbounty-test-.atlassian.net)", "asset_type": "website", "location": "https://www.atlassian.com/software/jira", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Work Management Cloud formerly Jira Core (bugbounty-test-.atlassian.net)", "asset_type": "website", "location": "https://www.atlassian.com/software/jira/work-management", "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Any associated *.atlassian.com or *.atl-paas.net domain that can be exploited DIRECTLY from the *.atlassian.net instance", "asset_type": "other", "location": null, "group": "Tier 1 ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Rovo", "asset_type": "website", "location": "https://www.atlassian.com/software/rovo", "group": "Rovo, Rovo Dev and other AI Features", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Rovo Dev CLI", "asset_type": "other", "location": "https://support.atlassian.com/rovo/docs/use-rovo-dev-cli/", "group": "Rovo, Rovo Dev and other AI Features", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Other Rovo Dev", "asset_type": "website", "location": "https://www.atlassian.com/software/rovo-dev", "group": "Rovo, Rovo Dev and other AI Features", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Atlassian MCP Server", "asset_type": "other", "location": "https://mcp.atlassian.com", "group": "Rovo, Rovo Dev and other AI Features", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Atlassian Marketplace (https://marketplace.atlassian.com)", "asset_type": "website", "location": "https://marketplace.atlassian.com", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Atlassian Atlas", "asset_type": "website", "location": "https://www.atlassian.com/software/atlas", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.atlastunnel.com", "asset_type": "website", "location": "https://*.atlastunnel.com", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Any other *.atlassian.com or *.atl-paas.net domain that cannot be exploited directly from a *.atlassian.net instance", "asset_type": "website", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.loom.com", "asset_type": "website", "location": "https://www.loom.com/", "group": "Atlassian Loom", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Loom Desktop App (Windows)", "asset_type": "website", "location": "https://www.loom.com/download", "group": "Atlassian Loom", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Loom Desktop App (macOS)", "asset_type": "website", "location": "https://www.loom.com/download", "group": "Atlassian Loom", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Loom for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.loom.android&hl=en_US&pli=1", "group": "Atlassian Loom", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Loom for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/loom-screen-recorder/id1474480829", "group": "Atlassian Loom", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Loom Chrome Extension", "asset_type": "other", "location": "https://chromewebstore.google.com/detail/loom-%E2%80%93-screen-recorder-sc/liecbddmkiiihnedobmlmillhodjkdmb?hl=en-US&pli=1", "group": "Atlassian Loom", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Atlassian Compass", "asset_type": "website", "location": "https://www.atlassian.com/software/compass", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Bamboo", "asset_type": "website", "location": "https://www.atlassian.com/software/bamboo", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Bitbucket Data Center", "asset_type": "website", "location": "https://www.atlassian.com/enterprise/data-center/bitbucket", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Confluence Companion App for macOS and Windows", "asset_type": "other", "location": "https://confluence.atlassian.com/doc/install-atlassian-companion-992678880.html", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Confluence Data Center Mobile App for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.atlassian.confluence.server", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Confluence Data Center Mobile App for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/confluence-server/id1288365159", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Crucible", "asset_type": "website", "location": "https://www.atlassian.com/software/crucible", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Confluence Data Center", "asset_type": "other", "location": "https://www.atlassian.com/enterprise/data-center/confluence", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Crowd", "asset_type": "website", "location": "https://www.atlassian.com/enterprise/data-center/crowd", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "FishEye", "asset_type": "website", "location": "https://www.atlassian.com/software/fisheye", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Core Data Center", "asset_type": "website", "location": "https://www.atlassian.com/enterprise/data-center/jira", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Data Center Mobile App for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.atlassian.jira.server&hl=en_US&gl=US", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Data Center Mobile App for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/jira-server/id1405353949", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Product Discovery", "asset_type": "website", "location": "https://www.atlassian.com/software/jira/product-discovery", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Service Management Data Center", "asset_type": "website", "location": "https://www.atlassian.com/enterprise/data-center/jira/service-management", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Jira Software Data Center", "asset_type": "website", "location": "https://www.atlassian.com/enterprise/data-center/jira", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Sourcetree for macOS and Windows (https://www.sourcetreeapp.com/)", "asset_type": "other", "location": "https://www.sourcetreeapp.com/", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Other - (all other Atlassian targets)", "asset_type": "other", "location": null, "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Forge Platform", "asset_type": "other", "location": null, "group": "Atlassian Forge", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "GraphQL API (bugbounty-test-.atlassian.net/gateway/api/graphql)", "asset_type": "api", "location": null, "group": "Atlassian Forge", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://www.npmjs.com/package/@forge/cli", "asset_type": "other", "location": "https://www.npmjs.com/package/@forge/cli\t", "group": "Atlassian Forge", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "Any internal or development services.", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "First and third party apps and plugins from the marketplace are excluded from this bounty but may be in scope for https://bugcrowd.com/atlassianapps", "asset_type": "website", "location": "https://bugcrowd.com/atlassianapps", "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "shop.atlassian.com", "asset_type": "website", "location": "https://shop.atlassian.com", "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "bytebucket.org", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.bitbucket.io", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://blog.bitbucket.org", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "HipChat (inc. HipChat Data Center, HipChat Desktop, HipChat Mobile)", "asset_type": "other", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Stride (inc. Stride Video, Stride Desktop, Stride Mobile)", "asset_type": "other", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "support.atlassian.com", "asset_type": "website", "location": "https://support.atlassian.com", "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Any customer instance. Do not test customer instances or affect customer data. Customer cloud instances may be in the form of .atlassian.net or .jira.com. Test only your own instances.", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Any repository that you are not an owner of - do not impact Atlassian customers in any way.", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "support.loom.com", "asset_type": "website", "location": "https://support.loom.com", "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "info.loom.com", "asset_type": "website", "location": "https://info.loom.com/", "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] } ], "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ], "review_flags": [] }, { "id": "bugcrowd-6936d77e5d79f257", "name": "Atlassian-Built Apps", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/atlassianapps", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,000", "reward_min": "$100", "reward_max": "$4,000", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:08Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/atlassianapps/changelog/ebcf3502-3dd1-4a0c-a0ab-2bcee23d5c16.json" ], "in_scope": [ { "name": "Opsgenie - Cloud - https://marketplace.atlassian.com/apps/1222147/opsgenie?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1222147/opsgenie?hosting=cloud", "group": "Preinstalled Apps in Jira and Confluence" }, { "name": "Analytics for Confluence - Cloud - https://marketplace.atlassian.com/apps/1215795/analytics-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215795/analytics-for-confluence?hosting=cloud", "group": "Preinstalled Apps in Jira and Confluence" }, { "name": "Automation for Jira - Cloud - https://marketplace.atlassian.com/apps/1215460/automation-for-jira-server?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215460/automation-for-jira-server?hosting=cloud", "group": "Preinstalled Apps in Jira and Confluence" }, { "name": "Opsgenie Incident Timeline - Cloud - https://marketplace.atlassian.com/apps/1221251/opsgenie-incident-timeline?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221251/opsgenie-incident-timeline?hosting=cloud", "group": "Preinstalled Apps in Jira and Confluence" }, { "name": "Opsgenie Incident Timeline EU - Cloud - https://marketplace.atlassian.com/apps/1221312/opsgenie-incident-timeline-eu?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221312/opsgenie-incident-timeline-eu?hosting=cloud", "group": "Preinstalled Apps in Jira and Confluence" }, { "name": "Jira Cloud for Outlook (Official) - Cloud - https://marketplace.atlassian.com/apps/1220666/jira-cloud-for-outlook-official?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220666/jira-cloud-for-outlook-official?hosting=cloud", "group": "Preinstalled Apps in Jira and Confluence" }, { "name": "Assets - Confluence Macro - DataCenter - https://marketplace.atlassian.com/apps/1216074/assets-confluence-macro?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216074/insight-macro-for-confluence?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - SCCM Integration - DataCenter - https://marketplace.atlassian.com/apps/1219094/assets-sccm-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219094/insight-sccm-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - Snow Integration - DataCenter - https://marketplace.atlassian.com/apps/1219298/assets-snow-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219298/insight-snow-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - Jira & Bitbucket Integration - DataCenter - https://marketplace.atlassian.com/apps/1217750/assets-jira-bitbucket-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217750/insight-jira-bitbucket-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Mobile Plugin for Confluence Data Center and Server - Data Center - https://marketplace.atlassian.com/apps/1218250/mobile-plugin-for-confluence-data-center-and-server?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218250/mobile-plugin-for-confluence-data-center-and-server?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Jira Cloud Migration Assistant - DataCenter - https://marketplace.atlassian.com/apps/1222010/jira-cloud-migration-assistant?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1222010/jira-cloud-migration-assistant?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Better Code Macro for Confluence - Cloud - https://marketplace.atlassian.com/apps/1214912/better-code-macro-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1214912/better-code-macro-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Disable Referer for Bitbucket Server - DataCenter - https://marketplace.atlassian.com/apps/1214351/disable-referer-for-bitbucket-server?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1214351/disable-referer-for-bitbucket-server?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Look and Feel for Bitbucket Server - Datacenter - https://marketplace.atlassian.com/apps/1212632/look-and-feel-for-bitbucket-server?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212632/look-and-feel-for-bitbucket-server?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets Discovery - Cloud - https://marketplace.atlassian.com/apps/1214668/assets-discovery?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1214668/insight-discovery?hosting=cloud", "group": "Atlassian Apps" }, { "name": "ProForma: Forms & Checklist for Jira - Datacenter - https://marketplace.atlassian.com/apps/1215833/proforma-forms-checklist-for-jira?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215833/proforma-forms-checklist-for-jira?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Form macro builder for Confluence - Cloud - https://marketplace.atlassian.com/apps/1225664/form-macro-builder-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1225664/form-macro-builder-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "GitHub for Jira - Cloud - https://marketplace.atlassian.com/apps/1219592/github-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219592/github-for-jira?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Confluence Cloud for Microsoft Teams - Cloud - https://marketplace.atlassian.com/apps/1226127/confluence-cloud-for-microsoft-teams-official?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1226127/confluence-cloud-for-microsoft-teams?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Bitbucket Server Protect Unmerged Hook - Data Center - https://marketplace.atlassian.com/apps/1211203/bitbucket-server-protect-unmerged-hook?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211203/bitbucket-server-protect-unmerged-hook?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Jira Cloud for Microsoft Teams - Cloud - https://marketplace.atlassian.com/apps/1226478/jira-cloud-for-microsoft-teams-official?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1226478/jira-cloud-for-microsoft-teams?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Decisions Helper for Confluence - Cloud - https://marketplace.atlassian.com/apps/1226380/decisions-helper-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1226380/decisions-helper-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Troubleshooting and Support - Bamboo - Data Center - https://marketplace.atlassian.com/apps/1217745/troubleshooting-and-support-bamboo?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217745/troubleshooting-and-support-bamboo?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Bitbucket Cloud Migration Assistant - Data Center - https://marketplace.atlassian.com/apps/1226610/bitbucket-cloud-migration-assistant?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1226610/bitbucket-cloud-migration-assistant?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Hackathon Workflow Alan - Cloud - https://marketplace.atlassian.com/apps/1227949/hackathon-workflow-alan?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1227949/hackathon-workflow-alan?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Hackathon Workflow Alan - Data Center - https://marketplace.atlassian.com/apps/1227949/hackathon-workflow-alan?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1227949/hackathon-workflow-alan?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Application tunnels - DataCenter - https://marketplace.atlassian.com/apps/1227901/application-tunnels?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1227901/application-tunnels?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Ipython Notebook Viewer - Cloud - https://marketplace.atlassian.com/apps/1218117/ipython-notebook-viewer?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218117/ipython-notebook-viewer?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Atlas for Jira Cloud - Cloud - https://marketplace.atlassian.com/apps/1228937/atlas-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1228937/atlas-for-jira-cloud?hosting=cloud&tab=overview", "group": "Atlassian Apps" }, { "name": "Developer Assistant for Confluence - Cloud - https://marketplace.atlassian.com/apps/1229446/developer-assistant-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1229446/developer-assistant-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Developer Assistant for Jira - Cloud - https://marketplace.atlassian.com/apps/1229343/developer-assistant-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1229343/developer-assistant-for-jira?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Team Calendars for Confluence - Cloud - https://marketplace.atlassian.com/apps/72307/team-calendars-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/72307/team-calendars-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Automation for Jira - DataCenter - https://marketplace.atlassian.com/apps/1215460/automation-for-jira?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215460/automation-for-jira-data-center-and-server?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Team Calendars for Confluence - DataCenter - https://marketplace.atlassian.com/apps/72307/team-calendars-for-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/72307/team-calendars-for-confluence?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Advanced Roadmaps (formerly Portfolio) - DataCenter - https://marketplace.atlassian.com/apps/1212136/advanced-roadmaps-formerly-portfolio?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212136/advanced-roadmaps-formerly-portfolio?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Atlassian Universal Plugin Manager - DataCenter - https://marketplace.atlassian.com/apps/23915/atlassian-universal-plugin-manager?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/23915/atlassian-universal-plugin-manager?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Questions for Confluence - DataCenter - https://marketplace.atlassian.com/apps/1211644/questions-for-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211644/questions-for-confluence?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Questions for Confluence - Cloud - https://marketplace.atlassian.com/apps/1211644/questions-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211644/questions-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Troubleshooting and Support - Jira - DataCenter - https://marketplace.atlassian.com/apps/1217696/troubleshooting-and-support-jira?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217696/troubleshooting-and-support-jira?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Troubleshooting and Support - Confluence - DataCenter - https://marketplace.atlassian.com/apps/1217697/troubleshooting-and-support-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217697/troubleshooting-and-support-confluence?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Confluence Cloud Migration Assistant - DataCenter - https://marketplace.atlassian.com/apps/1219672/confluence-cloud-migration-assistant?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219672/confluence-cloud-migration-assistant?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "SSO for Atlassian Server and Data Center - DataCenter - https://marketplace.atlassian.com/apps/1216096/sso-for-atlassian-server-and-data-center?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216096/sso-for-atlassian-server-and-data-center?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Jira Server for Slack (Official) - DataCenter - https://marketplace.atlassian.com/apps/1220099/jira-server-for-slack-official?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220099/jira-server-for-slack-official?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Auto Unapprove for Bitbucket Server - DataCenter - https://marketplace.atlassian.com/apps/1211449/auto-unapprove-for-bitbucket-server?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211449/auto-unapprove-for-bitbucket-server?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Confluence Server for Slack (Official) - DataCenter - https://marketplace.atlassian.com/apps/1220186/confluence-server-for-slack-official?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220186/confluence-server-for-slack-official?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Statuspage for Jira Service Management - DataCenter - https://marketplace.atlassian.com/apps/1216079/statuspage-for-jira-service-management?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216079/statuspage-for-jira-service-management?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Statuspage for Jira Service Management - Cloud - https://marketplace.atlassian.com/apps/1216079/statuspage-for-jira-service-management?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216079/statuspage-for-jira-service-management?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Bitbucket Server for Slack (Official) - DataCenter - https://marketplace.atlassian.com/apps/1220729/bitbucket-server-for-slack-official?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220729/bitbucket-server-for-slack-official?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Advanced Roadmaps for Jira in Confluence - DataCenter - https://marketplace.atlassian.com/apps/1221237/advanced-roadmaps-for-jira-in-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221237/advanced-roadmaps-for-jira-in-confluence?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Centralized license visibility - DataCenter - https://marketplace.atlassian.com/apps/1220745/centralized-license-visibility?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220745/centralized-license-visibility?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Permission Lockdown for Bitbucket Server - DataCenter - https://marketplace.atlassian.com/apps/1217941/permission-lockdown-for-bitbucket-server?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217941/permission-lockdown-for-bitbucket-server?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Jira Cloud for Slack (Official) - Cloud - https://marketplace.atlassian.com/apps/1216863/jira-cloud-for-slack-official?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216863/jira-cloud-for-slack-official?hosting=cloud&tab=overview", "group": "Atlassian Apps" }, { "name": "Confluence Cloud for Slack (Official) - Cloud - https://marketplace.atlassian.com/apps/1219518/confluence-cloud-for-slack-official?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219518/confluence-cloud-for-slack-official?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Jira Cloud for Google Sheets (Official) - Cloud - https://marketplace.atlassian.com/apps/1220382/jira-cloud-for-google-sheets-official?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220382/jira-cloud-for-google-sheets-official?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Bitbucket Cloud for Slack (Official) - Cloud - https://marketplace.atlassian.com/apps/1218781/bitbucket-cloud-for-slack-official?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218781/bitbucket-cloud-for-slack-official?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Atlassian Plugin SDK - DEB - Cloud - https://marketplace.atlassian.com/apps/1210992/atlassian-plugin-sdk-deb?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1210992/atlassian-plugin-sdk-deb?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Jira Cloud for Excel (official) - Cloud - https://marketplace.atlassian.com/apps/1221301/jira-cloud-for-excel-official?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221301/jira-cloud-for-excel-official?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Jenkins for Jira (official) - Cloud - https://marketplace.atlassian.com/apps/1227791/jenkins-for-jira-official?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1227791/jenkins-for-jira-official?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Bitbucket Pipelines for Jira - Cloud - https://marketplace.atlassian.com/apps/1220820/bitbucket-pipelines-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220820/bitbucket-pipelines-for-jira?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Mobile Plugin for Jira - DataCenter - https://marketplace.atlassian.com/apps/1220151/mobile-plugin-for-jira-data-center-and-server?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220151/mobile-plugin-for-jira-data-center-and-server?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - Tempo Integration - DataCenter - https://marketplace.atlassian.com/apps/1217751/assets-tempo-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217751/insight-tempo-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - Jamf Integration - DataCenter - https://marketplace.atlassian.com/apps/1219908/assets-jamf-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219908/insight-jamf-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - Device42 Integration - DataCenter - https://marketplace.atlassian.com/apps/1219632/assets-device42-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219632/insight-device42-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - DataCenter - https://marketplace.atlassian.com/apps/1212137/assets?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212137/insight-asset-management?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - AWS Integration - DataCenter - https://marketplace.atlassian.com/apps/1218757/assets-aws-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218757/insight-aws-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - Google Cloud Integration - DataCenter - https://marketplace.atlassian.com/apps/1219212/assets-google-cloud-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219212/insight-google-cloud-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets - NVD Integration - DataCenter - https://marketplace.atlassian.com/apps/1220353/assets-nvd-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220353/insight-nvd-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Microsoft Teams for Jira - DataCenter - https://marketplace.atlassian.com/apps/1217836/microsoft-teams-for-jira?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217836/microsoft-teams-for-jira?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Assets Discovery - DataCenter - https://marketplace.atlassian.com/apps/1214668/assets-discovery?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1214668/insight-discovery?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "JavaScript Charts for Jira Cloud - Cloud - https://marketplace.atlassian.com/apps/1214527/javascript-charts-for-jira-cloud?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1214527/javascript-charts-for-jira-cloud?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Entity Property Tool for Jira - Cloud - https://marketplace.atlassian.com/apps/1214509/entity-property-tool-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1214509/entity-property-tool-for-jira?hosting=cloud", "group": "Atlassian Apps" }, { "name": "My Reminders for Jira - Cloud - https://marketplace.atlassian.com/apps/1212778/my-reminders-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212778/my-reminders-for-jira?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Assets - ServiceNow Integration - DataCenter - https://marketplace.atlassian.com/apps/1219561/assets-servicenow-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219561/insight-servicenow-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Rich Text Gadget for Jira - Cloud - https://marketplace.atlassian.com/apps/1214632/rich-text-gadget-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1214632/rich-text-gadget-for-jira?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Previous/next navigation - Cloud - https://marketplace.atlassian.com/apps/1223382/previous-next-navigation?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1223382/previous-next-navigation?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Hackathon for Jira - Cloud - https://marketplace.atlassian.com/apps/1214757/hackathon-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1214757/hackathon-for-jira?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Who's Looking for Jira Cloud - Cloud - https://marketplace.atlassian.com/apps/1211596/whos-looking-for-jira-cloud?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211596/whos-looking-for-jira-cloud?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Assets - Azure Integration - DataCenter - https://marketplace.atlassian.com/apps/1218974/assets-azure-integration?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218974/insight-azure-integration?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "JSM Assets - Microsoft Entra ID (Azure AD) Beta Integration - Cloud - https://marketplace.atlassian.com/apps/1232506/jsm-assets-microsoft-entra-id-azure-ad-beta-integration?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1232506/jsm-assets-microsoft-entra-id-azure-ad-beta-integration?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Mermaid diagrams viewer-Cloud-https://marketplace.atlassian.com/apps/1232887/mermaid-diagrams-viewer?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1232887/mermaid-diagrams-viewer?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Extension Point Finder for Jira - Cloud - https://marketplace.atlassian.com/apps/1230672/extension-point-finder-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1230672/extension-point-finder-for-jira?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Extension Point Finder for Confluence - Cloud - https://marketplace.atlassian.com/apps/1230671/extension-point-finder-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1230671/extension-point-finder-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Issue Status Helper - Cloud - https://marketplace.atlassian.com/apps/1231916/issue-status-helper?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1231916/issue-status-helper?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Databricks Visualization - Cloud - https://marketplace.atlassian.com/apps/1230032/databricks-visualization?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1230032/databricks-visualization?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Audio Recorder for Confluence - Cloud - https://marketplace.atlassian.com/apps/1233346/audio-recorder-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1233346/audio-recorder-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Localised Date Macro for Confluence - Cloud - https://marketplace.atlassian.com/apps/1231985/localised-date-macro-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1231985/localised-date-macro-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Bump Build Number - DataCenter - https://marketplace.atlassian.com/apps/1232254/bump-build-number?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1232254/bump-build-number?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Event Sign-up for Confluence - Cloud - https://marketplace.atlassian.com/apps/1235122/event-sign-up-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1235122/event-sign-up-for-confluence?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Data Manager Clients for JSM Assets - Cloud - https://marketplace.atlassian.com/apps/1234690/data-manager-clients-for-jsm-assets?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1234690/data-manager-clients-for-jsm-assets?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Azure DevOps for Jira (Official) - Cloud - https://marketplace.atlassian.com/apps/1232793/azure-devops-for-jira-official?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1232793/azure-devops-for-jira-official?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "JSM Incident Timeline - Cloud - https://marketplace.atlassian.com/apps/1234673/jsm-incident-timeline?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1234673/jsm-incident-timeline?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Sentry for Compass - Cloud - https://marketplace.atlassian.com/apps/1233977/sentry-for-compass?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1233977/sentry-for-compass?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "GitHub for Compass - Cloud - https://marketplace.atlassian.com/apps/1234027/github-for-compass?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1234027/github-for-compass?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "GitLab for Compass - Cloud - https://marketplace.atlassian.com/apps/1233993/gitlab-for-compass?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1233993/gitlab-for-compass?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "Bitbucket for Compass - Cloud - https://marketplace.atlassian.com/apps/1234004/bitbucket-for-compass?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1234004/bitbucket-for-compass?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "Snyk for Compass - Cloud - https://marketplace.atlassian.com/apps/1233931/snyk-for-compass?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1233931/snyk-for-compass?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "Slack for Compass - Cloud - https://marketplace.atlassian.com/apps/1233986/slack-for-compass?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1233986/slack-for-compass?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "PagerDuty for Compass - Cloud - https://marketplace.atlassian.com/apps/1233942/pagerduty-for-compass?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1233942/pagerduty-for-compass?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "Jira & Confluence Smart Chips for Google Docs Slides Sheets - Cloud - https://marketplace.atlassian.com/apps/1232285/jira-confluence-smart-chips-for-google-docs-slides-sheets?tab=overview&hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1232285/jira-confluence-smart-chips-for-google-docs-slides-sheets?tab=overview&hosting=cloud", "group": "Atlassian Apps" }, { "name": "AutoLink Plugin for Jira - DataCenter - https://marketplace.atlassian.com/apps/1211246/autolink-plugin-for-jira?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211246/autolink-plugin-for-jira?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Confluence Widget for Figma (Beta) - Cloud - https://marketplace.atlassian.com/apps/1235488/confluence-widget-for-figma-beta?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1235488/confluence-widget-for-figma-beta?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Jira Board Buddy - Cloud - https://marketplace.atlassian.com/apps/1235496/jira-board-buddy?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1235496/jira-board-buddy?hosting=cloud", "group": "Atlassian Apps" }, { "name": "Toolkit Plugin for Jira - DataCenter - https://marketplace.atlassian.com/apps/5142/toolkit-plugin-for-jira?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/5142/toolkit-plugin-for-jira?hosting=datacenter", "group": "Atlassian Apps" }, { "name": "Box - https://trello.com/power-ups/55a5d915446f517774210001/box", "asset_type": "other", "location": "https://trello.com/power-ups/55a5d915446f517774210001/box", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Card Repeater - https://trello.com/power-ups/57b47fb862d25a30298459b1/card-repeater", "asset_type": "other", "location": "https://trello.com/power-ups/57b47fb862d25a30298459b1/card-repeater", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Card Snooze - https://trello.com/power-ups/58dd18bdccfca7af8311792e/card-snooze", "asset_type": "other", "location": "https://trello.com/power-ups/58dd18bdccfca7af8311792e/card-snooze", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Evernote - https://trello.com/power-ups/55a5d915446f517774210003/evernote", "asset_type": "other", "location": "https://trello.com/power-ups/55a5d915446f517774210003/evernote", "group": "Trello Power Ups (Made by Trello)" }, { "name": "GitHub - https://trello.com/power-ups/55a5d916446f517774210004/github", "asset_type": "other", "location": "https://trello.com/power-ups/55a5d916446f517774210004/github", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Google Drive - https://trello.com/power-ups/55a5d916446f517774210006/google-drive", "asset_type": "other", "location": "https://trello.com/power-ups/55a5d916446f517774210006/google-drive", "group": "Trello Power Ups (Made by Trello)" }, { "name": "MailChimp - https://trello.com/power-ups/55a5d917446f51777421000c/mailchimp", "asset_type": "other", "location": "https://trello.com/power-ups/55a5d917446f51777421000c/mailchimp", "group": "Trello Power Ups (Made by Trello)" }, { "name": "OneDrive - https://trello.com/power-ups/5940440775fbe327abd3329f/onedrive", "asset_type": "other", "location": "https://trello.com/power-ups/5940440775fbe327abd3329f/onedrive", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Package Tracker - https://trello.com/power-ups/55a5d917446f51777421000d/package-tracker", "asset_type": "other", "location": "https://trello.com/power-ups/55a5d917446f51777421000d/package-tracker", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Read Me - https://trello.com/power-ups/5a2de0c41ae4a1537bb0055d/read-me", "asset_type": "other", "location": "https://trello.com/power-ups/5a2de0c41ae4a1537bb0055d/read-me", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Salesforce - https://trello.com/power-ups/55a5d917446f517774210009/salesforce", "asset_type": "other", "location": "https://trello.com/power-ups/55a5d917446f517774210009/salesforce", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Slack - https://trello.com/power-ups/55a5d917446f51777421000a/slack", "asset_type": "other", "location": "https://trello.com/power-ups/55a5d917446f51777421000a/slack", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Zendesk - https://trello.com/power-ups/56940ede94fd60cf95f7ce6a/zendesk", "asset_type": "other", "location": "https://trello.com/power-ups/56940ede94fd60cf95f7ce6a/zendesk", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Dashcards - https://trello.com/power-ups/6048e897c73d032a983e2a7c/dashcards", "asset_type": "other", "location": "https://trello.com/power-ups/6048e897c73d032a983e2a7c/dashcards", "group": "Trello Power Ups (Made by Trello)" }, { "name": "Third Party Marketplace Apps", "asset_type": "website", "location": null, "group": "Third Party Marketplace Apps" } ], "out_of_scope": [ { "name": "Calendar Power-Up", "asset_type": "website", "location": "https://trello.com/power-ups/55a5d917446f517774210011/calendar-power-up", "group": "Out of scope targets" }, { "name": "List Limits Power-Up", "asset_type": "website", "location": "https://trello.com/power-ups/5c2462c384ab8949b1724a20/list-limits", "group": "Out of scope targets" }, { "name": "Card Aging Power-Up", "asset_type": "website", "location": "https://trello.com/power-ups/55a5d917446f517774210012/card-aging", "group": "Out of scope targets" }, { "name": "Voting Power-Up", "asset_type": "website", "location": "https://trello.com/power-ups/55a5d917446f517774210013/voting", "group": "Out of scope targets" }, { "name": "https://marketplace.atlassian.com (Website)", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://trello.com/power-ups/*", "asset_type": "other", "location": null, "group": "Out of scope targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-215d48b1ed41996f", "name": "Aurory Managed Bug Bounty Engagement (Public)", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/aurory-mbb-og2", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,500", "reward_min": "$100", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Games", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:09Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/aurory-mbb-og2/changelog/c9e4532a-1ed4-4c92-851d-c840eb872cd5.json" ], "in_scope": [ { "name": "https://app.aurory.io", "asset_type": "website", "location": "https://app.aurory.io", "group": "In Scope Targets" }, { "name": "Amiko Arena", "asset_type": "other", "location": "https://store.epicgames.com/p/amiko-arena-a5986d", "group": "In Scope Targets" }, { "name": "Amiko Legends", "asset_type": "other", "location": "https://store.steampowered.com/app/4245930/Amiko_Legends/", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "https://blog.aurory.io", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Sentry.io", "asset_type": "website", "location": "https://sentry.io/welcome/", "group": "Out of Scope" }, { "name": "Arbitrum Casier (aka Locker) Smart Contract", "asset_type": "other", "location": "https://arbiscan.io/address/0x4e0e24b960286be46ecf92986bef548604601d77", "group": "Out of Scope" }, { "name": "wss://ws.aurorynet.dev.aurory.io", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-42a03b5a0dcc855e", "name": "Auth0 by Okta", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/auth0-okta", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $50,000", "reward_min": "$100", "reward_max": "$50,000", "scope_rank": 4, "access_status": "open", "industry": "Cloud", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:10Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/auth0-okta/changelog/3491b799-94fd-4a62-8ce0-1d5eaa0e09c6.json" ], "in_scope": [ { "name": "config.cic-bug-bounty.auth0app.com", "asset_type": "website", "location": null, "group": "Tier 1 Targets" }, { "name": "manage.cic-bug-bounty.auth0app.com (Management Dashboard)", "asset_type": "website", "location": "https://manage.cic-bug-bounty.auth0app.com/", "group": "Tier 1 Targets" }, { "name": "*.cic-bug-bounty.auth0app.com", "asset_type": "website", "location": null, "group": "Tier 1 Targets" }, { "name": "Auth0 Guardian Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.auth0.guardian&hl=en_US&gl=US", "group": "Tier 1 Targets" }, { "name": "Auth0 Guardian IoS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/auth0-guardian/id1093447833", "group": "Tier 1 Targets" }, { "name": "marketplace.auth0.com (Auth0 Marketplace)", "asset_type": "website", "location": "https://marketplace.auth0.com", "group": "Tier 1 Targets" }, { "name": "MFA Integrations", "asset_type": "other", "location": null, "group": "Tier 1 Targets" }, { "name": "https://dashboard.fga.dev/", "asset_type": "website", "location": "https://dashboard.fga.dev/", "group": "Tier 1 Targets" }, { "name": "https://api.us1.fga.dev/", "asset_type": "api", "location": "https://api.us1.fga.dev/", "group": "Tier 1 Targets" }, { "name": "https://customers.us1.fga.dev/", "asset_type": "api", "location": "https://customers.us1.fga.dev/", "group": "Tier 1 Targets" }, { "name": "https://play.fga.dev/", "asset_type": "website", "location": "https://play.fga.dev/", "group": "Tier 1 Targets" }, { "name": "Auth0 SDK for Web (Auth0.js)", "asset_type": "other", "location": "https://github.com/auth0/auth0.js", "group": "SDK Targets" }, { "name": "Lock for Web (lock)", "asset_type": "other", "location": "https://github.com/auth0/lock", "group": "SDK Targets" }, { "name": "Auth0 Single Page App SDK (auth0-spa-js)", "asset_type": "other", "location": "https://github.com/auth0/auth0-spa-js", "group": "SDK Targets" }, { "name": ".NET SDK (Auth0.Net)", "asset_type": "other", "location": "https://github.com/auth0/Auth0.Net", "group": "SDK Targets" }, { "name": "Auth0 Next.js SDK (nextjs-auth0)", "asset_type": "other", "location": "https://github.com/auth0/nextjs-auth0", "group": "SDK Targets" }, { "name": "Auth0 Java SDK (auth0-java)", "asset_type": "other", "location": "https://github.com/auth0/auth0-java", "group": "SDK Targets" }, { "name": "Auth0 React Native SDK (react-native-auth0)", "asset_type": "other", "location": "https://github.com/auth0/react-native-auth0", "group": "SDK Targets" }, { "name": "Auth0 PHP SDK (auth0-php)", "asset_type": "other", "location": "https://github.com/auth0/auth0-php", "group": "SDK Targets" }, { "name": "auth0.com", "asset_type": "website", "location": null, "group": "Tier 2 Targets" }, { "name": "samltool.io", "asset_type": "website", "location": null, "group": "Tier 2 Targets" }, { "name": "webauthn.me", "asset_type": "website", "location": null, "group": "Tier 2 Targets" }, { "name": "openidconnect.net", "asset_type": "website", "location": null, "group": "Tier 2 Targets" }, { "name": "jwt.io", "asset_type": "website", "location": null, "group": "Tier 2 Targets" }, { "name": "auth0.net", "asset_type": "website", "location": null, "group": "Tier 2 Targets" } ], "out_of_scope": [ { "name": "auth0.auth0.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "manage.auth0.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "accounts.auth0.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "webtask.io", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "phenix.rocks", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Auth0 Docs (including quickstarts)", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "sharelock.io", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "goextend.io", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://support.auth0.com/tickets/new", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "support.auth0.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "community.auth0.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Auth0 passport-ws-fed", "asset_type": "other", "location": "https://github.com/auth0/passport-wsfed-saml2", "group": "Out of scope targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-bd3dbed8680001d1", "name": "AXIS OS", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/axis-os-public", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$500 - $40,000", "reward_min": "$500", "reward_max": "$40,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:11Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/axis-os-public/changelog/8678b92a-d1e6-4dab-8969-adc57ee5b4d6.json" ], "in_scope": [ { "name": "AXIS OS", "asset_type": "iot", "location": null, "group": "AXIS OS " } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-74f230cd3bc2b012", "name": "Backblaze", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/backblaze", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$500 - $6,500", "reward_min": "$500", "reward_max": "$6,500", "scope_rank": 3, "access_status": "open", "industry": "Cloud", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:12Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/backblaze/changelog/0230409e-f2a3-4d54-9094-599f0551ab1d.json" ], "in_scope": [ { "name": "Backblaze Android mobile application", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.backblaze.android&hl=en_US&gl=US", "group": "In Scope Targets" }, { "name": "Backblaze iOS mobile application", "asset_type": "ios", "location": "https://apps.apple.com/us/app/backblaze/id628638330", "group": "In Scope Targets" }, { "name": "Mac Personal Backup Clients", "asset_type": "other", "location": null, "group": "In Scope Targets" }, { "name": "Windows Personal Backup Clients", "asset_type": "other", "location": null, "group": "In Scope Targets" }, { "name": "Mac Restore Downloaders", "asset_type": "other", "location": null, "group": "In Scope Targets" }, { "name": "Windows Restore Downloaders", "asset_type": "other", "location": null, "group": "In Scope Targets" }, { "name": "Git Repositories (b2-sdk-java & B2 Command Line Tool)", "asset_type": "other", "location": null, "group": "In Scope Targets" }, { "name": "B2 APIs (*.backblazeb2.com)", "asset_type": "api", "location": "https://*.backblazeb2.com", "group": "In Scope Targets" }, { "name": "Backblaze Website (*.backblaze.com)", "asset_type": "website", "location": "https://backblaze.com", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-46bf988d9e5d7597", "name": "Balsamiq for Atlassian Products", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/balsamiq", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:13Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/balsamiq/changelog/e2cac3cb-e4fc-408e-ace8-d7ed657dcdbf.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1213404/balsamiq-wireframes-for-confluence-cloud?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1213404/balsamiq-wireframes-for-confluence-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1212796/balsamiq-wireframes-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212796/balsamiq-wireframes-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/5161/balsamiq-wireframes-for-jira?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/5161/balsamiq-wireframes-for-jira?hosting=datacenter&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/256/balsamiq-wireframes-for-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/256/balsamiq-wireframes-for-confluence?hosting=datacenter&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-f682c3a3aa7ed8f2", "name": "Binance", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/binance", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $10,000", "reward_min": "$200", "reward_max": "$10,000", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:14Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/binance/changelog/c2bdd90c-9f9b-4c3e-9225-a5dc9570bfb9.json" ], "in_scope": [ { "name": "api.coinmarketcap.com", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "pro-api.coinmarketcap.com", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "*.binance.com", "asset_type": "website", "location": "https://www.binance.com/", "group": "In Scope" }, { "name": "Binance Desktop Application", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Binance Mobile Application for Android", "asset_type": "android", "location": null, "group": "In Scope" }, { "name": "Binance Mobile Application for iOS", "asset_type": "ios", "location": null, "group": "In Scope" }, { "name": "api.binance.com", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "Binance macOS Application", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "pro.coinmarketcap.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "CoinMarketCap Android app", "asset_type": "android", "location": null, "group": "In Scope" }, { "name": "Trustwallet Android App", "asset_type": "android", "location": null, "group": "In Scope" }, { "name": "Trustwallet iOS App", "asset_type": "ios", "location": null, "group": "In Scope" }, { "name": "https://github.com/trustwallet/wallet-core/", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "CoinMarketCap iOS app", "asset_type": "ios", "location": null, "group": "In Scope" }, { "name": "portal-api.coinmarketcap.com", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "coinmarketcap.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "3rdparty-apis.coinmarketcap.com", "asset_type": "api", "location": null, "group": "In Scope" }, { "name": "*.binance.us", "asset_type": "website", "location": "https://www.binance.us/", "group": "In Scope" }, { "name": "binance.tr", "asset_type": "website", "location": "https://binance.tr", "group": "In Scope" }, { "name": "Trustwallet Chrome Extension", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [ { "name": "jobs.coinmarketcap.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "support.binance.*", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "binance.sg", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.trustwallet.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.trustwalletapp.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.binance.org", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "blog.coinmarketcap.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "support.coinmarketcap.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "blockchain.coinmarketcap.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.coinmarketcap.com", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-75b9247529d02120", "name": "Bitdefender", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/bitdefender", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $15,000", "reward_min": "$100", "reward_max": "$15,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:15Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/bitdefender/changelog/3a45252c-eccf-4d60-a163-77362fa66418.json" ], "in_scope": [ { "name": "Bitdefender Total Security", "asset_type": "other", "location": null, "group": "Bitdefender" }, { "name": "*.bitdefender.net", "asset_type": "website", "location": null, "group": "Bitdefender" }, { "name": "Bitdefender Antimalware Engines", "asset_type": "other", "location": null, "group": "Bitdefender" }, { "name": "*.bitdefender.com", "asset_type": "website", "location": null, "group": "Bitdefender" }, { "name": "Bitdefender GravityZone Business Security", "asset_type": "other", "location": "https://www.bitdefender.com/business/smb-products/business-security.html?cid=ppc|b|google|smb&s_kwcid=AL!6076!3!514235572261!p!!g!!bitdefender%20business&utm_term=bitdefender%20business&utm_campaign=USA+SMB+Branded+30&utm_source=adwords&utm_medium=ppc&hsa_acc=8155205354&hsa_cam=7848657822&hsa_grp=124745713150&hsa_ad=514235572261&hsa_src=g&hsa_tgt=kwd-308396066873&hsa_kw=bitdefender%20business&hsa_mt=p&hsa_net=adwords&hsa_ver=3&gclid=CjwKCAjwqIiFBhAHEiwANg9szk-Rr3iSn4mrwsvAUOn-pzrO12ufWDmyCLopWigaLQW0t_xtlBE65RoCr6kQAvD_BwE", "group": "Bitdefender" } ], "out_of_scope": [ { "name": "businessinsights.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "businessemail.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "businessresources.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "oemhub.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "oemresources.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "community.bitdefender.com/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "resellerportal.bitdefender.com/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "brand.bitdefender.com/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "stats.bitdefender.com/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "sstats.bitdefender.com/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "lsems.gravityzone.bitdefender.com/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "ssems.gravityzone.bitdefender.com/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "crp.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "telcosuccess.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "demo.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "translate.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "explore.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "explore-lb.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "partner-marketing.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "seems.gravityzone.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "workflow.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "workflow-test.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "workflow-dev.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "trust.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-c6c6a4a7ce57753c", "name": "Bitdefender Box v2", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/bitdefenderbox2", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $5,000", "reward_min": "$200", "reward_max": "$5,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:16Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/bitdefenderbox2/changelog/dd3672f0-00b7-48ec-939d-8fa9532c35d6.json" ], "in_scope": [ { "name": "Bitdefender BOX v2", "asset_type": "iot", "location": null, "group": "In scope" } ], "out_of_scope": [ { "name": "Bitdefender Central (iOS App)", "asset_type": "ios", "location": null, "group": "Out of scope" }, { "name": "Bitdefender Central (Android App)", "asset_type": "android", "location": null, "group": "Out of scope" }, { "name": "central.bitdefender.com", "asset_type": "website", "location": null, "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-4d515db5ec5e9be6", "name": "BitGo Managed Public Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/bitgo-mbb-og-public", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,500", "reward_min": "$100", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:17Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/bitgo-mbb-og-public/changelog/b92e72cb-9de5-45fb-aa47-8164f4056a64.json" ], "in_scope": [ { "name": "*.bitgo.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "app.bitgo.com", "asset_type": "website", "location": "https://app.bitgo.com", "group": "In Scope" }, { "name": "app.bitgo-test.com", "asset_type": "website", "location": "https://app.bitgo-test.com", "group": "In Scope" }, { "name": "bitgo.ae", "asset_type": "other", "location": "https://bitgo.ae/", "group": "In Scope" }, { "name": "usdstandard.com", "asset_type": "other", "location": "https://usdstandard.com/", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-579fe2e61922bdcf", "name": "BitGo Mobile Apps Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/bitgo-mobileapps-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:18Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/bitgo-mobileapps-mbb-og/changelog/9bf33fae-cd6c-4a53-8ef9-676bbc42ba37.json" ], "in_scope": [ { "name": "BitGo Verify Mobile App (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.bitgo.verify&hl=en_US", "group": "In Scope" }, { "name": "BitGo Verify Mobile App (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/bitgo-verify/id1608937235", "group": "In Scope" }, { "name": "BitGo Platform Access Mobile App (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.bitgo.mobileapp", "group": "In Scope" }, { "name": "BitGo Platform Access Mobile App (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/bitgo/id6739010408", "group": "In Scope" } ], "out_of_scope": [ { "name": "*.bitgo.com", "asset_type": "website", "location": null, "group": "Out of Scope " } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-dae6649841387d56", "name": "Bitpanda Ongoing Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/bitpanda-og-bb", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $15,000", "reward_min": "$100", "reward_max": "$15,000", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:19Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/bitpanda-og-bb/changelog/07e14180-dd4e-4ad5-9a3f-532f7361bc8e.json" ], "in_scope": [ { "name": "https://web.bitpanda.com", "asset_type": "website", "location": "https://web.bitpanda.com", "group": "Tier 1 Assets " }, { "name": "https://www.bitpanda.com", "asset_type": "website", "location": "https://www.bitpanda.com/", "group": "Tier 1 Assets " }, { "name": "https://api.bitpanda.com", "asset_type": "api", "location": null, "group": "Tier 1 Assets " }, { "name": "wss://socket.bitpanda.com", "asset_type": "website", "location": null, "group": "Tier 1 Assets " }, { "name": "All the Blockchain Infrastructure", "asset_type": "other", "location": null, "group": "Tier 1 Assets " }, { "name": "https://account.bitpanda.com", "asset_type": "website", "location": "https://account.bitpanda.com", "group": "Tier 1 Assets " }, { "name": "Bitpanda Broker Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.bitpanda.bitpanda", "group": "Tier 1 Assets " }, { "name": "Bitpanda Broker iOS App", "asset_type": "ios", "location": "https://apps.apple.com/app/bitpanda-buy-bitcoin-crypto/id1449018960", "group": "Tier 1 Assets " }, { "name": "https://blog.bitpanda.com", "asset_type": "website", "location": "https://blog.bitpanda.com/en", "group": "Tier 2 Assets " }, { "name": "https://www.bitpanda.com/academy/", "asset_type": "website", "location": "https://www.bitpanda.com/academy/en/", "group": "Tier 2 Assets " } ], "out_of_scope": [ { "name": "https://support.bitpanda.com", "asset_type": "website", "location": "https://support.bitpanda.com", "group": "Out of Scope" }, { "name": "https://maintenance.bitpanda.com", "asset_type": "website", "location": "https://maintenance.bitpanda.com", "group": "Out of Scope" }, { "name": "https://beta.bitpanda.com", "asset_type": "website", "location": "https://beta.bitpanda.com", "group": "Out of Scope" }, { "name": "https://developers.bitpanda.com", "asset_type": "website", "location": "https://developers.bitpanda.com", "group": "Out of Scope" }, { "name": "http://partners.whitelabel.bitpanda.com/", "asset_type": "website", "location": "http://partners.whitelabel.bitpanda.com/", "group": "Out of Scope" }, { "name": "http://status.bitpanda.com", "asset_type": "website", "location": "http://status.bitpanda.com", "group": "Out of Scope" }, { "name": "https://requests.bitpanda.com", "asset_type": "website", "location": "https://requests.bitpanda.com", "group": "Out of Scope" }, { "name": "*.exchange.bitpanda.com", "asset_type": "website", "location": "https://*.exchange.bitpanda.com", "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-346dc81c66411d21", "name": "Bitso Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/bitso-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $7,500", "reward_min": "$50", "reward_max": "$7,500", "scope_rank": 2, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:20Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/bitso-mbb-og/changelog/aa9c15b3-c6b6-44a0-818d-e3f748e4aab0.json" ], "in_scope": [ { "name": "bitso.com", "asset_type": "website", "location": "https://bitso.com", "group": "In Scope" }, { "name": "https://nvio.mx/", "asset_type": "website", "location": "https://nvio.mx/", "group": "In Scope" }, { "name": "https://nvio.ar/", "asset_type": "website", "location": "https://nvio.ar/", "group": "In Scope" }, { "name": "Mobile App Bitso Wallet iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/bitso-buy-bitcoin-easily/id1292836438", "group": "In Scope" }, { "name": "Mobile App Bitso Alpha iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/bitso-alpha-crypto-trade-pro/id1539469172", "group": "In Scope" }, { "name": "Mobile App Bitso Wallet Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.bitso.wallet&pcampaignid=web_share", "group": "In Scope" }, { "name": "Mobile App Bitso Alpha Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.bitso.alpha", "group": "In Scope" }, { "name": "onchain.cc", "asset_type": "website", "location": "https://onchain.cc/", "group": "In Scope" } ], "out_of_scope": [ { "name": "help.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "status.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "dev.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "blog.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "stage.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "landing.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "devmalta.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "edu.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "sandbox.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "api-dev.bitso.com", "asset_type": "api", "location": null, "group": "Out of Scope" }, { "name": "api-stage.bitso.com", "asset_type": "api", "location": null, "group": "Out of Scope" }, { "name": "api-sandbox.bitso.com", "asset_type": "api", "location": null, "group": "Out of Scope" }, { "name": "stagemalta.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.otc.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.efx.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "quetzal.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "login.bitso.io", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "bitsohelp.zendesk.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "support.bitso.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-865b838bf98feae1", "name": "Block Open Source", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/blockopensource", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $5,000", "reward_min": "Points", "reward_max": "$5,000", "scope_rank": 2, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:21Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/blockopensource/changelog/85eb95a6-33cf-45d3-83d1-dbceeb46c423.json" ], "in_scope": [ { "name": "███████████████████████████████████", "asset_type": "other", "location": null, "group": "████████" }, { "name": "███████████████████████████████████████", "asset_type": "other", "location": null, "group": "████████" }, { "name": "███████████████████████████████████████████████", "asset_type": "other", "location": null, "group": "████████" }, { "name": "███████████████████████████████████████████████████", "asset_type": "other", "location": null, "group": "████████" }, { "name": "█████████████████████████████████", "asset_type": "other", "location": null, "group": "████████" }, { "name": "███████████████████████████████", "asset_type": "other", "location": null, "group": "████████" }, { "name": "██████████████████████████████", "asset_type": "other", "location": null, "group": "████████" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-ec9788fb3eb3c84b", "name": "Blockchain.com Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/blockchain-dot-com", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $10,000", "reward_min": "$100", "reward_max": "$10,000", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:22Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/blockchain-dot-com/changelog/8533a741-0bd6-4927-9d59-e64c34d3e625.json" ], "in_scope": [ { "name": "blockchain.com", "asset_type": "website", "location": "https://www.blockchain.com/", "group": "In scope" }, { "name": "Blockchain.com: Crypto Wallet (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/blockchain-com-buy-btc-sol/id493253309", "group": "In scope" }, { "name": "Blockchain.com: Crypto Wallet (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=piuk.blockchain.android", "group": "In scope" }, { "name": "api.blockchain.info", "asset_type": "api", "location": null, "group": "In scope" }, { "name": "ws.blockchain.info", "asset_type": "api", "location": null, "group": "In scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-ff3f812de3442b4b", "name": "Blofin Crypto Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/blofin-crypto-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $4,000", "reward_min": "$50", "reward_max": "$4,000", "scope_rank": 2, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:23Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/blofin-crypto-mbb-og/changelog/bcadfbfe-227d-44f8-be5b-d744d965d423.json" ], "in_scope": [ { "name": "*.blofin.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "blofin.com", "asset_type": "website", "location": "https://blofin.com", "group": "In Scope Targets" }, { "name": "https://apps.apple.com/tt/app/blofin/id1616804346", "asset_type": "ios", "location": "https://apps.apple.com/tt/app/blofin/id1616804346", "group": "In Scope Targets" }, { "name": "https://play.google.com/store/apps/details?id=com.blofin.android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.blofin.android", "group": "In Scope Targets" }, { "name": "https://wallet.blofin.com/en", "asset_type": "website", "location": "https://wallet.blofin.com/en", "group": "In Scope Targets" }, { "name": "https://apps.apple.com/us/app/blofin-wallet/id6753210919", "asset_type": "ios", "location": "https://apps.apple.com/us/app/blofin-wallet/id6753210919", "group": "In Scope Targets" }, { "name": "https://play.google.com/store/apps/details?id=com.blofin.wallet.wallet", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.blofin.wallet.wallet", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-906e5d38e869fe34", "name": "Bloompeak's Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/bloompeak", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:24Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/bloompeak/changelog/8fa591d6-b706-4991-a6fd-84f1fd757169.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1226236/reports-charts-graphs-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226236/easy-reports-custom-charts-for-jira-dashboard-confluence?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1226236/reports-charts-and-graphs-for-jira?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226236/easy-reports-custom-charts-for-jira-dashboard-confluence?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1226734/reports-charts-and-graphs-for-jira-dashboard-free?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226734/easy-reports-free-custom-charts-for-jira-dashboard?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1226734/reports-charts-and-graphs-for-jira-dashboard-free?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226734/easy-reports-free-custom-charts-for-jira-dashboard?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1221826/status-time?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221826/status-time?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1221826/status-time-reports?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221826/status-time-reports-time-in-status?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1222051/status-time-free?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222051/status-time-reports-free-time-in-status?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1222051/status-time-free?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222051/status-time-free?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1231321/sum-up-reports-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231321/sum-up-reports-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1231321/sum-up-reports-for-jira?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231321/sum-up-reports-for-jira?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1222833/restore-deleted-issues?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222833/restore-deleted-issues?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1223002/track-deleted-issues?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223002/track-deleted-issues?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1224572/issue-translator?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224572/issue-translator?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1226140/issue-translator-free?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226140/issue-translator-free?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/2529437344/sprint-capacity-planner-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/2529437344/sprint-capacity-planner-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1224410/manage-users-for-jira-cloud?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224410/manage-users-for-jira-cloud?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1223088/project-role-tab-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223088/project-roles-groups-and-users?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-663c428857ba5298", "name": "BOJA Consulting Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/boja", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:25Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/boja/changelog/eb9c83e2-62f3-4642-b7e5-b5c23efd0e55.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1223298/agile-risk-management-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223298/agile-risk-management-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1226195/align-okr-with-roadmap?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226195/align-okr-with-roadmap?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1218036/agile-project-forecast-metrics-roadmap-portfolio?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218036/agile-project-forecast-metrics-roadmap-portfolio?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1218555/easy-pdf-html-word-export-to-custom-documents?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218555/easy-pdf-html-word-export-to-custom-documents?hosting=cloud", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-8119a00b8d1dae23", "name": "Bolt Technology OÜ", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/bolt-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $6,500", "reward_min": "$150", "reward_max": "$6,500", "scope_rank": 3, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:26Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/bolt-og/changelog/3d19c7a0-b06b-48e2-93ca-996402a0c261.json" ], "in_scope": [ { "name": "Bolt Rider (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/ee/app/bolt-fast-affordable-rides/id675033630", "group": "Mobile" }, { "name": "Bolt Rider (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=ee.mtakso.client", "group": "Mobile" }, { "name": "Bolt Food (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/ee/app/bolt-food/id1451492388", "group": "Mobile" }, { "name": "Bolt Food (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.bolt.deliveryclient", "group": "Mobile" }, { "name": "*.taxify.eu", "asset_type": "website", "location": "https://taxify.eu/", "group": "Web" }, { "name": "*.bolt.eu", "asset_type": "website", "location": "https://bolt.eu/", "group": "Web" }, { "name": "*.boltable.eu", "asset_type": "website", "location": "https://*.boltable.eu", "group": "Web" } ], "out_of_scope": [ { "name": "Bolt Driver (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=ee.mtakso.driver", "group": "Out of scope" }, { "name": "Bolt Driver (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/ee/app/bolt-driver/id897442736", "group": "Out of scope" }, { "name": "*.test.bolt.eu", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "*.test.taxify.eu", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "business-old.bolt.eu", "asset_type": "website", "location": null, "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-8ca4177407a3b0d2", "name": "BrizoIT", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/brizoit", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:27Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/brizoit/changelog/b1c0e1e9-4482-4a07-9c90-6aa6049ee304.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1217938/company-calendar-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217938/company-calendar-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1213545/work-time-tracking-calendar-for-jira?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1213545/work-time-tracking-calendar-for-jira?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1217938/company-calendar-planner-for-jira?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217938/company-calendar-planner-for-jira?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1213545/work-time-tracking-calendar-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1213545/work-time-tracking-calendar-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1222150/gantt-suite-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222150/gantt-suite-for-jira?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1222150/gantt-suite-for-jira?tab=overview&hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222150/gantt-suite-for-jira?tab=overview&hosting=datacenter", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-91d2bcf80709c6d7", "name": "Broken Build Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/brokenbuild", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Corporate Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:28Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/brokenbuild/changelog/ca9a9c28-da5d-491a-b100-002191b9ab9b.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1215768/agile-velocity-chart-gadget?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215768/agile-velocity-chart-gadget?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1212120/agile-reports-and-gadgets?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1212120/agile-reports-and-gadgets?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1214373/subcomponents-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214373/subcomponents-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1235338/cycle-time-gadgets-time-in-status-trend-reports-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235338/cycle-time-gadgets-time-in-status-trend-reports-for-jira?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1236240/burnup-burndown-chart-gadget-forecast-on-jira-dashboard?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236240/burnup-burndown-chart-gadget-forecast-on-jira-dashboard?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/2785074762/cumulative-flow-diagrams-cfd-for-jira-agile-charts-gadgets?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/2785074762/cumulative-flow-diagrams-cfd-for-jira-agile-charts-gadgets?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/3709319691/monte-carlo-simulations-for-scrum-kanban-agile-gadgets?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/3709319691/monte-carlo-simulations-for-scrum-kanban-agile-gadgets?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/2501894527/throughput-charts-for-scrum-kanban-agile-gadgets-reports?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/2501894527/throughput-charts-for-scrum-kanban-agile-gadgets-reports?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/924938813/agile-wip-charts-for-scrum-kanban-safe-gadgets-reports?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/924938813/agile-wip-charts-for-scrum-kanban-safe-gadgets-reports?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/2836020067/created-vs-resolved-charts-for-jira-agile-gadgets-reports?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/2836020067/created-vs-resolved-charts-for-jira-agile-gadgets-reports?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-fd7ad6155d8a771e", "name": "BrowserStack Inc. Marketplace Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/browserstack-market", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:29Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/browserstack-market/changelog/7ecfb9b0-1b37-4a13-b369-b518c45d4d4f.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1230699/browserstack-integration-for-jira?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230699/browserstack-integration-for-jira?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1230699/browserstack-integration-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230699/browserstack-integration-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1230699/browserstack-test-management-webapp-integration-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230699/browserstack-test-management-webapp-integration-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1741353933/browserstack-test-management-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1741353933/browserstack-test-management-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-568efe7eca493615", "name": "Bugcrowd", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/bugcrowd", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $10,000", "reward_min": "$100", "reward_max": "$10,000", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:30Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/bugcrowd/changelog/1ae12edd-3c69-4985-82c5-46fafede3ebc.json" ], "in_scope": [ { "name": "docs.bugcrowd.com", "asset_type": "website", "location": "https://docs.bugcrowd.com/", "group": "In Scope Targets " }, { "name": "bugcrowd.com", "asset_type": "website", "location": "https://bugcrowd.com/programs", "group": "In Scope Targets " }, { "name": "Crowdcontrol", "asset_type": "api", "location": "https://tracker.bugcrowd.com", "group": "In Scope Targets " }, { "name": "api.bugcrowd.com", "asset_type": "api", "location": "https://api.bugcrowd.com", "group": "In Scope Targets " }, { "name": "gov.bugcrowd.net", "asset_type": "website", "location": "https://gov.bugcrowd.net", "group": "In Scope Targets " }, { "name": "*.gov.bugcrowd.net", "asset_type": "website", "location": "https://*.gov.bugcrowd.net", "group": "In Scope Targets " }, { "name": "https://identity.bugcrowd.com/", "asset_type": "website", "location": "https://identity.bugcrowd.com/", "group": "Beta Feature Target" }, { "name": "*.bugcrowd.com/auth/*", "asset_type": "website", "location": null, "group": "Beta Feature Target" } ], "out_of_scope": [ { "name": "bugcrowd*.freshdesk.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "www.bugcrowd.com", "asset_type": "website", "location": "https://www.bugcrowd.com", "group": "Out of scope targets" }, { "name": "blog.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "researcherdocs.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "pages.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "forum.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "email.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "email.forum.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "go.bugcrowd.com", "asset_type": "website", "location": "https://go.bugcrowd.com", "group": "Out of scope targets" }, { "name": "events.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "assetinventory.bugcrowd.com", "asset_type": "website", "location": "https://assetinventory.bugcrowd.com", "group": "Out of scope targets" }, { "name": "community.bugcrowd.com", "asset_type": "website", "location": "https://community.bugcrowd.com", "group": "Out of scope targets" }, { "name": "trust.bugcrowd.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Social Engineering", "asset_type": "other", "location": null, "group": "Out of scope targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-c72c96db39ffb682", "name": "Bullish Exchange", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/bullish-exchange", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $25,000", "reward_min": "$200", "reward_max": "$25,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:31Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/bullish-exchange/changelog/2adf7292-450e-4751-8c74-579215238231.json" ], "in_scope": [ { "name": "https://simnext.bullish-test.com", "asset_type": "website", "location": "https://simnext.bullish-test.com", "group": "In Scope targets" }, { "name": "https://api.simnext.bullish-test.com", "asset_type": "api", "location": "https://api.simnext.bullish-test.com", "group": "In Scope targets" } ], "out_of_scope": [ { "name": "*.bullish.com/", "asset_type": "website", "location": null, "group": "Out of Scope targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-2713b4fa1775a3f8", "name": "Bullish.com", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/bullish", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $12,000", "reward_min": "$200", "reward_max": "$12,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:32Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/bullish/changelog/d582aaab-3e7b-4778-b607-36bfc8c59af3.json" ], "in_scope": [ { "name": "https://bullish.com/", "asset_type": "website", "location": "https://bullish.com/", "group": "In Scope targets" }, { "name": "https://investor.bullish.com", "asset_type": "website", "location": "https://investor.bullish.com/", "group": "In Scope targets" } ], "out_of_scope": [ { "name": "*.bullish.com", "asset_type": "website", "location": "https://*.bullish.com", "group": "Out of Scope targets" }, { "name": "https://simnext.bullish-test.com", "asset_type": "website", "location": "https://simnext.bullish-test.com", "group": "Out of Scope targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-109f91f978300f62", "name": "Caelor Group", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/caelor-group-market", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Corporate Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:33Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/caelor-group-market/changelog/7e1821a7-9722-4320-9158-d7bae3ce0eea.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1221754/translator-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221754/translator-for-confluence?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1222649/macrosuite-easy-html-button-hide-content-divider-tabs?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222649/macrosuite-easy-html-button-hide-content-divider-tabs?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1223472/trophies-for-jira-gamification?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223472/trophies-for-jira-gamification?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1224103/cards-panels?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224103/cards-panels?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1224724/todo-checklist-with-forge?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224724/todo-checklist-with-forge?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1223471/trophies-for-confluence-gamification?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223471/trophies-for-confluence-gamification?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1225290/moscow-agile-prioritization-with-forge?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225290/moscow-agile-prioritization-with-forge?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1225145/image-editor-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225145/image-editor-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1230540/cosmos-intranet-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230540/cosmos-intranet-for-confluence?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1227112/eisenhower-task-management-todo-priority-matrix-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227112/eisenhower-task-management-todo-priority-matrix-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1231591/shoppie-assets-integrated-shop-for-jsm?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231591/shoppie-assets-integrated-shop-for-jsm?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1225724/email-confluence-page?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225724/email-confluence-page?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1230161/linksy-advanced-issue-linking-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230161/linksy-advanced-issue-linking?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-85392a53b7284329", "name": "Canva", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/canva", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $15,000", "reward_min": "$200", "reward_max": "$15,000", "scope_rank": 4, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:34Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/canva/changelog/5e729209-79a7-4983-864d-8798977a6072.json" ], "in_scope": [ { "name": "www.canva.com", "asset_type": "website", "location": "https://www.canva.com", "group": "Canva Editor" }, { "name": "Canva Developer Portal", "asset_type": "website", "location": "https://www.canva.com/developers/", "group": "Canva Developer Platform" }, { "name": "Apps SDK Sandboxing", "asset_type": "other", "location": null, "group": "Canva Developer Platform" }, { "name": "api.canva.com", "asset_type": "api", "location": "https://api.canva.com", "group": "Canva Developer Platform" }, { "name": "*.canva.com", "asset_type": "website", "location": null, "group": "Canva Services/Infrastructure" }, { "name": "*.canva-apps.com", "asset_type": "website", "location": null, "group": "Canva Services/Infrastructure" }, { "name": "*.canva.tech", "asset_type": "website", "location": "https://*.canva.tech", "group": "Canva Services/Infrastructure" }, { "name": "Canva for ChatGPT", "asset_type": "website", "location": "https://www.canva.com/en_au/help/chatgpt-templates/", "group": "Canva Marketplace Apps & Integrations" }, { "name": "Canva for Slack", "asset_type": "website", "location": "https://www.canva.com/integrations/slack/", "group": "Canva Marketplace Apps & Integrations" }, { "name": "Canva Desktop (macOS / Windows)", "asset_type": "other", "location": null, "group": "Canva Native Applications" }, { "name": "Canva (iOS)", "asset_type": "ios", "location": null, "group": "Canva Native Applications" }, { "name": "Canva (Android)", "asset_type": "android", "location": null, "group": "Canva Native Applications" }, { "name": "Canva (Chrome Extension)", "asset_type": "other", "location": null, "group": "Canva Native Applications" }, { "name": "*.canva.cn", "asset_type": "website", "location": null, "group": "Canva China" }, { "name": "*.canva-apps.cn", "asset_type": "website", "location": null, "group": "Canva China" }, { "name": "Leaked Credentials and Secrets (Canva Employee/Contractor)", "asset_type": "other", "location": null, "group": "Leaked Credentials and Secrets" }, { "name": "Leaked Credentials and Secrets (Canva User)", "asset_type": "other", "location": null, "group": "Leaked Credentials and Secrets" }, { "name": "3rd-Party Provider Vulnerability", "asset_type": "other", "location": null, "group": "3rd-Party Providers" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-6f8726e0d8a28ad0", "name": "Cappsule Sarl - Marketplace Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/cappsule-sarl", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:35Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/cappsule-sarl/changelog/26050e3d-e8f3-4e08-b36f-2de4196b8936.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1216988/timesheet-tracking-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216988/timesheet-tracking-for-jira?hosting=cloud&tab=overview", "group": "In-scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1235502/chart-factory-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235502/chart-factory-for-jira?hosting=cloud&tab=overview", "group": "In-scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-4ae01efe77d11193", "name": "Cash App", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/cashapp", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $18,000", "reward_min": "$100", "reward_max": "$18,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:36Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/cashapp/changelog/73ca7ddf-de6c-437a-8e3f-43a77efa9e3a.json" ], "in_scope": [ { "name": "███████████████████████████████████", "asset_type": "ios", "location": null, "group": "████████████████" }, { "name": "███████████████████████████████████████", "asset_type": "android", "location": null, "group": "████████████████" }, { "name": "██████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "█████████████████", "asset_type": "website", "location": null, "group": "████████████████" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-b93ed611507ffd78", "name": "Catapult Labs Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/catapultlabs", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:37Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/catapultlabs/changelog/1be53a7e-8f4e-4d0e-b583-bd3fc07421dd.json" ], "in_scope": [ { "name": "Scrum Poker Estimates for Confluence - Cloud - https://marketplace.atlassian.com/apps/1215875/scrum-poker-estimates-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215875/scrum-poker-estimates-for-confluence?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Scrum Poker Estimates for Jira - Cloud - https://marketplace.atlassian.com/apps/1218960/scrum-poker-estimates-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218960/scrum-poker-estimates-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Agile Retrospectives for Jira - Cloud https://marketplace.atlassian.com/apps/1218860/agile-retrospectives-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218860/agile-retrospectives-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Agile Retrospectives for Jira - DC- https://marketplace.atlassian.com/apps/1218860/agile-retrospectives-for-jira?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218860/agile-retrospectives-for-jira?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "Agile Retrospectives for Confluence - Cloud - https://marketplace.atlassian.com/apps/1216054/agile-retrospectives-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216054/agile-retrospectives-for-confluence?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "Agile Retrospectives for Confluence - DC - https://marketplace.atlassian.com/apps/1216054/agile-retrospectives-for-confluence?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216054/agile-retrospectives-for-confluence?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "StandBot - Slack stand-up bot for Jira - Cloud - https://marketplace.atlassian.com/apps/1217825/standbot-slack-stand-up-bot-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217825/standbot-slack-stand-up-bot-for-jira?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "TeamPulse - Health checks for Jira - Cloud - https://marketplace.atlassian.com/apps/1227873/teampulse-health-checks-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227873/teampulse-health-checks-for-jira?tab=overview&hosting=cloud", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-8820163c04c73d60", "name": "celix Solutions GmbH Marketplace Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/celix-solutions-market", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:38Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/celix-solutions-market/changelog/19dcfd86-4f8c-478a-9d4d-e0c0ea4312e1.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/37658/column-order-gadget-plugin?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/37658/column-order-gadget-plugin?hosting=cloud&tab=overview", "group": "In Scope Target" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-3d5e38383524336c", "name": "Centers for Medicare & Medicaid Services - Public Bug Bounty Program 2026", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/cms-bbpublic", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,000", "reward_min": "$250", "reward_max": "$7,000", "scope_rank": 2, "access_status": "open", "industry": null, "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 2, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:39Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/cms-bbpublic/changelog/ed4ad48a-148c-462f-84af-0356fb47ffd1.json" ], "in_scope": [ { "name": "████████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "███████████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "███████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "█████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "███████████████████████████", "asset_type": "website", "location": null, "group": "████████████████" } ], "out_of_scope": [ { "name": "████████████████████████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████" }, { "name": "██████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "2 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-f2ebabd48ecc0d94", "name": "Certinia (formerly FinancialForce)", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/financialforce", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:40Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/financialforce/changelog/b69ed633-de6a-40f8-9636-86b963afa267.json" ], "in_scope": [ { "name": "*.financialforce.com", "asset_type": "website", "location": "https://financialforce.com", "group": "In Scope Targets" }, { "name": "*.certinia.com", "asset_type": "website", "location": "https://*.certinia.com", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "gslink.financialforce.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-8964c1e6392548d2", "name": "Chime Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/chime", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $20,000", "reward_min": "$50", "reward_max": "$20,000", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:41Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/chime/changelog/2a22afbc-7959-4be1-ad47-054ecc6db7d6.json" ], "in_scope": [ { "name": "All Chime Assets", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "*.chimepayments.com", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "*.chime.com", "asset_type": "website", "location": "https://*.chime.com", "group": "Primary Targets" }, { "name": "*.1debit.com", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "*.chimecard.com", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "*.chmfin.com", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "*.chimebank.com", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "www.chime.com", "asset_type": "website", "location": "https://www.chime.com", "group": "Primary Targets" }, { "name": "app.chime.com", "asset_type": "website", "location": "https://app.chime.com", "group": "Primary Targets" }, { "name": "Chime - Android App (Prod)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.onedebit.chime", "group": "Primary Targets" }, { "name": "Chime - iOS App (Prod)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/chime-mobile-banking/id836215269", "group": "Primary Targets" }, { "name": "Chime - Android App (Beta)", "asset_type": "android", "location": "https://drive.google.com/file/d/17IX06JcI2Nn7hbg9kDps5iK6oVi9U71O/view?usp=sharing", "group": "Primary Targets" }, { "name": "Enrollment - (QA)", "asset_type": "website", "location": "http://member-qa.chime.com/enroll", "group": "Primary Targets" }, { "name": "Sign In - (QA)", "asset_type": "website", "location": "https://app-qa.chime.com/login", "group": "Primary Targets" }, { "name": "*.saltlabs.com", "asset_type": "website", "location": null, "group": "Secondary Targets" }, { "name": "app.saltlabs.com", "asset_type": "website", "location": "https://app.saltlabs.com/", "group": "Secondary Targets" }, { "name": "Salt Labs - Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.saltlabs.app", "group": "Secondary Targets" }, { "name": "Salt Labs - iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/salt-work-and-get-rewarded/id1668462142", "group": "Secondary Targets" }, { "name": "Salt Labs - Staging Environment", "asset_type": "website", "location": "https://app.staging.saltlabs.com/", "group": "Secondary Targets" } ], "out_of_scope": [ { "name": "Non Chime Owned Assets (see list above)", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "chime.financial", "asset_type": "website", "location": "https://chime.financial", "group": "Out of Scope" }, { "name": "chimescholars.org", "asset_type": "website", "location": "https://chimescholars.org", "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-3a8e20018e52789b", "name": "Chipotle Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/chipotle-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 3, "access_status": "open", "industry": "Hospitality", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:42Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/chipotle-mbb-og/changelog/1015a359-fa2e-44de-9caf-90a0a0e02b96.json" ], "in_scope": [ { "name": "https://www.chipotle.com", "asset_type": "website", "location": "https://www.chipotle.com", "group": "In Scope" }, { "name": "https://www.chipotle.co.uk", "asset_type": "website", "location": "https://www.chipotle.co.uk", "group": "In Scope" }, { "name": "https://catering.chipotle.com", "asset_type": "website", "location": "https://catering.chipotle.com", "group": "In Scope" }, { "name": "Publicly accessible APIs", "asset_type": "api", "location": "https://services.chipotle.com", "group": "In Scope" }, { "name": "Chipotle Mexican Grill Mobile (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/chipotle-fresh-food/id327228455", "group": "In Scope" }, { "name": "Chipotle Mexican Grill Mobile (Android)", "asset_type": "android", "location": "https://play.google.com/store/search?q=chipotle+mexican+grill&c=apps", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-6f0759ee73806420", "name": "Cisco Networking", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/cisconetworking", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $10,000", "reward_min": "$100", "reward_max": "$10,000", "scope_rank": 4, "access_status": "open", "industry": "Electronics", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:43Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/cisconetworking/changelog/8b2463ab-810e-4557-ae0c-b91b9c9ec379.json" ], "in_scope": [ { "name": "*.meraki.com", "asset_type": "website", "location": null, "group": "Cisco Meraki Dashboard Platform Targets" }, { "name": "*.ikarem.io", "asset_type": "website", "location": null, "group": "Cisco Meraki Dashboard Platform Targets" }, { "name": "Cisco Meraki Systems Manager", "asset_type": "other", "location": null, "group": "Cisco Meraki Dashboard Platform Targets" }, { "name": "*.network-auth.com", "asset_type": "website", "location": null, "group": "Cisco Meraki Dashboard Platform Targets" }, { "name": "Cisco Meraki Dashboard Mobile Application (iOS and Android)", "asset_type": "ios", "location": null, "group": "Cisco Meraki Dashboard Platform Targets" }, { "name": "Cisco Campus Gateways", "asset_type": "hardware", "location": null, "group": "Cisco Meraki Devices (Hardware & Firmware)" }, { "name": "Cisco Catalyst 9200L Series Switches (Cloud-Managed)", "asset_type": "hardware", "location": null, "group": "Cisco Meraki Devices (Hardware & Firmware)" }, { "name": "Cisco Meraki MX & Z Series Security Appliances (Including vMX)", "asset_type": "hardware", "location": null, "group": "Cisco Meraki Devices (Hardware & Firmware)" }, { "name": "Cisco Meraki MS Switches", "asset_type": "hardware", "location": null, "group": "Cisco Meraki Devices (Hardware & Firmware)" }, { "name": "Cisco Meraki MR Access Points", "asset_type": "hardware", "location": null, "group": "Cisco Meraki Devices (Hardware & Firmware)" }, { "name": "Cisco Meraki MV Smart Cameras", "asset_type": "hardware", "location": null, "group": "Cisco Meraki Devices (Hardware & Firmware)" }, { "name": "Cisco Meraki MG Fixed Wireless Access Devices", "asset_type": "hardware", "location": null, "group": "Cisco Meraki Devices (Hardware & Firmware)" } ], "out_of_scope": [ { "name": "merakipartners.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "developers.meraki.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "smhelp.meraki.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "community.meraki.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "community-staging.meraki.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.cisco.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "meraki.cisco.com/form/contact", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Customer API Keys", "asset_type": "api", "location": null, "group": "Out of Scope" }, { "name": "Meraki MC Phones", "asset_type": "hardware", "location": null, "group": "Out of Scope" }, { "name": "documentation.meraki.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.workflows.meraki.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-50d13b66eceaf49d", "name": "Cisco ThousandEyes Vulnerability Hunting aka Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/thousandeyes-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $4,500", "reward_min": "$200", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:44Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/thousandeyes-og/changelog/8b9f0f91-371b-4297-931e-47ca45c06879.json" ], "in_scope": [ { "name": "https://api.thousandeyes.com/", "asset_type": "api", "location": null, "group": "ThousandEyes Enterprise Agent" }, { "name": "https://app.thousandeyes.com/", "asset_type": "website", "location": "https://app.thousandeyes.com/", "group": "ThousandEyes Enterprise Agent" }, { "name": "https://www.thousandeyes.com/", "asset_type": "website", "location": "https://www.thousandeyes.com/", "group": "ThousandEyes Enterprise Agent" }, { "name": "ThousandEyes Enterprise Agent", "asset_type": "other", "location": null, "group": "ThousandEyes Enterprise Agent" }, { "name": "ThousandEyes Endpoint Agent", "asset_type": "other", "location": null, "group": "ThousandEyes Enterprise Agent" } ], "out_of_scope": [ { "name": "https://blog.thousandeyes.com/", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "https://app.thousandeyes.com/sfdc/community", "asset_type": "website", "location": null, "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-7c9536c01b42fb32", "name": "City of Vienna Managed Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/city-of-vienna-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $3,500", "reward_min": "Points", "reward_max": "$3,500", "scope_rank": 4, "access_status": "open", "industry": "Government", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:45Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/city-of-vienna-mbb-og/changelog/68e42953-6e69-443a-b56f-7f1f33a636ed.json" ], "in_scope": [ { "name": "www.wien.gv.at", "asset_type": "website", "location": "https://www.wien.gv.at", "group": "In scope" }, { "name": "*.wien.gv.at", "asset_type": "website", "location": "https://*.wien.gv.at", "group": "In scope" }, { "name": "*.magwien.gv.at", "asset_type": "website", "location": "https://*.magwien.gv.at", "group": "In scope" }, { "name": "www.gesundheitsverbund.at", "asset_type": "website", "location": "https://www.gesundheitsverbund.at", "group": "In scope" }, { "name": "*.gesundheitsverbund.at", "asset_type": "website", "location": "https://*.gesundheitsverbund.at", "group": "In scope" }, { "name": "*.wienkav.at", "asset_type": "website", "location": "https://*.wienkav.at", "group": "In scope" }, { "name": "www.akhwien.at", "asset_type": "website", "location": "https://www.akhwien.at", "group": "In scope" }, { "name": "*.akhwien.at", "asset_type": "website", "location": "https://*.akhwien.at", "group": "In scope" }, { "name": "stp.wien.gv.at", "asset_type": "website", "location": "https://stp.wien.gv.at", "group": "In scope" }, { "name": "wien.at", "asset_type": "website", "location": "https://wien.at", "group": "In scope" }, { "name": "*.wien.at", "asset_type": "website", "location": "https://*.wien.at", "group": "In scope" }, { "name": "FTAPI Gesundheitsverbund", "asset_type": "website", "location": "https://secumails.gesundheitsverbund.at", "group": "In scope" }, { "name": "Mein Wien", "asset_type": "website", "location": "https://mein.wien.gv.at/", "group": "In scope" }, { "name": "Mein Wien API", "asset_type": "api", "location": "https://mein.wien.gv.at/broker/api/*", "group": "In scope" }, { "name": "Wibi", "asset_type": "website", "location": "https://wibi.wien.gv.at/", "group": "In scope" }, { "name": "stadtwien.onmicrosoft.com", "asset_type": "other", "location": "https://*.stadtwien.onmicrosoft.com", "group": "In scope" }, { "name": "schulenwien.onmicrosoft.com", "asset_type": "other", "location": "https://schulenwien.onmicrosoft.com", "group": "In scope" }, { "name": "Sharepoint Online", "asset_type": "website", "location": "https://stadtwien-my.sharepoint.com/", "group": "In scope" }, { "name": "AS6720 1/2", "asset_type": "other", "location": null, "group": "In scope" }, { "name": "AS6720 2/2", "asset_type": "other", "location": null, "group": "In scope" }, { "name": "AS6720 IPv6 1/2", "asset_type": "other", "location": null, "group": "In scope" }, { "name": "AS6720 IPv6 2/2", "asset_type": "other", "location": null, "group": "In scope" }, { "name": "AS16314", "asset_type": "other", "location": null, "group": "In scope" }, { "name": "City of Vienna Google Play Apps", "asset_type": "android", "location": "https://play.google.com/store/apps/developer?id=Stadt+Wien&hl=de_AT", "group": "In scope" }, { "name": "City of Vienna iOS Apps", "asset_type": "ios", "location": "https://apps.apple.com/at/developer/stadt-wien/id858505368", "group": "In scope" } ], "out_of_scope": [ { "name": "https://www.wien.gv.at/advuew/*", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "https://*/geoserverneuogd/* (Multiple Domains)", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "https://*/agssoe/* (Multiple Domains)", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "geschichtewiki.wien.gv.at", "asset_type": "website", "location": "https://www.geschichtewiki.wien.gv.at", "group": "Out of scope" }, { "name": "https://bi.bildung-wien.gv.at/*", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "https://www.wien.gv.at/umfrage/*", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "Public Network / Veranstaltungsnetz", "asset_type": "other", "location": null, "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-67b51e12d5dcd153", "name": "ClassDojo", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/classdojo", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $2,500", "reward_min": "Points", "reward_max": "$2,500", "scope_rank": 4, "access_status": "open", "industry": "Education", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:46Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/classdojo/changelog/da7d47d3-7377-46c0-bd3a-bb231baa55a9.json" ], "in_scope": [ { "name": "IoS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/classdojo/id552602056", "group": "In Scope (Priority Targets)" }, { "name": "https://api.classdojo.com", "asset_type": "api", "location": "https://api.classdojo.com", "group": "In Scope (Priority Targets)" }, { "name": "Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.classdojo.android", "group": "In Scope (Priority Targets)" }, { "name": "https://teach.classdojo.com", "asset_type": "website", "location": "https://teach.classdojo.com", "group": "In Scope (Priority Targets)" }, { "name": "https://student.classdojo.com", "asset_type": "website", "location": "https://student.classdojo.com", "group": "In Scope (Priority Targets)" }, { "name": "https://www.classdojo.com", "asset_type": "website", "location": "https://www.classdojo.com", "group": "In Scope (Priority Targets)" }, { "name": "https://home.classdojo.com", "asset_type": "website", "location": "https://home.classdojo.com", "group": "In Scope (Priority Targets)" }, { "name": "https://dev.tutoring.classdojo.com", "asset_type": "website", "location": "https://dev.tutoring.classdojo.com", "group": "In Scope (Priority Targets)" }, { "name": "wss://ws.multiplayer.classdojo.com", "asset_type": "website", "location": "https://ws.multiplayer.classdojo.com/", "group": "In Scope (Priority Targets)" }, { "name": "https://ticket.multiplayer.classdojo.com", "asset_type": "website", "location": "https://ticket.multiplayer.classdojo.com", "group": "In Scope (Priority Targets)" }, { "name": "https://clients.multiplayer.classdojo.com/launcher/prod/latest", "asset_type": "website", "location": "https://clients.multiplayer.classdojo.com/launcher/prod/latest", "group": "In Scope (Priority Targets)" }, { "name": "https://monster-customizer.classdojo.com/cf6dfa68-1a81-4c6d-bc0b-38f3666b37d6/index.html", "asset_type": "website", "location": "https://monster-customizer.classdojo.com/cf6dfa68-1a81-4c6d-bc0b-38f3666b37d6/index.html", "group": "In Scope (Priority Targets)" }, { "name": "*.classdojo.com", "asset_type": "api", "location": null, "group": "In Scope (Discovery Targets)" }, { "name": "*.classdojo.co.uk", "asset_type": "api", "location": null, "group": "In Scope (Discovery Targets)" }, { "name": "*.doj.io", "asset_type": "api", "location": null, "group": "In Scope (Discovery Targets)" }, { "name": "*.dojo.me", "asset_type": "api", "location": null, "group": "In Scope (Discovery Targets)" } ], "out_of_scope": [ { "name": "https://shop.classdojo.com", "asset_type": "website", "location": "https://shop.classdojo.com", "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-e1059a33db2c9e9b", "name": "ClickHouse", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/clickhouse", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $2,500", "reward_min": "$50", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:47Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/clickhouse/changelog/7906d9fe-23b7-4795-b287-2beeeeea7b2a.json" ], "in_scope": [ { "name": "https://clickhou.se/bugcrowd", "asset_type": "website", "location": "https://clickhou.se/bugcrowd", "group": "ClickHouse Cloud Platform target" }, { "name": "ClickHouse Cloud environment hosted by ClickHouse", "asset_type": "other", "location": null, "group": "ClickHouse Cloud Platform target" }, { "name": "https://github.com/ClickHouse/ClickHouse", "asset_type": "other", "location": "https://github.com/ClickHouse/ClickHouse", "group": "ClickHouse OSS target" }, { "name": "https://cloud.langfuse.com/", "asset_type": "website", "location": null, "group": "Langfuse Cloud Platform " } ], "out_of_scope": [ { "name": "New support cases, Chat, Request new integration form", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Share feedback form", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Vulnerability scanners", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "learn.clickhouse.com", "asset_type": "website", "location": "https://learn.clickhouse.com/", "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-951f15c7dc3c6616", "name": "Cloudinary", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/cloudinary", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $4,000", "reward_min": "Points", "reward_max": "$4,000", "scope_rank": 1, "access_status": "open", "industry": "Cloud", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:48Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/cloudinary/changelog/746d0e2a-2a72-4fdc-a230-80e4c81abe8a.json" ], "in_scope": [ { "name": "https://cloudinary.com/console", "asset_type": "website", "location": "https://cloudinary.com/console", "group": "In Scope Targets" }, { "name": "https://api.cloudinary.com", "asset_type": "api", "location": "https://api.cloudinary.com", "group": "In Scope Targets" }, { "name": "https://res.cloudinary.com", "asset_type": "api", "location": "https://res.cloudinary.com", "group": "In Scope Targets" }, { "name": "mediaflows.cloudinary.com", "asset_type": "website", "location": "https://mediaflows.cloudinary.com/", "group": "In Scope Tier II" }, { "name": "dimensions.cloudinary.com", "asset_type": "website", "location": "https://dimensions.cloudinary.com", "group": "In Scope Tier II" } ], "out_of_scope": [ { "name": "https://support.cloudinary.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "wiki.cloudinary.com", "asset_type": "website", "location": null, "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-8187ccde65b7761d", "name": "CodeAI", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/codeorg", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $2,500", "reward_min": "Points", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Education", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:49Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/codeorg/changelog/cf6ad10a-bf27-460c-b1b1-70fb9db15319.json" ], "in_scope": [ { "name": "adhoc-bugcrowd.cdn-code.org", "asset_type": "website", "location": "https://adhoc-bugcrowd.cdn-code.org", "group": "In Scope Targets" }, { "name": "adhoc-bugcrowd-studio.cdn-code.org", "asset_type": "website", "location": "https://adhoc-bugcrowd-studio.cdn-code.org", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "hourofcode.com", "asset_type": "website", "location": "https://hourofcode.com", "group": "Out of scope" }, { "name": "advocacy.code.org", "asset_type": "website", "location": null, "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-4ab9a028fa04a7f0", "name": "codecentric AG - Marketplace Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/codecentric", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:50Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/codecentric/changelog/43fc6ac8-ccc3-4658-bc22-1b8a8c1c5772.json" ], "in_scope": [ { "name": "Issue Picker for Jira - https://marketplace.atlassian.com/apps/1227136/issue-picker-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227136/issue-picker-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-f1eb6c244ded627b", "name": "codeclou GmbH", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/codeclou", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:51Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/codeclou/changelog/27f47b90-c4e1-4743-a175-e55baa4dd3a9.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1212096/customfield-editor-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1212096/customfield-editor-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1212096/customfield-editor-for-jira?hosting=datacenter&tab=overview", "asset_type": "api", "location": "https://marketplace.atlassian.com/apps/1212096/customfield-editor-for-jira?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1211159/advanced-codeblocks-for-confluence?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211159/advanced-codeblocks-for-confluence?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1211159/advanced-codeblocks-for-confluence/version-history", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211159/advanced-codeblocks-for-confluence/version-history", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1211159/advanced-codeblocks-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211159/advanced-codeblocks-for-confluence?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1212096/customfield-editor-for-jira?hosting=server&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1212096/customfield-editor-for-jira?hosting=datacenter&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-c39a7fd84f225018", "name": "codefortynine", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/codefortynine", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:52Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/codefortynine/changelog/033b0d6c-eb3f-437f-a1ea-3037eb49445e.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1218652/deep-clone-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218652/deep-clone-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219514/merge-agent-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219514/merge-agent-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1220136/quick-filters-for-jira-dashboards?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220136/quick-filters-for-jira-dashboards?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219476/comment-custom-fields-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219476/comment-custom-fields-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1221733/external-data-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221733/external-data-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219288/comment-history-log-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219288/comment-history-log-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1215055/slack-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215055/slack-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219807/version-sync-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219807/version-sync-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1220964/snipe-it-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220964/snipe-it-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1218211/secure-google-calendar-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218211/secure-google-calendar-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219994/external-data-for-jira-fields?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219994/external-data-for-jira-fields?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1232630/external-data-for-jira-fields-extension?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1232630/external-data-for-jira-fields-extension?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1222978/dynamic-fields-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222978/dynamic-fields-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1223455/advanced-bulk-edit-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223455/advanced-bulk-edit-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1226627/prime-custom-fields-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226627/prime-custom-fields-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1230689/easy-confluence-gadget-for-jira-dashboards?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230689/easy-confluence-gadget-for-jira-dashboards?hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-9e4969776b2e92ec", "name": "CoinDesk Data - Data API", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/CCData-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,500", "reward_min": "$250", "reward_max": "$7,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:53Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/CCData-mbb-og/changelog/4750c0c7-8f36-4a1c-ac18-49768252439b.json" ], "in_scope": [ { "name": "CoinDesk Data - Data API", "asset_type": "api", "location": "http://data-api.coindesk.com/", "group": "In Scope" }, { "name": "CoinDesk Data - Tools API", "asset_type": "api", "location": "https://tools-api.cryptocompare.com/", "group": "In Scope" } ], "out_of_scope": [ { "name": "coindesk.com", "asset_type": "website", "location": "https://www.coindesk.com/", "group": "Out of Scope targets" }, { "name": "uat.coindesk.com", "asset_type": "website", "location": "https://uat.coindesk.com/", "group": "Out of Scope targets" }, { "name": "Production CoinDesk Events", "asset_type": "website", "location": "https://events.coindesk.com", "group": "Out of Scope targets" }, { "name": "Consensus2025 Site", "asset_type": "website", "location": "https://consensus2025.coindesk.com/", "group": "Out of Scope targets" }, { "name": "Consensus HK Site", "asset_type": "website", "location": "https://consensus-hongkong2025.coindesk.com/", "group": "Out of Scope targets" }, { "name": "data.coindesk.com", "asset_type": "website", "location": "https://data.coindesk.com/", "group": "Out of Scope targets" }, { "name": "developers.coindesk.com", "asset_type": "website", "location": "https://developers.coindesk.com", "group": "Out of Scope targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-97c6b628befd2294", "name": "CoinDesk Mobile", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/coindesk-mobile-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,500", "reward_min": "$250", "reward_max": "$7,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:54Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/coindesk-mobile-mbb-og/changelog/df351887-8b57-4dbd-9468-7f9b30554b69.json" ], "in_scope": [ { "name": "iOS app - https://apps.apple.com/us/app/coindesk-crypto-bitcoin-news/id6502816903", "asset_type": "ios", "location": "https://apps.apple.com/us/app/coindesk-crypto-bitcoin-news/id6502816903", "group": "In Scope" }, { "name": "Android app - https://play.google.com/store/apps/details?id=com.coindesk.mobile", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.coindesk.mobile", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-1073ae037a9090fb", "name": "CoinDesk.com", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/coindesk-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,500", "reward_min": "$250", "reward_max": "$7,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:55Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/coindesk-mbb-og/changelog/f0f1c1b5-8359-48c8-be2c-d1538b97c4e5.json" ], "in_scope": [ { "name": "coindesk.com", "asset_type": "website", "location": "https://www.coindesk.com/", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "CoinDesk Indices", "asset_type": "website", "location": "https://uat.coindesk.com/indices", "group": "Out of Scope targets" }, { "name": "CoinDesk Events", "asset_type": "website", "location": "https://uat.coindesk.com/events", "group": "Out of Scope targets" }, { "name": "Production CoinDesk Events", "asset_type": "website", "location": "https://events.coindesk.com", "group": "Out of Scope targets" }, { "name": "Consensus2023 Site", "asset_type": "website", "location": "https://consensus2023.coindesk.com/", "group": "Out of Scope targets" }, { "name": "Consensus2024 Site", "asset_type": "website", "location": "https://consensus2024.coindesk.com/", "group": "Out of Scope targets" }, { "name": "Consensus2025 Site", "asset_type": "website", "location": "https://consensus2025.coindesk.com/", "group": "Out of Scope targets" }, { "name": "Consensus HK Site", "asset_type": "website", "location": "https://consensus-hongkong2025.coindesk.com/", "group": "Out of Scope targets" }, { "name": "uat.coindesk.com", "asset_type": "website", "location": "https://uat.coindesk.com/", "group": "Out of Scope targets" }, { "name": "uat.accounts.coindesk.com", "asset_type": "website", "location": "https://uat.accounts.coindesk.com", "group": "Out of Scope targets" }, { "name": "CoinDesk Staging Site", "asset_type": "website", "location": "https://staging.coindesk.com", "group": "Out of Scope targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-bceb812177a6d343", "name": "Colined", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/colined", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:56Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/colined/changelog/b8c0bf75-b6ba-4a7a-b7bd-579c296116b3.json" ], "in_scope": [ { "name": "Pivot Report - Cloud - https://marketplace.atlassian.com/apps/1215414/pivot-report?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215414/pivot-report?hosting=cloud&tab=overview", "group": "Atlassian Bug Bounty" }, { "name": "Worklogs Report - Cloud - https://marketplace.atlassian.com/apps/1216516/worklogs-report?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216516/worklogs-report?hosting=cloud&tab=overview", "group": "Atlassian Bug Bounty" }, { "name": "Worklogs Report - Data Center - https://marketplace.atlassian.com/apps/1216516/worklogs-report?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216516/worklogs-report?hosting=datacenter&tab=overview", "group": "Atlassian Bug Bounty" }, { "name": "Pivot Report - Server - https://marketplace.atlassian.com/apps/1215414/pivot-report?hosting=server&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215414/pivot-report?hosting=server&tab=overview", "group": "Atlassian Bug Bounty" }, { "name": "Worklogs Report - Server - https://marketplace.atlassian.com/apps/1216516/worklogs-report?hosting=server&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216516/worklogs-report?hosting=server&tab=overview", "group": "Atlassian Bug Bounty" }, { "name": "Pivot Report - Data Center - https://marketplace.atlassian.com/apps/1215414/pivot-report?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215414/pivot-report?hosting=datacenter&tab=overview", "group": "Atlassian Bug Bounty" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-63fc8c4f8df523ba", "name": "Comcast Xfinity Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/comcast-mbb", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $5,500", "reward_min": "$50", "reward_max": "$5,500", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 5, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:57Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/comcast-mbb/changelog/f1b3e165-6a70-418d-9df3-180f38f07907.json" ], "in_scope": [ { "name": "██████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "█████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "█████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "███████████████████████████████████████", "asset_type": "website", "location": null, "group": "█████████████████" } ], "out_of_scope": [ { "name": "█████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "██████████", "asset_type": "network", "location": null, "group": "████████████" }, { "name": "█████████████", "asset_type": "network", "location": null, "group": "████████████" }, { "name": "███████████████", "asset_type": "network", "location": null, "group": "████████████" }, { "name": "██████████████", "asset_type": "network", "location": null, "group": "████████████" }, { "name": "█████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "5 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-1ac62d06fac741a7", "name": "Comcast Xfinity Vulnerability Disclosure Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/comcastvdp", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $3,500", "reward_min": "Points", "reward_max": "$3,500", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:58Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/comcastvdp/changelog/7d76e69b-319e-4db6-a9a8-21d03297eeab.json" ], "in_scope": [ { "name": "*.sys.comcast.net", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "https://business.comcast.com/account", "asset_type": "website", "location": "https://business.comcast.com/account", "group": "Primary Targets" }, { "name": "TV - Xfinity hardware and services", "asset_type": "hardware", "location": null, "group": "Primary Targets" }, { "name": "Flex - Xfinity hardware and services", "asset_type": "hardware", "location": null, "group": "Primary Targets" }, { "name": "Voice - Hardware and service", "asset_type": "hardware", "location": null, "group": "Primary Targets" }, { "name": "Mobile Apps iOS and Android", "asset_type": "other", "location": "https://www.xfinity.com/apps", "group": "Primary Targets" } ], "out_of_scope": [ { "name": "Comcastbiz.net", "asset_type": "website", "location": "https://www.comcastbiz.net/", "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-1e4d6d7de511a779", "name": "Consensus by CoinDesk", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/consensus-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,500", "reward_min": "$250", "reward_max": "$7,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:59Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/consensus-mbb-og/changelog/6579dd80-3a93-403f-b9b1-ac5f9f9da59b.json" ], "in_scope": [ { "name": "Consensus 2026 Sandbox Site", "asset_type": "website", "location": "https://consensus2026.sandbox.events.coindesk.com/", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "uat.coindesk.com", "asset_type": "website", "location": "https://uat.coindesk.com/", "group": "Out of Scope targets" }, { "name": "CoinDesk Indices", "asset_type": "website", "location": "https://uat.coindesk.com/indices", "group": "Out of Scope targets" }, { "name": "CoinDesk Events", "asset_type": "website", "location": "https://uat.coindesk.com/events", "group": "Out of Scope targets" }, { "name": "Production CoinDesk Events", "asset_type": "website", "location": "https://events.coindesk.com", "group": "Out of Scope targets" }, { "name": "uat.accounts.coindesk.com", "asset_type": "website", "location": "https://uat.accounts.coindesk.com", "group": "Out of Scope targets" }, { "name": "Consensus HK Site", "asset_type": "website", "location": "https://consensus-hongkong2025.coindesk.com/", "group": "Out of Scope targets" }, { "name": "Consensus2023 Site", "asset_type": "website", "location": "https://consensus2023.coindesk.com/", "group": "Out of Scope targets" }, { "name": "Consensus2024 Site", "asset_type": "website", "location": "https://consensus2024.coindesk.com/", "group": "Out of Scope targets" }, { "name": "Consensus2025 Site", "asset_type": "website", "location": "https://consensus2025.coindesk.com/", "group": "Out of Scope targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-f63d7f44f611c7d9", "name": "Council on Foreign Relations", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/cfr", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $2,100", "reward_min": "$100", "reward_max": "$2,100", "scope_rank": 1, "access_status": "open", "industry": "Civic, Non-Profit and Membership Groups", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:00Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/cfr/changelog/7235586d-d815-4169-a576-652a8ade16a1.json" ], "in_scope": [ { "name": "████████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "█████████████████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "██████████████████████████", "asset_type": "website", "location": null, "group": "████████" } ], "out_of_scope": [ { "name": "███████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "██████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-0ecaa506b3c39bf6", "name": "Craft Coders Marketplace Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/craftcoders", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:01Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/craftcoders/changelog/5150dc25-9306-4c67-8721-7a8e9b213ce7.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1223249/mailto-wiki-send-emails-to-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1223249/mailto-wiki-send-emails-to-confluence?tab=overview&hosting=server", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1223249/mailto-wiki-email-for-confluence?hosting=datacenter&tab=overview", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-e21330760c64af53", "name": "Creativas", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/creativas", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:02Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/creativas/changelog/88f1e20c-86ff-4f0f-a765-f969f4434f65.json" ], "in_scope": [ { "name": "Smart Terms for Confluence - Glossary - Cloud - https://marketplace.atlassian.com/apps/1219677/smart-terms-for-confluence-glossary?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219677/smart-terms-for-confluence-glossary?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Smart Courses for Confluence - LMS - Cloud - https://marketplace.atlassian.com/apps/1216979/smart-courses-for-confluence-lms?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216979/smart-courses-for-confluence-lms?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Smart Images for Confluence- Cloud - https://marketplace.atlassian.com/apps/1225000/smart-images-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225000/smart-images-for-confluence?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Smart Tables for Confluence - Cloud - https://marketplace.atlassian.com/apps/1218080/smart-tables-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218080/smart-tables-for-confluence?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1234678/smart-terms-for-jira-glossary?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1234678/smart-terms-for-jira-glossary?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-dd7321c53dd299bf", "name": "Dell Technologies Application Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/dell-com", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $2,500", "reward_min": "$50", "reward_max": "$2,500", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:04Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/dell-com/changelog/93ea9025-907e-485e-b7a5-91709d64e741.json" ], "in_scope": [ { "name": "*.dell.com/*", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.delltechnologies.com/*", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "https://console.delltechnologies.com/nav/administration", "asset_type": "website", "location": "https://console.delltechnologies.com/nav/administration", "group": "In Scope" }, { "name": "https://console.delltechnologies.com/nav/invoice", "asset_type": "website", "location": "https://console.delltechnologies.com/nav/invoice", "group": "In Scope" }, { "name": "https://console.delltechnologies.com/nav/billing", "asset_type": "website", "location": "https://console.delltechnologies.com/nav/billing", "group": "In Scope" }, { "name": "Any Verified Dell-Controlled Endpoint (domains/IP space/etc.)", "asset_type": "other", "location": null, "group": "In Scope - No Monetary Rewards" } ], "out_of_scope": [ { "name": "https://console.delltechnologies.com/", "asset_type": "website", "location": "https://console.delltechnologies.com/ ", "group": "Out of Scope" }, { "name": "https://console.delltechnologies.com/nav/catalog", "asset_type": "website", "location": "https://console.delltechnologies.com/nav/catalog", "group": "Out of Scope" }, { "name": "https://console.delltechnologies.com/nav/support", "asset_type": "website", "location": "https://console.delltechnologies.com/nav/support", "group": "Out of Scope" }, { "name": "https://console.delltechnologies.com/nav/subscriptions", "asset_type": "website", "location": "https://console.delltechnologies.com/nav/subscriptions", "group": "Out of Scope" }, { "name": "educate.dell.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "console.dell.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "console-test.dell.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "salesproductivity.dell.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-ff6e05dc38ce5e2d", "name": "Dell Technologies' Products Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/dell-product", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $5,000", "reward_min": "$200", "reward_max": "$5,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Hardware", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:05Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/dell-product/changelog/bafce899-ed68-4708-b2dc-1c8485d69024.json" ], "in_scope": [ { "name": "█████████████████████████████████████████████████", "asset_type": "other", "location": null, "group": "█████████████████████████████████" }, { "name": "█████████████████████████████████████████████████████", "asset_type": "hardware", "location": null, "group": "███████████████████████████" } ], "out_of_scope": [ { "name": "████████████", "asset_type": "website", "location": null, "group": "█████████████████████████████████████████████" }, { "name": "████████████████████████", "asset_type": "website", "location": null, "group": "█████████████████████████████████████████████" }, { "name": "████████████████████████████████", "asset_type": "other", "location": null, "group": "█████████████████████████████████████████████" }, { "name": "████████████████", "asset_type": "other", "location": null, "group": "█████████████████████████████████████████████" }, { "name": "█████████████████████", "asset_type": "other", "location": null, "group": "█████████████████████████████████████████████" }, { "name": "███████████████████", "asset_type": "other", "location": null, "group": "█████████████████████████████████████████████" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-eef3c6de790e5363", "name": "Demo-EU-admin-PenTest-Max-4", "platform": "Bugcrowd", "program_url": "https://eu.bugcrowd.net/engagements/demo-eu-admin-pentest-max-4", "bounty_classification": "official_bounty_category_paid_unverified", "directory_card": { "publisher_category": "Public Bug Bounty", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": 1, "access_status": "open", "industry": "Automotive", "service_level": "Platform", "badge": "ends_soon", "ends_at": "2026-10-07T15:57:00.000Z", "is_external_listing": true, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://eu.bugcrowd.net/engagements/demo-eu-admin-pentest-max-4", "http_status": 403, "result": "http_403", "note": "The official public engagement page returned HTTP 403 during this review. Its policy and asset list were unavailable." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "fetch_failed", "scope_captured_at": "2026-10-03T16:03:15Z", "scope_source_urls": [], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official public engagement page returned HTTP 403 during this review. Its policy and asset list were unavailable." ], "review_flags": [ "Directory name contains demo/test wording; production-program identity needs review." ] }, { "id": "bugcrowd-32555d4b0cb5ad08", "name": "Demo-EU-admin-PublicMBB-1", "platform": "Bugcrowd", "program_url": "https://eu.bugcrowd.net/engagements/eu-public-1", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Automotive", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": true, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:07Z", "scope_source_urls": [ "https://eu.bugcrowd.net/engagements/eu-public-1/changelog/b2c34733-581a-4e16-aff0-fef8caf7f872.json" ], "in_scope": [ { "name": "Test-Target-Reward-updated", "asset_type": "ip_address", "location": "https://tracker.eu.bugcrowd.net/", "group": "Add Target Group with Rewards Pay" }, { "name": "test-target-updated-1", "asset_type": "api", "location": "https://temp-target.ai", "group": "Add Target Group with Rewards Pay" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [ "Directory name contains demo/test wording; production-program identity needs review." ] }, { "id": "bugcrowd-128c3420fe4d74c6", "name": "Demo-EU-admin-Test", "platform": "Bugcrowd", "program_url": "https://eu.bugcrowd.net/engagements/Demo-EU-admin-Test", "bounty_classification": "official_bounty_category_paid_unverified", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": 1, "access_status": "open", "industry": "Agriculture", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": true, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://eu.bugcrowd.net/engagements/Demo-EU-admin-Test", "http_status": 403, "result": "http_403", "note": "The official public engagement page returned HTTP 403 during this review. Its policy and asset list were unavailable." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "fetch_failed", "scope_captured_at": "2026-10-03T16:03:16Z", "scope_source_urls": [], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official public engagement page returned HTTP 403 during this review. Its policy and asset list were unavailable." ], "review_flags": [ "Directory name contains demo/test wording; production-program identity needs review." ] }, { "id": "bugcrowd-da2091edd60344e7", "name": "DevAcrobats", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/devacrobats-market", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:08Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/devacrobats-market/changelog/4e5f79cc-a55a-43c3-a5d4-5eeecadc9c4c.json" ], "in_scope": [ { "name": "Performance Objectives: Charts & Reports for Jira Dashboards - Cloud -- https://marketplace.atlassian.com/apps/1218655/performance-objectives-charts-reports?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218655/performance-objectives-charts-reports?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Performance Objectives: Charts & Reports for Jira Dashboards - Data Center -- https://marketplace.atlassian.com/apps/1218655/performance-objectives-charts-reports?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218655/performance-objectives-charts-reports?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "User Activity Timeline & History for Jira -- https://marketplace.atlassian.com/apps/1234873/user-activity-timeline-history-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1234873/user-activity-timeline-history-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-b8fe497412258ef7", "name": "Deview Studios Marketplace Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/deviewstudios-market", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:09Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/deviewstudios-market/changelog/4aea4a49-5f5e-4d89-a942-d82365d70899.json" ], "in_scope": [ { "name": "Issue AI Analytics for Jira - https://marketplace.atlassian.com/apps/1230009/issue-ai-analytics-for-jira-cloud-private-ai?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230009/issue-ai-analytics-for-jira-cloud-private-ai?hosting=datacenter", "group": "IN SCOPE TARGETS" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-6dc6d2585b340380", "name": "Deviniti", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/deviniti", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:10Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/deviniti/changelog/13e7b66f-ddfc-4aa7-8d34-77d8f7d6b4f2.json" ], "in_scope": [ { "name": "Issue Sync Pro - https://marketplace.atlassian.com/apps/1229958/issue-sync-lite?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229958/issue-sync-lite?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Actions for Jira Service Management - Cloud - https://marketplace.atlassian.com/apps/1213697/actions-for-jira-service-management?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1213697/actions-for-jira-service-management?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Dynamic Forms for Jira (Cloud) - https://marketplace.atlassian.com/apps/1210820/dynamic-forms-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1210820/dynamic-forms-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "My Requests Extension for Jira Service Managament - Cloud - https://marketplace.atlassian.com/apps/1219647/my-requests-extension-for-jira-service-management?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219647/my-requests-extension-for-jira-service-management?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Queues for Jira Service Management - Cloud - https://marketplace.atlassian.com/apps/1216386/queues-for-jira-service-management?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216386/queues-for-jira-service-management?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Issue Sync - Synchronization for Jira - Cloud - https://marketplace.atlassian.com/apps/1213346/issue-sync-integration-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1213346/issue-sync-integration-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Integrator for Confluence & Jira - https://marketplace.atlassian.com/apps/1224763/coji-confluence-pages-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224763/coji-confluence-pages-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Theme Extension for Jira Service Management (Cloud) - https://marketplace.atlassian.com/apps/1220300/theme-extension-for-jira-service-management?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220300/theme-extension-for-jira-service-management?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Extension for Jira Service Management (Cloud) - https://marketplace.atlassian.com/apps/1212161/extension-for-jira-service-desk?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1212161/extension-for-jira-service-desk?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Issue Templates for Jira - https://marketplace.atlassian.com/apps/1211044/issue-templates-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211044/issue-templates-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Requirements & Test Management for Jira (Cloud) - https://marketplace.atlassian.com/apps/1220294/requirements-test-management-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220294/requirements-test-management-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "AI Ticket Assistant - https://marketplace.atlassian.com/apps/1238286/ai-ticket-assistant?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1238286/ai-ticket-assistant?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "SLA Time Management - https://marketplace.atlassian.com/apps/1237787?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237787?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "Entra ID (Azure AD) Attributes Sync for Jira - https://marketplace.atlassian.com/apps/1220477/azure-ad-attributes-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220477/entra-id-azure-ad-attributes-sync-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Workflow Building Blocks for Jira | https://marketplace.atlassian.com/apps/1233642/workflow-building-blocks-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233642/workflow-building-blocks-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Procuro - Complete Procurement Management in JSM | https://marketplace.atlassian.com/apps/22817756/procuro-complete-procurement-management-in-jsm?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/22817756/procuro-complete-procurement-management-in-jsm?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-3e67db17322cc110", "name": "DevSamurai", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/devsamurai", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:11Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/devsamurai/changelog/838e4155-bb72-4603-bb0a-37dc8c549c13.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1222309/agile-user-story-mapping-board-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222309/agile-user-story-mapping-board-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1223423/teamboard-resource-management-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223423/teamboard-resource-management-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1224759/agile-scrum-planning-poker-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224759/agile-scrum-planning-poker-for-jira?hosting=cloud", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1224927/time-tracking-timesheet-cost-tracker-resource-management?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224927/time-tracking-timesheet-cost-tracker-resource-management?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1224383/agile-user-story-mapping-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224383/agile-user-story-mapping-for-confluence?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1223793/confluence-whiteboard-process-workflow-visualization?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223793/confluence-whiteboard-process-workflow-visualization?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1224087/whiteboard-process-workflow-visualization-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224087/whiteboard-process-workflow-visualization-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1221853/enterprise-social-networking-polls-votes-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221853/enterprise-social-networking-polls-votes-for-confluence?tab=overview&hosting=cloud", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1228080/agile-roadmaps-timeline-product-discovery-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228080/agile-roadmaps-timeline-product-discovery-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1228867/assetit-it-asset-management-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228867/assetit-it-asset-management-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1225654/ui-wireframes-mockup-prototype-diagrams-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225654/ui-wireframes-mockup-prototype-diagrams-for-confluence?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1226280/ui-wireframes-mockup-prototype-diagrams-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226280/ui-wireframes-mockup-prototype-diagrams-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1230085/agile-test-management-ad-hoc-test-qa-checklist-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230085/agile-test-management-ad-hoc-test-qa-checklist-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1232398/roadmaps-timeline-gantt-chart-structure-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1232398/roadmaps-timeline-gantt-chart-structure-for-confluence?tab=overview&hosting=cloud", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/1236175/spreadsheet-structure-table-gantt-chart-on-forge-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236175/spreadsheet-structure-table-gantt-chart-on-forge-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" }, { "name": "https://marketplace.atlassian.com/apps/856555290/salesforge-crm-leads-deals-customers-management-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/856555290/salesforge-crm-leads-deals-customers-management-for-jira?hosting=cloud&tab=overview", "group": "Atlassian" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-716826b305d07b6e", "name": "Digital Rose's Marketplace Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/digitalrose", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:12Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/digitalrose/changelog/cdf7cce8-f1bb-4242-9855-48672acec16f.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1221581/esign-electronic-signatures-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221581/esign-electronic-signatures-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1224071/esign-electronic-signatures-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224071/esign-electronic-signatures-for-confluence?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1228868/esign-document-management?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228868/esign-document-management?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-f0758bf93ee937f9", "name": "Directly", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/directly", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $3,000", "reward_min": "$250", "reward_max": "$3,000", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:13Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/directly/changelog/9133cdd7-eb7e-448d-b2c7-32b3dfa64720.json" ], "in_scope": [ { "name": "████████████████████████", "asset_type": "website", "location": null, "group": "█████████████████" }, { "name": "███████████████████████", "asset_type": "website", "location": null, "group": "█████████████████" }, { "name": "████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "█████████████████" } ], "out_of_scope": [ { "name": "████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████████████████████████████████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-aa77d9bfb7402d2d", "name": "Dutch Beginners ZZP Marketplace Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/dutch-beginners-market", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:14Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/dutch-beginners-market/changelog/9424177d-5040-4235-9982-95652628457f.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1220001/visualize-openapi-swagger-documentation?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220001/visualize-openapi-swagger-documentation?hosting=cloud", "group": "In Scope Target" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-16cd13d185a841c0", "name": "Easy Agile", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/easyagile", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,000", "reward_min": "$150", "reward_max": "$2,000", "scope_rank": 1, "access_status": "open", "industry": "Corporate Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:15Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/easyagile/changelog/0176ec56-21a1-4dfb-bfe3-2e5158798401.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1212078/easy-agile-user-story-maps-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212078/easy-agile-user-story-maps-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1215695/easy-agile-roadmaps-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215695/easy-agile-roadmaps-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219491/easy-agile-programs-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219491/easy-agile-programs-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Easy Agile Personas for Jira -- https://marketplace.atlassian.com/apps/1221392/easy-agile-personas-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221392/easy-agile-personas-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Review by Easy Agile -- https://marketplace.atlassian.com/apps/3443905353?hosting=cloud&tab=overviewPartner", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/3443905353?hosting=cloud&tab=overviewPartner", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-6b656e8fb33272af", "name": "eazyBI", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/eazybi", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $3,000", "reward_min": "$150", "reward_max": "$3,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:16Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/eazybi/changelog/d910ea72-d174-432c-ad2f-11df1a3b729a.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1211051/eazybi-reports-and-charts-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211051/eazybi-reports-and-charts-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1211051/eazybi-reports-and-charts-for-jira?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211051/eazybi-reports-and-charts-for-jira?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219504/eazybi-reports-and-charts-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219504/eazybi-reports-and-charts-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219504/eazybi-reports-and-charts-for-confluence?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219504/eazybi-reports-and-charts-for-confluence?hosting=datacenter", "group": "In Scope Targets" }, { "name": "docs.eazybi.com", "asset_type": "website", "location": "https://docs.eazybi.com/", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-9a22346f0a1e442c", "name": "Electroneum Legacy Blockchain: EOL", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/legacy-blockchain-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $12,000", "reward_min": "$200", "reward_max": "$12,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:17Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/legacy-blockchain-mbb-og/changelog/f40fb416-593a-4902-82eb-03b902a32c84.json" ], "in_scope": [ { "name": "Legacy Blockchain", "asset_type": "other", "location": "https://github.com/electroneum/electroneum/", "group": "In scope" }, { "name": "Legacy Block Explorer", "asset_type": "website", "location": "https://legacy-blockexplorer.electroneum.com", "group": "In scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-ff5dfe058d078681", "name": "Electroneum Smart Chain (ETN-SC) — EVM-Compatible Blockchain", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/smartchain-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $12,000", "reward_min": "$200", "reward_max": "$12,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:18Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/smartchain-mbb-og/changelog/4db6dd3f-e0bf-43cf-8835-3892423b790b.json" ], "in_scope": [ { "name": "Smartchain Blockchain", "asset_type": "other", "location": "https://github.com/electroneum/electroneum-sc/", "group": "In scope" }, { "name": "Smartchain Block Explorer", "asset_type": "website", "location": "https://blockexplorer.electroneum.com", "group": "In scope" }, { "name": "Smartchain Staging Block Explorer", "asset_type": "website", "location": "https://testnet-blockexplorer.electroneum.com", "group": "In scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-8f62ecb3002fcc00", "name": "Elementor: Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/elementor", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $4,000", "reward_min": "Points", "reward_max": "$4,000", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:19Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/elementor/changelog/e2474c76-bdfc-4277-9b48-e61b50cbffc5.json" ], "in_scope": [ { "name": "https://my.elementor.com/", "asset_type": "website", "location": "https://my.elementor.com/", "group": "Elementor Targets" }, { "name": "https://go.elementor.com/", "asset_type": "website", "location": "https://go.elementor.com/", "group": "Elementor Targets" }, { "name": "https://translate.elementor.com/", "asset_type": "website", "location": "https://translate.elementor.com/", "group": "Elementor Targets" }, { "name": "https://developers.elementor.com/", "asset_type": "website", "location": "https://developers.elementor.com/", "group": "Elementor Targets" }, { "name": "https://library.elementor.com/", "asset_type": "website", "location": "https://library.elementor.com/", "group": "Elementor Targets" }, { "name": "https://elementor.careers", "asset_type": "website", "location": "https://elementor.careers", "group": "Elementor Targets" }, { "name": "https://activitylog.io/", "asset_type": "website", "location": "http://activitylog.io/", "group": "Elementor Targets" }, { "name": "https://send2.co/", "asset_type": "website", "location": "https://send2.co/", "group": "Elementor Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-ffe1dc9834277a2d", "name": "Elements", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/elements", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:20Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/elements/changelog/0c6c1f67-df6f-4a37-9658-4169b837b443.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1212486/elements-spreadsheet-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212486/elements-spreadsheet-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/23337/elements-connect-external-data-fields?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/23337/elements-connect-external-data-fields?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1211111/elements-copy-sync-jira-issue-sync?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211111/elements-copy-sync-jira-issue-sync?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1225519/elements-publish-to-confluence-create-pages-from-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1225519/elements-publish-to-confluence-create-pages-from-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1226102/elements-publish-to-confluence-jira-helper-app?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1226102/elements-publish-to-confluence-jira-helper-app?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1229459/elements-overview-custom-display-for-related-issues?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1229459/elements-overview-custom-display-for-related-issues?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1232142/elements-connect-helper-app?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1232142/elements-connect-helper-app?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1234289/elements-pulse-customer-experience-insights-for-jsm?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1234289/elements-pulse-customer-experience-insights-for-jsm?hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-f043619331dae594", "name": "Empower Personal Wealth", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/personalcapital", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $4,000", "reward_min": "$150", "reward_max": "$4,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:21Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/personalcapital/changelog/13fe5221-e7f6-4843-8d53-9b59e2ec584b.json" ], "in_scope": [ { "name": "██████████████████████████████████", "asset_type": "website", "location": null, "group": "███████████████" } ], "out_of_scope": [ { "name": "████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███████████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-73e7cda60744ba8d", "name": "Entain Game Logic Flaws Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/entain-glf-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $6,500", "reward_min": "Points", "reward_max": "$6,500", "scope_rank": 2, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:22Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/entain-glf-mbb-og/changelog/3405453a-4ce4-4e30-ba62-ffa3af17807c.json" ], "in_scope": [ { "name": "https://casino.partycasino.com", "asset_type": "website", "location": "https://casino.partycasino.com", "group": "In Scope" }, { "name": "https://casino.bwin.com", "asset_type": "website", "location": "https://casino.bwin.com", "group": "In Scope" }, { "name": "https://casino.sportingbet.com", "asset_type": "website", "location": "https://casino.sportingbet.com", "group": "In Scope" }, { "name": "https://www.ladbrokes.com/en/games", "asset_type": "website", "location": "https://www.ladbrokes.com/en/games", "group": "In Scope" }, { "name": "https://www.coral.co.uk/en/games", "asset_type": "website", "location": "https://www.coral.co.uk/en/games", "group": "In Scope" }, { "name": "https://casino.*.betmgm.com/en/games (read \"Find a Game to test on our targets\")", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-6a2c0440a1492bfa", "name": "Entain Public Managed Bug Bounty Engagement 2024", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/entain-public-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $5,000", "reward_min": "$100", "reward_max": "$5,000", "scope_rank": 3, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:23Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/entain-public-mbb-og/changelog/5dc33ba8-650a-409f-81b7-06081b37fd7d.json" ], "in_scope": [ { "name": "Partypoker Website (and all its subdomains)", "asset_type": "website", "location": "https://www.partypoker.com", "group": "In scope targets" }, { "name": "Ladbrokes Digital (and all its subdomains)", "asset_type": "website", "location": "https://www.ladbrokes.com", "group": "In scope targets" }, { "name": "Coral Sports (and all its subdomains)", "asset_type": "website", "location": "https://www.coral.co.uk", "group": "In scope targets" }, { "name": "Gala Bingo (and all its subdomains)", "asset_type": "website", "location": "https://www.galabingo.com", "group": "In scope targets" }, { "name": "Partycasino Website (and all its subdomains)", "asset_type": "website", "location": "https://www.partycasino.com", "group": "In scope targets" }, { "name": "Bwin Website (and all its subdomains)", "asset_type": "website", "location": "https://www.bwin.com", "group": "In scope targets" }, { "name": "Partycasino APK", "asset_type": "android", "location": "http://media.itsfogo.com/media/upload/mobile/android/apk/partycasino_com.apk", "group": "In scope targets" }, { "name": "Bwin Poker-Casino iOS", "asset_type": "ios", "location": "https://apps.apple.com/gb/app/bwin-poker-and-casino-games/id410242773", "group": "In scope targets" }, { "name": "Bwin Sports iOS", "asset_type": "ios", "location": "https://apps.apple.com/gb/app/bwin-sports-betting/id393760245", "group": "In scope targets" }, { "name": "Partycasino iOS", "asset_type": "ios", "location": "https://apps.apple.com/gb/app/partycasino-play-casino-games/id818432894", "group": "In scope targets" }, { "name": "Partypoker iOS", "asset_type": "ios", "location": "https://apps.apple.com/gb/app/partypoker-texas-holdem-poker/id687740281", "group": "In scope targets" }, { "name": "Gala Casino Website (and all its subdomains)", "asset_type": "website", "location": "https://www.galacasino.com", "group": "In scope targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-2ae173bd208b838f", "name": "EPAM Systems Managed Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/epam-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $1,000", "reward_min": "$50", "reward_max": "$1,000", "scope_rank": 4, "access_status": "open", "industry": "Business Management", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:24Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/epam-mbb-og/changelog/e88a4cbf-ca2a-4076-93c0-9f76b0e26119.json" ], "in_scope": [ { "name": "*.epam.com", "asset_type": "website", "location": "https://www.epam.com/", "group": "In Scope Targets - Tier 1" }, { "name": "Subdomain takeover", "asset_type": "other", "location": "https://*.epam.com", "group": "Subdomain takeover - Tier 0" }, { "name": "*.projects.epam.com", "asset_type": "website", "location": "https://projects.epam.com", "group": "In Scope Targets - Tier 2" }, { "name": "*.lab.epam.com", "asset_type": "website", "location": "https://lab.epam.com", "group": "In Scope Targets - Tier 3" }, { "name": "*.opensource.epam.com", "asset_type": "website", "location": "https://opensource.epam.com", "group": "In Scope Targets - Tier 3" }, { "name": "*.emakina.nl", "asset_type": "website", "location": null, "group": "In Scope Targets - Tier 4" }, { "name": "*.emakina.group", "asset_type": "website", "location": null, "group": "In Scope Targets - Tier 4" }, { "name": "*.emakina.com", "asset_type": "website", "location": null, "group": "In Scope Targets - Tier 4" }, { "name": "*.emakina.ch", "asset_type": "website", "location": null, "group": "In Scope Targets - Tier 4" }, { "name": "*.emakina.fr", "asset_type": "website", "location": null, "group": "In Scope Targets - Tier 4" }, { "name": "*.emakina.us", "asset_type": "website", "location": null, "group": "In Scope Targets - Tier 4" }, { "name": "*.emakina.at", "asset_type": "website", "location": null, "group": "In Scope Targets - Tier 4" }, { "name": "open redirect at *.epam.com", "asset_type": "website", "location": null, "group": "Open redirect" }, { "name": "Open redirect at *.projects.epam.com, *.lab.epam.com, *.opensource.epam.com", "asset_type": "website", "location": null, "group": "Open redirect - Tier #1" }, { "name": "In Scope - Points only", "asset_type": "other", "location": null, "group": "In Scope - Points Only" } ], "out_of_scope": [ { "name": "ethics.epam.com", "asset_type": "website", "location": "https://ethics.epam.com/", "group": "Out of Scope Targets" }, { "name": "profile.epam.com", "asset_type": "website", "location": "https://profile.epam.com", "group": "Out of Scope Targets" }, { "name": "carbon.epam.com", "asset_type": "website", "location": "https://carbon.epam.com/", "group": "Out of Scope Targets" }, { "name": "infongen.com", "asset_type": "website", "location": "https://www.infongen.com/", "group": "Out of Scope Targets" }, { "name": "ebn.epam.com", "asset_type": "website", "location": "http://ebn.epam.com/", "group": "Out of Scope Targets" }, { "name": "solutionshub.epam.com", "asset_type": "website", "location": "https://solutionshub.epam.com/", "group": "Out of Scope Targets" }, { "name": "telescopeai.com", "asset_type": "website", "location": "https://www.telescopeai.com/", "group": "Out of Scope Targets" }, { "name": "wearecommunity.io", "asset_type": "website", "location": "https://wearecommunity.io/", "group": "Out of Scope Targets" }, { "name": "cami.lab.epam.com", "asset_type": "website", "location": "https://cami.lab.epam.com/", "group": "Out of Scope Targets" }, { "name": "ellie.lab.epam.com", "asset_type": "website", "location": "https://ellie.lab.epam.com/", "group": "Out of Scope Targets" }, { "name": "apex.lab.epam.com", "asset_type": "website", "location": "https://apex.lab.epam.com/", "group": "Out of Scope Targets" }, { "name": "investors.epam.com", "asset_type": "website", "location": "https://investors.epam.com/", "group": "Out of Scope Targets" }, { "name": "ecsd00300769.epam.com", "asset_type": "website", "location": "https://ecsd00300769.epam.com/", "group": "Out of Scope Targets" }, { "name": "display.epam.com", "asset_type": "website", "location": "https://display.epam.com/", "group": "Out of Scope Targets" }, { "name": "info.epam.com", "asset_type": "website", "location": "https://info.epam.com", "group": "Out of Scope Targets" }, { "name": "admin-ui.preship.gcp.gnrg-osdu.projects.epam.com", "asset_type": "website", "location": "https://admin-ui.preship.gcp.gnrg-osdu.projects.epam.com", "group": "Out of Scope Targets" }, { "name": "support.epam.com/", "asset_type": "website", "location": "https://support.epam.com/", "group": "Out of Scope Targets" }, { "name": "customersupport.epam.com", "asset_type": "website", "location": "https://customersupport.epam.com/", "group": "Out of Scope Targets" }, { "name": "supportnow.epam.com", "asset_type": "website", "location": "https://supportnow.epam.com/", "group": "Out of Scope Targets" }, { "name": "anywhere.epam.com", "asset_type": "website", "location": "https://anywhere.epam.com/", "group": "Out of Scope Targets" }, { "name": "*.buddybot.lab.epam.com", "asset_type": "website", "location": "https://*buddybot.lab.epam.com", "group": "Out of Scope Targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-f8d74f40a467df84", "name": "eToro Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/etoro-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $15,000", "reward_min": "$100", "reward_max": "$15,000", "scope_rank": 3, "access_status": "open", "industry": "Finance", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:25Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/etoro-mbb-og/changelog/9d02978a-c82f-4cbd-9af6-34d75b580305.json" ], "in_scope": [ { "name": "*.etoro.com", "asset_type": "website", "location": "https://*.etoro.com", "group": "In Scope" }, { "name": "io.getdelta.ios", "asset_type": "ios", "location": "https://io.getdelta.ios", "group": "In Scope" }, { "name": "io.getdelta.android", "asset_type": "android", "location": "https://io.getdelta.android", "group": "In Scope" }, { "name": "etoropartners.com", "asset_type": "website", "location": "https://etoropartners.com", "group": "In Scope" }, { "name": "delta.app", "asset_type": "website", "location": "https://delta.app", "group": "In Scope" }, { "name": "com.etoro.wallet", "asset_type": "other", "location": "https://com.etoro.wallet", "group": "In Scope" }, { "name": "com.etoro.openbook", "asset_type": "other", "location": "https://com.etoro.openbook", "group": "In Scope" }, { "name": "etorox.com", "asset_type": "website", "location": "https://etorox.com", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-54bca0206aadb710", "name": "Etsy", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/etsy", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $10,000", "reward_min": "$50", "reward_max": "$10,000", "scope_rank": 4, "access_status": "open", "industry": "eCommerce", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:26Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/etsy/changelog/4ab5bb40-ae5d-41de-a87e-56dfc61a7a11.json" ], "in_scope": [ { "name": "www.etsy.com", "asset_type": "website", "location": "https://www.etsy.com", "group": "In-Scope Targets - Tier 1" }, { "name": "Etsy Mobile Application (Android)", "asset_type": "android", "location": "https://www.etsy.com/mobile", "group": "In-Scope Targets - Tier 1" }, { "name": "Etsy Mobile Application (iPhone)", "asset_type": "ios", "location": "https://www.etsy.com/mobile", "group": "In-Scope Targets - Tier 1" }, { "name": "Etsy API (see documentation below)", "asset_type": "api", "location": "https://www.etsy.com/developers/documentation/getting_started/api_basics", "group": "In-Scope Targets - Tier 1" }, { "name": "etsypayments.com", "asset_type": "other", "location": "https://etsypayments.com", "group": "In-Scope Targets - Tier 1" }, { "name": "blog.etsy.com", "asset_type": "website", "location": "https://blog.etsy.com", "group": "In Scope " }, { "name": "careers.etsy.com", "asset_type": "website", "location": "https://careers.etsy.com", "group": "In Scope " }, { "name": "help.etsy.com", "asset_type": "website", "location": "https://help.etsy.com", "group": "In Scope " }, { "name": "community.etsy.com", "asset_type": "website", "location": "https://community.etsy.com", "group": "In Scope " }, { "name": "*.etsy.com", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [ { "name": "icht.etsysecure.com", "asset_type": "api", "location": null, "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-0deaf756ac57137f", "name": "EU-Automation-Test-Regression-Engagement1-B", "platform": "Bugcrowd", "program_url": "https://eu.bugcrowd.net/engagements/eu-automation-test-regression-engagement1-b", "bounty_classification": "official_bounty_category_paid_unverified", "directory_card": { "publisher_category": "Public Bug Bounty", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": 1, "access_status": "open", "industry": "Banking", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": true, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://eu.bugcrowd.net/engagements/eu-automation-test-regression-engagement1-b", "http_status": 200, "result": "empty_published_table", "note": "The official engagement page was available, but its public brief published zero scope groups and zero target rows. Policy prose may still define or limit scope; no asset row was inferred." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "no_published_assets", "scope_captured_at": "2026-10-03T16:03:18Z", "scope_source_urls": [ "https://eu.bugcrowd.net/engagements/eu-automation-test-regression-engagement1-b/changelog/ad9e1e6c-dbcb-477d-ada7-e108739ebf4e.json" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official engagement page was available, but its public brief published zero scope groups and zero target rows. Policy prose may still define or limit scope; no asset row was inferred." ], "review_flags": [ "Directory name contains demo/test wording; production-program identity needs review." ] }, { "id": "bugcrowd-eb00ad17166ce3df", "name": "Felix Health Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/felix-health-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Healthcare", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:27Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/felix-health-mbb-og/changelog/fe9726ec-9264-49e8-9fbf-2bb7e7439542.json" ], "in_scope": [ { "name": "bugcrowd.charm.felixforus.ca", "asset_type": "website", "location": "https://bugcrowd.charm.felixforus.ca/home", "group": "In Scope" }, { "name": "bugcrowd.lucky.felixforus.ca", "asset_type": "website", "location": "https://bugcrowd.lucky.felixforus.ca", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-06a86c85056853bb", "name": "FindOut InfoVis AB - Marketplace Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/FindOut-infovis", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:28Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/FindOut-infovis/changelog/4dce2986-be9e-4bca-afee-c193c7b4a794.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1218391/dependency-map-for-jira-link-viewer?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218391/dependency-map-for-jira-link-viewer?hosting=cloud", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-bce5cf8477e65834", "name": "Fireblocks MPC Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/fireblocks-mbb-og2", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $150,000", "reward_min": "$200", "reward_max": "$150,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:29Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/fireblocks-mbb-og2/changelog/11ef7ff2-db1e-4c0d-90b6-b530d08857b7.json" ], "in_scope": [ { "name": "github.com/fireblocks/mpc-lib", "asset_type": "other", "location": "https://github.com/fireblocks/mpc-lib", "group": "In scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-312ee9d47934737a", "name": "Fireblocks Web Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/fireblocks-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$20 - $12,000", "reward_min": "$20", "reward_max": "$12,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:30Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/fireblocks-mbb-og/changelog/a035263c-3b03-4e81-b159-75026dd0a2fd.json" ], "in_scope": [ { "name": "sb-console-api.fireblocks.io", "asset_type": "website", "location": "https://sb-console-api.fireblocks.io", "group": "In scope" }, { "name": "sb-mobile-api.fireblocks.io", "asset_type": "website", "location": "https://sb-mobile-api.fireblocks.io", "group": "In scope" }, { "name": "sandbox-api.fireblocks.io", "asset_type": "website", "location": "https://sandbox-api.fireblocks.io", "group": "In scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-69a99191f14ee3a5", "name": "FIS", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/fis", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $20,000", "reward_min": "Points", "reward_max": "$20,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:31Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/fis/changelog/94ae44bf-701a-47f9-b1cc-052c0b8db3d5.json" ], "in_scope": [ { "name": "Any FIS asset is in scope", "asset_type": "website", "location": null, "group": "In scope" }, { "name": "https://www.tdfitloan.com/#!/", "asset_type": "website", "location": null, "group": "Additional in scope" } ], "out_of_scope": [ { "name": "Reference above out of scope targets", "asset_type": "website", "location": "https://apuat-aaa.fisglobal.com", "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-04c136f0fed35c86", "name": "Fivetran", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/fivetran-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $7,500", "reward_min": "Points", "reward_max": "$7,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:33Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/fivetran-mbb-og/changelog/c2b5060d-5f00-4a6d-9af7-77c90fc6fe07.json" ], "in_scope": [ { "name": "*.fivetran.com", "asset_type": "website", "location": "https://fivetran.com/login", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "Any internal, staging, or development services.", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Social engineering against Fivetran Support or Fivetran Employees", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "*.db.fivetran.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "testing-datalake.fivetran.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "shop.fivetran.com", "asset_type": "website", "location": "https://shop.fivetran.com", "group": "Out of Scope" }, { "name": "status.fivetran.com", "asset_type": "website", "location": "https://status.fivetran.com/", "group": "Out of Scope" }, { "name": "support.fivetran.com", "asset_type": "website", "location": "https://support.fivetran.com", "group": "Out of Scope" }, { "name": "community-stage.fivetran.com", "asset_type": "website", "location": "https://community-stage.fivetran.com", "group": "Out of Scope" }, { "name": "trust.fivetran.com", "asset_type": "website", "location": "https://trust.fivetran.com", "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-638d126afb3bedf7", "name": "Flourish", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/flourish", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $6,000", "reward_min": "$100", "reward_max": "$6,000", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:34Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/flourish/changelog/2496a291-97b5-409d-b340-61c25f08f287.json" ], "in_scope": [ { "name": "flo.uri.sh", "asset_type": "website", "location": "https://flo.uri.sh", "group": "In Scope Targets" }, { "name": "*.flourish.studio", "asset_type": "website", "location": "https://flourish.studio/", "group": "In Scope Targets" }, { "name": "*.xyzbmojn.net", "asset_type": "website", "location": "https://xyzbmojn.net/", "group": "In Scope Targets" }, { "name": "flourish-user-templates.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "flourish-user-preview.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.kiln.it", "asset_type": "website", "location": "https://*.kiln.it", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "training.flourish.studio", "asset_type": "website", "location": "https://training.flourish.studio", "group": "Out of Scope Targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-b9892d7a0b4c36ca", "name": "Gearset: Managed Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/gearset-mbb", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $6,000", "reward_min": "$200", "reward_max": "$6,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:35Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/gearset-mbb/changelog/43036e48-9fc0-4731-9cc9-80e31f4ebd5b.json" ], "in_scope": [ { "name": "*.staging.gearset.com", "asset_type": "website", "location": "https://staging.gearset.com/", "group": "Gearset Staging" }, { "name": "staging-api.gearset.com", "asset_type": "api", "location": "https://staging.gearset.com/", "group": "Gearset Public API" }, { "name": "hipaa.staging.gearset.com", "asset_type": "website", "location": "https://hipaa.staging.gearset.com/", "group": "HIPAA Gearset Staging" }, { "name": "staging.claytonapp.com", "asset_type": "website", "location": "https://staging.claytonapp.com", "group": "Clayton Staging" }, { "name": "staging.claytonapp.com/api", "asset_type": "api", "location": "https://staging.claytonapp.com/api", "group": "Clayton Public API" } ], "out_of_scope": [ { "name": "api.gearset.com", "asset_type": "api", "location": null, "group": "Out of scope targets" }, { "name": "app.gearset.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "us.app.gearset.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "eu.app.gearset.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "ap.app.gearest.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "gearset.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "app.clayton.io", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "getclayton.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "api.clayton.io", "asset_type": "api", "location": null, "group": "Out of scope targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-9fdf091e932f025e", "name": "Glassdoor Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/glassdoor-ogbb", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $7,000", "reward_min": "$50", "reward_max": "$7,000", "scope_rank": 4, "access_status": "open", "industry": "Consumer Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:36Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/glassdoor-ogbb/changelog/f2e7ea74-4b97-483d-9a51-d0da7e7f4b11.json" ], "in_scope": [ { "name": "https://api.glassdoor.com/*", "asset_type": "api", "location": null, "group": "In Scope " }, { "name": "https://www.glassdoor.com/*", "asset_type": "api", "location": null, "group": "In Scope " }, { "name": "https://www.glassdoor.com/member/*", "asset_type": "api", "location": null, "group": "In Scope " }, { "name": "https://www.glassdoor.com/employers/ec/*", "asset_type": "api", "location": null, "group": "In Scope " }, { "name": "https://www.glassdoor.com/Job/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://www.glassdoor.com/Reviews/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://www.glassdoor.com/Compare/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://www.glassdoor.com/mz-survey/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://www.glassdoor.com/Salaries/*", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "Fishbowl", "asset_type": "other", "location": "https://www.fishbowlapp.com/", "group": "In Scope " }, { "name": "https://api.fishbowlapp.com/*", "asset_type": "api", "location": null, "group": "In Scope " }, { "name": "Fishbowl - Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.fishbowlmedia.fishbowl&hl=en_US", "group": "In Scope " }, { "name": "Fishbowl - iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/fishbowl-professional-network/id1005070636", "group": "In Scope " }, { "name": "Glassdoor iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/glassdoor-jobs-careers/id589698942", "group": "In Scope " }, { "name": "Glassdoor Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.glassdoor.app&hl=en_US", "group": "In Scope " } ], "out_of_scope": [ { "name": "Glassdoor Help Page", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "Glassdoor Design Page", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "Glassdoor Blog", "asset_type": "other", "location": null, "group": "Out of Scope " } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-5de9dedca7278187", "name": "Glean Technologies Public Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/glean-technologies-public", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $5,000", "reward_min": "$200", "reward_max": "$5,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:37Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/glean-technologies-public/changelog/b781e690-8e42-445a-ba6f-afc5496f65de.json" ], "in_scope": [ { "name": "Frontend portal: https://app.glean.com/login?qe=https://bug-bounty-be.glean.com&skip_to_sso=1", "asset_type": "website", "location": "https://app.glean.com/login?qe=https://bug-bounty-be.glean.com&skip_to_sso=1", "group": "In Scope Targets" }, { "name": "Backend endpoint: bug-bounty-be.glean.com", "asset_type": "api", "location": null, "group": "In Scope Targets" }, { "name": "Scio Search Crawler for Confluence- https://marketplace.atlassian.com/apps/1222714/scio-search-crawler-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222714/scio-search-crawler-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Scio Search Crawler for Jira- https://marketplace.atlassian.com/apps/1222715/scio-search-crawler-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222715/scio-search-crawler-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Glean Activity Plugin for Jira Cloud- https://marketplace.atlassian.com/apps/1229003/glean-activity-plugin-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229003/glean-activity-plugin-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-9225c8048a5a7d35", "name": "Gliffy", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/gliffy", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:38Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/gliffy/changelog/44ddee77-bef3-45d0-83b0-50f1016caa08.json" ], "in_scope": [ { "name": "Gliffy Diagrams for Confluence - Cloud - https://marketplace.atlassian.com/apps/254/gliffy-diagrams-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/254/gliffy-diagrams-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Gliffy Diagrams | Zero Egress & Isolated Cloud-Ready - https://marketplace.atlassian.com/apps/3076252818/gliffy-zero-egress-compliance-ready-diagramming?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/3076252818/gliffy-zero-egress-compliance-ready-diagramming?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-d5558fc65cbedab8", "name": "HeroCoders Apps", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/herocoders", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:39Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/herocoders/changelog/c8984203-6b59-487a-8b83-4ac04b49fec5.json" ], "in_scope": [ { "name": "Checklists for Jira (Free) by HeroCoders - https://marketplace.atlassian.com/apps/1220209/checklists-for-jira-free-by-herocoders?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220209/checklists-for-jira-free-by-herocoders?hosting=cloud", "group": "In Scope Targets" }, { "name": "Checklists for Jira (Pro) by HeroCoders - https://marketplace.atlassian.com/apps/1213231/checklists-for-jira-pro-by-herocoders?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1213231/checklists-for-jira-pro-by-herocoders?hosting=cloud", "group": "In Scope Targets" }, { "name": "Clockwork Pro for Jira Time Tracking and Timesheets - https://marketplace.atlassian.com/apps/1219213/clockwork-pro-for-jira-time-tracking-and-timesheets?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219213/clockwork-pro-for-jira-time-tracking-and-timesheets?hosting=cloud", "group": "In Scope Targets" }, { "name": "Clockwork Lite Time Tracker - https://marketplace.atlassian.com/apps/1220750/clockwork-lite-time-tracker-time-tracking-and-timesheets?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220750/clockwork-lite-time-tracker-time-tracking-and-timesheets?hosting=cloud", "group": "In Scope Targets" }, { "name": "Acceptance Criteria for Jira (Free) - https://marketplace.atlassian.com/apps/1223139/acceptance-criteria-for-jira-free?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223139/acceptance-criteria-for-jira-free?hosting=cloud", "group": "In Scope Targets" }, { "name": "Portfolio by HeroCoders - https://marketplace.atlassian.com/apps/1220137/portfolio-by-herocoders-structure-ppm-for-jira-capacity?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220137/portfolio-by-herocoders-structure-ppm-for-jira-capacity?tab=overview&hosting=cloud", "group": "In Scope Targets" }, { "name": "Checklists for Jira (Enterprise) by HeroCoders - https://marketplace.atlassian.com/apps/1211562/checklists-for-jira-enterprise-by-herocoders?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211562/checklists-for-jira-enterprise-by-herocoders?tab=overview&hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-836a00e24d71dc8c", "name": "HostGator LATAM Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/hostgator-latam-bb", "bounty_classification": "verified_policy", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $2,500", "reward_min": "Points", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "hostgator-latam-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:05Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/hostgator-latam-bb/changelog/e57fb9c2-18c7-4440-891f-d7fd8857088c.json" ], "in_scope": [ { "name": "www.hostgator.com.br/", "asset_type": "website", "location": "https://www.hostgator.com.br/", "group": "In Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://financeiro.hostgator.com.br", "asset_type": "website", "location": "https://financeiro.hostgator.com.br", "group": "In Scope", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "https://carrinho.hostgator.com.br/", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "academy.hostgator.com", "asset_type": "website", "location": "https://www.academy.hostgator.com", "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.hostgator.com.br", "asset_type": "website", "location": "https://www.hostgator.com.br", "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.hostgator.mx", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] } ], "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ], "review_flags": [] }, { "id": "bugcrowd-91c555e8b0eaab53", "name": "HotDoc", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/hotdoc", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $8,000", "reward_min": "$50", "reward_max": "$8,000", "scope_rank": 1, "access_status": "open", "industry": "Healthcare", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:40Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/hotdoc/changelog/ca45da66-501a-492a-986f-9e34c130e1c5.json" ], "in_scope": [ { "name": "█████████████████████████████████████████", "asset_type": "website", "location": null, "group": "███████" }, { "name": "██████████████████████████████████", "asset_type": "api", "location": null, "group": "███████" }, { "name": "███████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "███████" } ], "out_of_scope": [ { "name": "███████████", "asset_type": "android", "location": null, "group": "████████████" }, { "name": "███████", "asset_type": "ios", "location": null, "group": "████████████" }, { "name": "██████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-b64daeba96f57b22", "name": "HPE Networking Product Public Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/hpe-networking-product-public", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$300 - $5,000", "reward_min": "$300", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:41Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/hpe-networking-product-public/changelog/044c5c65-a22e-46b1-9b5b-468bd951526b.json" ], "in_scope": [ { "name": "HPE Aruba Networking Wireless - AOS-10.7 and above Gateways (GW)", "asset_type": "network", "location": null, "group": "HPE Aruba Networking Target Group 1" }, { "name": "HPE Aruba Networking Wireless - AOS-10.7 and above Access Points (AP)", "asset_type": "network", "location": null, "group": "HPE Aruba Networking Target Group 1" }, { "name": "HPE Aruba Networking Central - New UI (see Scope Details)", "asset_type": "website", "location": null, "group": "HPE Aruba Networking Target Group 1" }, { "name": "ArubaOS-CX Switches", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 1" }, { "name": "HPE Aruba Networking Wireless - AOS-8 Controllers", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking Wireless - AOS-8 Instant AP (IAP)", "asset_type": "network", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking Wireless - AOS-10.4 Gateways (GW)", "asset_type": "network", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking Wireless - AOS-10.4 Access Points (AP)", "asset_type": "network", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking ClearPass Policy Manager", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking EdgeConnect SD-WAN Orchestrator", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Networking Instant On APs and supporting backend infrastructure", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking Fabric Composer", "asset_type": "network", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking NetEdit", "asset_type": "network", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking Private 5G", "asset_type": "website", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking SSE", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "HPE Aruba Networking VIA", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 2 " }, { "name": "*.central.arubanetworks.com", "asset_type": "website", "location": null, "group": "Aruba Central - Old/Original UI" }, { "name": "Aruba AirWave AMP", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 3" }, { "name": "Aruba InstantOn Switches", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Target Group 3" }, { "name": "Aruba User Experience Insight Sensors", "asset_type": "hardware", "location": null, "group": "HPE Aruba Networking Target Group 3" } ], "out_of_scope": [ { "name": "*.arubanetworks.com not in scope above - see in scope", "asset_type": "website", "location": null, "group": "HPE Aruba Networking Out of scope" }, { "name": "*.hpe.com", "asset_type": "other", "location": null, "group": "HPE Aruba Networking Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-897ec1ffd7410581", "name": "Hypixel Studios Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/hypixel-studios-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$300 - $25,000", "reward_min": "$300", "reward_max": "$25,000", "scope_rank": 3, "access_status": "open", "industry": "Games", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:42Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/hypixel-studios-mbb-og/changelog/59063ac2-273f-4c96-a0bf-2619aa6494d3.json" ], "in_scope": [ { "name": "Hypixel Public APIs", "asset_type": "api", "location": null, "group": "In Scope " }, { "name": "Hytale Game Client", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "Hytale Game Server", "asset_type": "other", "location": null, "group": "In Scope " }, { "name": "Hytale Launcher", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://accounts.hytale.com/", "asset_type": "website", "location": "https://accounts.hytale.com/login", "group": "In Scope " }, { "name": "https://store.hytale.com/", "asset_type": "website", "location": "https://store.hytale.com/", "group": "In Scope " }, { "name": "https://hytale.com/", "asset_type": "website", "location": "https://hytale.com/", "group": "In Scope " }, { "name": "3rd Party Integrations (Hytale-side issues only)", "asset_type": "website", "location": null, "group": "In Scope " }, { "name": "https://hytale.dev/", "asset_type": "website", "location": "https://hytale.dev/", "group": "In Scope " }, { "name": "http://arcanitegames.ca/", "asset_type": "website", "location": "http://arcanitegames.ca/", "group": "In Scope " } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-9a96ad03a6b5abff", "name": "Ibotta", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/ibotta", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $1,000", "reward_min": "$250", "reward_max": "$1,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:43Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/ibotta/changelog/112af3b9-e1ec-486e-855d-e5977ab90908.json" ], "in_scope": [ { "name": "Chrome Extension", "asset_type": "other", "location": "https://chrome.google.com/webstore/detail/ibotta-browser-extension/mfaedmjlefifhnhpgipjjiiekchaimpk?hl=en-US", "group": "In Scope Targets " }, { "name": "http://market.android.com/details?id=com.ibotta.android", "asset_type": "android", "location": "http://market.android.com/details?id=com.ibotta.android", "group": "In Scope Targets " }, { "name": "http://itunes.apple.com/us/app/ibotta/id559887125", "asset_type": "ios", "location": "http://itunes.apple.com/us/app/ibotta/id559887125", "group": "In Scope Targets " }, { "name": "https://content-server.ibotta.com/graphql", "asset_type": "api", "location": "https://content-server.ibotta.com/graphql", "group": "In Scope Targets " }, { "name": "https://api.ibotta.com", "asset_type": "api", "location": "https://api.ibotta.com", "group": "In Scope Targets " }, { "name": "https://api.ibops.net", "asset_type": "api", "location": "https://api.ibops.net", "group": "In Scope Targets " }, { "name": "https://api.int.ibops.net", "asset_type": "api", "location": "https://api.int.ibops.net", "group": "In Scope Targets " }, { "name": "https://api.int.ibops.net/customer-loyalty-service", "asset_type": "api", "location": "https://api.int.ibops.net/customer-loyalty-service", "group": "In Scope Targets " }, { "name": "https://api.ibops.net/ad-management", "asset_type": "api", "location": "https://api.ibops.net/ad-management", "group": "In Scope Targets " }, { "name": "Ibotta App Data & Memory", "asset_type": "other", "location": null, "group": "In Scope Targets " }, { "name": "Web v2", "asset_type": "website", "location": "https://app.ibotta.com/sign-in
", "group": "In Scope Targets " }, { "name": "http://ibotta.com", "asset_type": "website", "location": "http://ibotta.com", "group": "In Scope Targets " }, { "name": "https://backend.ibotta.com/", "asset_type": "website", "location": "https://backend.ibotta.com/", "group": "In Scope Targets " } ], "out_of_scope": [ { "name": "https://backend.ibotta.com/duplicate_receipt_moderation", "asset_type": "api", "location": null, "group": "Out of Scope Targets" }, { "name": "https://ir.ibotta.com", "asset_type": "website", "location": "https://ir.ibotta.com", "group": "Out of Scope Targets" }, { "name": "https://trust.ibotta.com", "asset_type": "website", "location": "https://trust.ibotta.com", "group": "Out of Scope Targets" }, { "name": "legal.ibotta.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*dev.ibotta.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://investors.ibotta.com/", "asset_type": "website", "location": "https://investors.ibotta.com/", "group": "Out of Scope Targets" }, { "name": "http://sampling.ibotta.com/", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-579471ac983706c3", "name": "iFood: Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/ifood-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $3,750", "reward_min": "$150", "reward_max": "$3,750", "scope_rank": 4, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:44Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/ifood-og/changelog/dfcab525-3b8b-44d9-a36d-461e837ae49a.json" ], "in_scope": [ { "name": "iFood Customer Android Application", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=br.com.brainweb.ifood&hl=pt_BR", "group": "iFood - Core Assets" }, { "name": "iFood Customer iOS Application", "asset_type": "ios", "location": "https://apps.apple.com/br/app/ifood-pedir-comida-e-mercado/id483017239", "group": "iFood - Core Assets" }, { "name": "https://www.ifood.com.br", "asset_type": "website", "location": "https://www.ifood.com.br", "group": "iFood - Core Assets" }, { "name": "https://marketplace.ifood.com.br", "asset_type": "website", "location": "https://marketplace.ifood.com.br", "group": "iFood - Core Assets" }, { "name": "Gestor de pedidos - Web ONLY", "asset_type": "website", "location": "https://gestordepedidos.ifood.com.br", "group": "iFood - Core Assets" }, { "name": "https://wsloja.ifood.com.br", "asset_type": "website", "location": "https://wsloja.ifood.com.br", "group": "iFood - Core Assets" }, { "name": "*.movilepay.com", "asset_type": "website", "location": "https://*.movilepay.com", "group": "iFood - Secondary Assets" }, { "name": "*.movilepay.com.br", "asset_type": "website", "location": "https://*.movilepay.com.br", "group": "iFood - Secondary Assets" }, { "name": "https://shop.ifood.com.br", "asset_type": "website", "location": "https://shop.ifood.com.br", "group": "iFood - Secondary Assets" }, { "name": "https://static-images.ifood.com.br", "asset_type": "website", "location": "https://static-images.ifood.com.br", "group": "iFood - Secondary Assets" }, { "name": "https://developer.ifood.com.br", "asset_type": "website", "location": "https://developer.ifood.com.br", "group": "iFood - Secondary Assets" }, { "name": "https://api.fstr.rocks", "asset_type": "api", "location": "https://api.fstr.rocks", "group": "iFood - Secondary Assets" }, { "name": "https://rc.fstr.rocks", "asset_type": "api", "location": "https://rc.fstr.rocks", "group": "iFood - Secondary Assets" }, { "name": "*.zoop.com.br", "asset_type": "website", "location": "https://www.zoop.com.br", "group": "iFood Pago - Core Assets" }, { "name": "*.zoop.ws", "asset_type": "website", "location": "https://www.zoop.ws", "group": "iFood Pago - Core Assets" }, { "name": "Minha Conta Zoop (*.minhaconta.zoop.com.br)", "asset_type": "website", "location": "https://www.minhaconta.zoop.com.br", "group": "iFood Pago - Core Assets" }, { "name": "*.dash.zoop.com.br", "asset_type": "website", "location": "https://dash.zoop.com.br/", "group": "iFood Pago - Core Assets" }, { "name": "Internet Banking (contadigital.ifoodpago.com.br/)", "asset_type": "website", "location": "https://contadigital.ifoodpago.com.br/", "group": "iFood Pago - Core Assets" }, { "name": "Conta Digital (https://play.google.com/store/apps/details?id=br.com.movilepay.banking.application&hl=pt_BR)", "asset_type": "website", "location": "https://play.google.com/store/apps/details?id=br.com.movilepay.banking.application&hl=pt_BR", "group": "iFood Pago - Core Assets" }, { "name": "Portal iFood Pago (portal.iFoodpago.com.br)", "asset_type": "website", "location": "https://portal.iFoodpago.com.br", "group": "iFood Pago - Secondary Assets" } ], "out_of_scope": [ { "name": "blog-empresas.ifood.com.br", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "blog-parceiros.ifood.com.br", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.ecomanda.com.br", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.ecomanda.app", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.allin.movilepay.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.starsoft.movilepay.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Gestor de Pedidos - Desktop Client", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "*.openfinance.ifood.com.br", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "*.openfinance.ifoodpago.com.br", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-5d4636103fc2ec73", "name": "Immutable Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/immutable", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$25 - $10,000", "reward_min": "$25", "reward_max": "$10,000", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:45Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/immutable/changelog/7b06d64c-562e-4826-accb-05c34d6c4d76.json" ], "in_scope": [ { "name": "passport.immutable.com - Passport web3 wallet", "asset_type": "website", "location": "https://passport.immutable.com/", "group": "Passport" }, { "name": "auth.immutable.com - Passport authentication backend", "asset_type": "api", "location": "https://auth.immutable.com", "group": "Passport" }, { "name": "Passport SDK", "asset_type": "other", "location": "https://github.com/immutable/ts-immutable-sdk/tree/main/packages/passport/", "group": "Passport" }, { "name": "hub.immutable.com - Developer Hub", "asset_type": "website", "location": "https://hub.immutable.com/", "group": "Developer Hub" }, { "name": "play.immutable.com Immutable Play", "asset_type": "website", "location": "https://play.immutable.com", "group": "Immutable Play" }, { "name": "https://api.immutable.com", "asset_type": "api", "location": "https://api.immutable.com", "group": "Immutable" }, { "name": "https://api.x.immutable.com/", "asset_type": "api", "location": "https://api.x.immutable.com/", "group": "Immutable" } ], "out_of_scope": [ { "name": "*.godsunchained.com", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "*.gogbackend.com", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "gogbackend.com", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "godsunchained.com", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "Anything that does not belong to Immutable", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "Any data exposure bug that are classified as Public Data such as Ethereum Wallet Address, NFT Purchase activity, or other public blockchain activity.", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "*.dev.x.immutable.com, *.sandbox.x.immutable.com, *.dev.x.immutable.com, *.sandbox.imtbl.com, *.dev.imtbl.com, *.ropsten.x.immutable.com, ropsten.imx.community (see brief for exceptions)", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "*.guildofguardians.com", "asset_type": "other", "location": null, "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-6a006f4f968cdcdc", "name": "Imperva - Thales Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/imperva-mbb", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,500", "reward_min": "$150", "reward_max": "$2,500", "scope_rank": 2, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:46Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/imperva-mbb/changelog/82c0b7ed-46ed-4de8-8b89-98c6db7d6fce.json" ], "in_scope": [ { "name": "https://*.imperva.com", "asset_type": "website", "location": "https://*.imperva.com", "group": "In Scope Targets" }, { "name": "https://*.cloudvector.com/", "asset_type": "website", "location": "https://www.cloudvector.com/", "group": "In Scope Targets" }, { "name": "https://*.incapsula.com", "asset_type": "api", "location": "https://*.incapsula.com", "group": "In Scope Targets" }, { "name": "https://supportportal.thalesgroup.com", "asset_type": "website", "location": "https://supportportal.thalesgroup.com", "group": "In Scope Targets" }, { "name": "PTaaS Reference", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "http://docs.imperva.com/", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "http://docs-be.imperva.com/", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-c4b7b45ec25b6751", "name": "Indeed", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/indeed", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $10,000", "reward_min": "$50", "reward_max": "$10,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:47Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/indeed/changelog/11945c4b-3351-46c4-8268-782f8c2bf97b.json" ], "in_scope": [ { "name": "*.indeed.com", "asset_type": "website", "location": "https://indeed.com", "group": "Primary Targets" }, { "name": "https://*.indeedflex.com", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "https://apis.indeed.com/graphql", "asset_type": "api", "location": null, "group": "Primary Targets" }, { "name": "Indeed Job Search Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.indeed.android.jobsearch", "group": "Primary Targets" }, { "name": "Indeed Job Search iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/indeed-job-search/id309735670", "group": "Primary Targets" }, { "name": "Android Indeed Flex App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.syftapp.android", "group": "Primary Targets" }, { "name": "iOS Indeed Flex App", "asset_type": "ios", "location": "https://apps.apple.com/gb/app/indeed-flex-job-search/id1013812731", "group": "Primary Targets" }, { "name": "Career Scout", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "https://*.indeed.tech", "asset_type": "website", "location": null, "group": "Secondary Targets" }, { "name": "https://*.indeed.net", "asset_type": "website", "location": null, "group": "Secondary Targets" }, { "name": "https://resume.com", "asset_type": "website", "location": "https://resume.com", "group": "Secondary Targets" }, { "name": "https://wowjobs.ca", "asset_type": "website", "location": "https://wowjobs.ca", "group": "Secondary Targets" }, { "name": "履歴書作成 (Universal Resume) iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/%E5%B1%A5%E6%AD%B4%E6%9B%B8%E4%BD%9C%E6%88%90-%E3%82%A4%E3%83%B3%E3%83%87%E3%82%A3%E3%83%BC%E3%83%89/id1484451230", "group": "Secondary Targets" }, { "name": "履歴書作成 (Universal Resume) Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.indeed.resume", "group": "Secondary Targets" }, { "name": "Indeed Connect for Employers", "asset_type": "ios", "location": "https://apps.apple.com/us/app/indeed-connect-for-employers/id6443822731", "group": "Secondary Targets" }, { "name": "Indeed Recruiter Extension (Chrome)", "asset_type": "website", "location": "https://chromewebstore.google.com/detail/indeed-recruiter-extensio/kiodpphbmnmcmnfgpnmkkhmkllnlflef", "group": "Secondary Targets" }, { "name": "Any host/web property/mobile app verified to be owned by Indeed", "asset_type": "other", "location": null, "group": "Other Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-86f5dd9cd88e551f", "name": "Infinite Athlete", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/tempusex-public-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:48Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/tempusex-public-mbb-og/changelog/0448ae65-c2f6-4519-abac-aa2dfa60d621.json" ], "in_scope": [ { "name": "https://tempus-ex.com", "asset_type": "website", "location": "https://tempus-ex.com", "group": "In Scope Targets" }, { "name": "https://docs.tempus-ex.com", "asset_type": "website", "location": "https://docs.tempus-ex.com", "group": "In Scope Targets" }, { "name": "https://github.com/tempus-ex", "asset_type": "other", "location": "https://github.com/tempus-ex", "group": "In Scope Targets" }, { "name": "https://infiniteathlete.ai", "asset_type": "website", "location": "https://infiniteathlete.ai", "group": "In Scope Targets" }, { "name": "https://platform.infiniteathlete.ai", "asset_type": "website", "location": "https://platform.infiniteathlete.ai", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-1e13e206cd2b16f2", "name": "Inprowiser Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/inprowiser", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:49Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/inprowiser/changelog/6ef6cbc8-42dc-4bf5-9436-94e6234814e4.json" ], "in_scope": [ { "name": "Capacity Tracker - Cloud - https://marketplace.atlassian.com/apps/1218151/capacity-tracker?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218151/capacity-tracker?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-254f67c60abdbd4b", "name": "Intercom", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/intercom", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$300 - $6,000", "reward_min": "$300", "reward_max": "$6,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "P1 24/7", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:50Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/intercom/changelog/07ed7406-2567-4c09-b700-f5783aea7d36.json" ], "in_scope": [ { "name": "iOS SDK", "asset_type": "ios", "location": "https://developers.intercom.com/installing-intercom/docs/about-the-sdk-ios", "group": "Default" }, { "name": "https://api.intercom.io", "asset_type": "api", "location": "https://api.intercom.com", "group": "Default" }, { "name": "https://app.intercom.com", "asset_type": "website", "location": "https://app.intercom.com", "group": "Default" }, { "name": "*.intercomassets.com / *.intercomcdn.com", "asset_type": "website", "location": null, "group": "Default" }, { "name": "https://app.intercom.io", "asset_type": "website", "location": "https://app.intercom.io/", "group": "Default" }, { "name": "Android SDK", "asset_type": "android", "location": "https://developers.intercom.com/installing-intercom/docs/about-the-sdk-android", "group": "Default" }, { "name": "https://www.intercom.com", "asset_type": "website", "location": "https://www.intercom.com/", "group": "Default" }, { "name": "mcp.intercom.com", "asset_type": "website", "location": "http://mcp.intercom.com", "group": "Default" }, { "name": "https://api-iam.intercom.io", "asset_type": "api", "location": "https://api-iam.intercom.io", "group": "Default" }, { "name": "https://*.mobile-messenger.intercom.com", "asset_type": "api", "location": "https://*.mobile-messenger.intercom.com", "group": "Default" }, { "name": "fin.ai", "asset_type": "website", "location": "https://fin.ai/", "group": "Default" }, { "name": "https://app.fin.ai/", "asset_type": "website", "location": "https://app.fin.ai/", "group": "Default" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-65fd0d2e30008d52", "name": "Internet Brands Public", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/internetbrands-public", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $2,000", "reward_min": "Points", "reward_max": "$2,000", "scope_rank": 3, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:51Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/internetbrands-public/changelog/5d8af978-978d-4a0a-87d5-2ae0ab0dc2af.json" ], "in_scope": [ { "name": "https://www.carsdirect.com", "asset_type": "website", "location": "https://www.carsdirect.com", "group": "In Scope" }, { "name": "https://pets.webmd.com", "asset_type": "website", "location": "https://pets.webmd.com", "group": "In Scope" }, { "name": "https://member.webmd.com", "asset_type": "website", "location": "https://member.webmd.com", "group": "In Scope" }, { "name": "https://www.mdedge.com", "asset_type": "website", "location": "https://www.mdedge.com", "group": "In Scope" }, { "name": "https://accounts.webmd.com", "asset_type": "website", "location": "https://accounts.webmd.com", "group": "In Scope" }, { "name": "https://powerpak.com", "asset_type": "website", "location": "https://powerpak.com", "group": "In Scope" }, { "name": "https://profreg.medscape.com", "asset_type": "website", "location": "https://profreg.medscape.com", "group": "In Scope" }, { "name": "https://www.globalacademycme.com", "asset_type": "website", "location": "https://www.globalacademycme.com", "group": "In Scope" }, { "name": "https://www.webmd.com", "asset_type": "website", "location": "https://www.webmd.com", "group": "In Scope" }, { "name": "https://login.medscape.com", "asset_type": "website", "location": "https://login.medscape.com", "group": "In Scope" }, { "name": "https://portalv2.lh360.com", "asset_type": "website", "location": "https://portalv2.lh360.com", "group": "In Scope" }, { "name": "https://www.demandforced3.com/", "asset_type": "website", "location": "https://www.demandforced3.com/", "group": "In Scope" }, { "name": "https://www.internetbrands.com", "asset_type": "other", "location": "https://www.internetbrands.com", "group": "In Scope" }, { "name": "https://ibconnect.internetbrands.com", "asset_type": "other", "location": "https://ibconnect.internetbrands.com", "group": "In Scope" }, { "name": "https://exchange.pulsepoint.com/AdminPortal/AdminDashBoard.aspx", "asset_type": "website", "location": "https://exchange.pulsepoint.com/AdminPortal/AdminDashBoard.aspx", "group": "In Scope" }, { "name": "https://life.pulsepoint.com/Buyer/#/campaign", "asset_type": "website", "location": "https://life.pulsepoint.com/Buyer/#/campaign", "group": "In Scope" }, { "name": "https://signal.pulsepoint.com/hcp365/#/dashboard/advertiser/6603/overview", "asset_type": "website", "location": "https://signal.pulsepoint.com/hcp365/#/dashboard/advertiser/6603/overview", "group": "In Scope" }, { "name": "https://life.pulsepoint.com/MediaPlanner/#/dashboard/targetview", "asset_type": "website", "location": "https://life.pulsepoint.com/MediaPlanner/#/dashboard/targetview", "group": "In Scope" }, { "name": "https://signal.pulsepoint.com/hcpexplorer/#/dashboard/eventsExplorer", "asset_type": "website", "location": "https://signal.pulsepoint.com/hcpexplorer/#/dashboard/eventsExplorer", "group": "In Scope" }, { "name": "https://life.pulsepoint.com/EngagementAudience/#/dashboard", "asset_type": "website", "location": "https://life.pulsepoint.com/EngagementAudience/#/dashboard", "group": "In Scope" }, { "name": "https://exchange.pulsepoint.com", "asset_type": "website", "location": "https://exchange.pulsepoint.com", "group": "In Scope" }, { "name": "https://lifeapi.pulsepoint.com", "asset_type": "api", "location": "https://lifeapi.pulsepoint.com", "group": "In Scope" }, { "name": "https://openapi.pulsepoint.com", "asset_type": "api", "location": "https://openapi.pulsepoint.com", "group": "In Scope" }, { "name": "https://openapitest.pulsepoint.com", "asset_type": "api", "location": "https://openapitest.pulsepoint.com", "group": "In Scope" } ], "out_of_scope": [ { "name": "See PDF", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://www.powerpak.com/selectsurvey/", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://www.medjobnetwork.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://checkout.webmd.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-d89cc334bcfd73d7", "name": "iRobot", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/irobot", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,500", "reward_min": "$100", "reward_max": "$4,500", "scope_rank": 4, "access_status": "open", "industry": "Electronics", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:52Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/irobot/changelog/95b563b0-74ef-4336-b844-625172a41fed.json" ], "in_scope": [ { "name": "iRobot Roomba™ 105", "asset_type": "hardware", "location": null, "group": "iRobot Devices" }, { "name": "iRobot Roomba™ 205", "asset_type": "hardware", "location": null, "group": "iRobot Devices" }, { "name": "iRobot Roomba™ 405", "asset_type": "hardware", "location": null, "group": "iRobot Devices" }, { "name": "iRobot Roomba™ 505", "asset_type": "hardware", "location": null, "group": "iRobot Devices" }, { "name": "iRobot Roomba™ 705", "asset_type": "hardware", "location": null, "group": "iRobot Devices" }, { "name": "https://apps.apple.com/us/app/roomba-home/id6504274697", "asset_type": "ios", "location": "https://apps.apple.com/us/app/roomba-home/id6504274697", "group": "iRobot Mobile Apps" }, { "name": "https://play.google.com/store/apps/details?id=com.irobot.home.prime", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.irobot.home.prime", "group": "iRobot Mobile Apps" }, { "name": "https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/entitlements/{entitlement_id}", "asset_type": "api", "location": "https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/entitlements/{entitlement_id}", "group": "iRobot Cloud" }, { "name": "iRobot API Endpoint", "asset_type": "api", "location": null, "group": "iRobot Cloud" }, { "name": "https://zuora-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/notifications/raas", "asset_type": "api", "location": "https://zuora-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/notifications/raas", "group": "iRobot Cloud" }, { "name": "https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/robots/{robot_id}/entitlements", "asset_type": "api", "location": "https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/robots/{robot_id}/entitlements", "group": "iRobot Cloud" }, { "name": "https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/users/{user_id}/entitlements", "asset_type": "api", "location": "https://aspen-ecommerce-prod.iot.irobotapi.com/dev/v1/ecommerce/users/{user_id}/entitlements", "group": "iRobot Cloud" }, { "name": "https://www.irobot.com", "asset_type": "website", "location": "https://www.irobot.com", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.ca/en_CA", "asset_type": "website", "location": "https://www.irobot.ca/en_CA", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.ca/fr_CA/home", "asset_type": "website", "location": "https://www.irobot.ca/fr_CA/home", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.at/", "asset_type": "website", "location": "https://www.irobot.at/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.be/", "asset_type": "website", "location": "https://www.irobot.be/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.de/", "asset_type": "website", "location": "https://www.irobot.de/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.es/", "asset_type": "website", "location": "https://www.irobot.es/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.fr/", "asset_type": "website", "location": "https://www.irobot.fr/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.co.uk/", "asset_type": "website", "location": "https://www.irobot.co.uk/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.ie/", "asset_type": "website", "location": "https://www.irobot.ie/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.nl/", "asset_type": "website", "location": "https://www.irobot.nl/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.irobot.pt/", "asset_type": "website", "location": "https://www.irobot.pt/", "group": "iRobot Commercial Web Properties" }, { "name": "https://www.homesupport.irobot.com", "asset_type": "website", "location": "https://www.homesupport.irobot.com", "group": "All other official iRobot Web Applications" }, { "name": "https://media.irobot.com", "asset_type": "website", "location": "https://media.irobot.com", "group": "All other official iRobot Web Applications" }, { "name": "https://investor.irobot.com", "asset_type": "website", "location": "https://investor.irobot.com", "group": "All other official iRobot Web Applications" }, { "name": "https://answers.irobot.com", "asset_type": "website", "location": "https://answers.irobot.com", "group": "All other official iRobot Web Applications" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-6c4a356c5949846b", "name": "Izymes", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/izymes", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $2,500", "reward_min": "$100", "reward_max": "$2,500", "scope_rank": 2, "access_status": "open", "industry": "Corporate Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:53Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/izymes/changelog/80bbdd60-34f2-4420-9a84-37b64441fdd1.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1211303/workzone-pullrequest-workflow?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211303/workzone-pullrequest-workflow?hosting=datacenter", "group": "Izymes apps" }, { "name": "https://marketplace.atlassian.com/apps/1211303/workzone-pullrequest-workflow?hosting=server", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211303/workzone-pullrequest-workflow?hosting=server", "group": "Izymes apps" }, { "name": "https://marketplace.atlassian.com/apps/1215843/global-pull-request-organizr?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215843/global-pull-request-organizr?hosting=datacenter", "group": "Izymes apps" }, { "name": "https://marketplace.atlassian.com/apps/1215843/global-pull-request-organizr?hosting=server", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215843/global-pull-request-organizr?hosting=server", "group": "Izymes apps" }, { "name": "https://marketplace.atlassian.com/apps/1224025/ai-insights-for-jira-service-management?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1224025/ai-insights-for-jira-service-management?hosting=cloud", "group": "Izymes apps" }, { "name": "https://marketplace.atlassian.com/apps/1211303/workzone-pullrequest-workflow?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211303/workzone-pullrequest-workflow?hosting=cloud", "group": "Izymes apps" }, { "name": "https://marketplace.atlassian.com/apps/1212840/reminders-for-bitbucket?hosting=server", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212840/reminders-for-bitbucket?hosting=server&tab=overview", "group": "Izymes apps" }, { "name": "https://marketplace.atlassian.com/apps/1212840/reminders-for-bitbucket?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212840/reminders-for-bitbucket?hosting=datacenter", "group": "Izymes apps" }, { "name": "https://marketplace.atlassian.com/apps/1236742/advanced-content-status-labels-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1236742/advanced-content-status-labels-for-confluence?hosting=cloud", "group": "Izymes apps" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-43532e8876c4d446", "name": "J-Tricks - Marketplace Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/j-tricks", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:54Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/j-tricks/changelog/e01010d1-fbb7-47d5-a7f5-acea55978320.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/31399/jql-tricks-plugin?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/31399/jql-tricks-plugin?hosting=cloud&tab=overview", "group": "In Scope " } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-75f0dda829fb2df7", "name": "Jaanga Marketplace Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/JaangaInc-mbb-market", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Cloud", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:55Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/JaangaInc-mbb-market/changelog/53e11e27-ca4a-4ffc-9b7b-2cce27dd14e5.json" ], "in_scope": [ { "name": "Custom Fields Ambassador - https://marketplace.atlassian.com/apps/1236750?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236750?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "Groupe Ambassadors - https://marketplace.atlassian.com/apps/1218225?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218225?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "Bulk Linker (Jira App) - https://marketplace.atlassian.com/apps/1219169/bulk-linker?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219169/bulk-linker?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Asset Analytics for Jira - https://marketplace.atlassian.com/apps/2974674253/assets-analytics-custom-dashboards-reporting-for-jira", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/2974674253/assets-analytics-custom-dashboards-reporting-for-jira", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-b6e2e8ae47a1943e", "name": "Jora", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/jora", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $2,500", "reward_min": "$50", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Media", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:56Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/jora/changelog/b592ed3f-dd99-4a12-97c8-247fe274c671.json" ], "in_scope": [ { "name": "*.jora.com", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.jora.xyz", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "Jora Jobs iOS App", "asset_type": "ios", "location": "https://apps.apple.com/au/app/jora-jobs-job-search-work/id917565665", "group": "In scope targets" }, { "name": "Jora Jobs Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.jora.android&hl=en_US\t", "group": "In scope targets" } ], "out_of_scope": [ { "name": "*.joralocal.com.au", "asset_type": "website", "location": null, "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-79371edbf7c4bd6d", "name": "Just Eat Takeaway.com", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/justeattakeaway", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,500", "reward_min": "$100", "reward_max": "$4,500", "scope_rank": 4, "access_status": "open", "industry": "Hospitality", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:57Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/justeattakeaway/changelog/c404df2a-d924-4789-99c8-3db04a5f4d86.json" ], "in_scope": [ { "name": "*.thuisbezorgd.nl", "asset_type": "website", "location": "https://www.thuisbezorgd.nl/", "group": "Business assets" }, { "name": "*.takeaway.com", "asset_type": "website", "location": "https://takeaway.com", "group": "Business assets" }, { "name": "*.skipthedishes.com", "asset_type": "website", "location": "https://skipthedishes.com", "group": "Business assets" }, { "name": "*.lieferando.de", "asset_type": "website", "location": "https://lieferando.de", "group": "Business assets" }, { "name": "*.pyszne.pl", "asset_type": "website", "location": "https://pyszne.pl", "group": "Business assets" }, { "name": "*.bistro.sk", "asset_type": "website", "location": "https://bistro.sk", "group": "Business assets" }, { "name": "*.just-eat.es", "asset_type": "website", "location": "https://just-eat.es", "group": "Business assets" }, { "name": "*.just-eat.co.uk", "asset_type": "website", "location": "https://www.just-eat.co.uk", "group": "Business assets" }, { "name": "*.just-eat.ch", "asset_type": "website", "location": "https://just-eat.ch", "group": "Business assets" }, { "name": "*.10bis.co.il", "asset_type": "website", "location": "https://10bis.co.il", "group": "Business assets" }, { "name": "*.scoober.com", "asset_type": "website", "location": "https://scoober.com", "group": "Business assets" }, { "name": "*.jet-external.com", "asset_type": "website", "location": "https://jet-external.com", "group": "Business assets" }, { "name": "*.just-eat.com", "asset_type": "website", "location": "https://just-eat.com", "group": "Business assets" }, { "name": "*.skippayments.com", "asset_type": "website", "location": "https://skippayments.com", "group": "Business assets" }, { "name": "*.just-eat.io", "asset_type": "api", "location": "https://just-eat.io/", "group": "Business assets" }, { "name": "*.just-eat.co.il", "asset_type": "website", "location": "https://just-eat.co.il", "group": "Business assets" }, { "name": "Takeaway.com", "asset_type": "android", "location": "https://play.google.com/store/apps/developer?id=Takeaway.com", "group": "Mobile applications" }, { "name": "Just-Eat Holding Limited", "asset_type": "android", "location": "https://play.google.com/store/apps/developer?id=Just-Eat+Holding+Limited", "group": "Mobile applications" }, { "name": "10bis.co.il ltd.", "asset_type": "android", "location": "https://play.google.com/store/apps/developer?id=10bis.co.il+ltd.", "group": "Mobile applications" }, { "name": "Skip Canada", "asset_type": "android", "location": "https://play.google.com/store/apps/developer?id=Skip+Canada", "group": "Mobile applications" }, { "name": "Just-Eat.com", "asset_type": "ios", "location": "https://apps.apple.com/nz/developer/just-eat-com/id383091095", "group": "Mobile applications" }, { "name": "Takeaway.com Central Core B.V.", "asset_type": "ios", "location": "https://apps.apple.com/it/developer/takeaway-com-central-core-b-v/id329472762", "group": "Mobile applications" }, { "name": "SkipTheDishes", "asset_type": "ios", "location": "https://apps.apple.com/us/developer/skipthedishes/id969229980", "group": "Mobile applications" }, { "name": "10bis.co.il, Ltd", "asset_type": "ios", "location": "https://apps.apple.com/us/developer/10bis-co-il-ltd/id434368194", "group": "Mobile applications" }, { "name": "*.justeattakeaway.com", "asset_type": "website", "location": "https://www.justeattakeaway.com", "group": "Other assets" }, { "name": "*.justeat-int.com", "asset_type": "api", "location": "https://api.justeat-int.com", "group": "Other assets" }, { "name": "*.yourdelivery.de", "asset_type": "website", "location": "https://yourdelivery.de", "group": "Other assets" }, { "name": "*.just-data.io", "asset_type": "api", "location": "https://just-data.io", "group": "Other assets" }, { "name": "github.com/justeattakeaway", "asset_type": "other", "location": "https://github.com/justeattakeaway", "group": "Source code and supply chain" } ], "out_of_scope": [ { "name": "*.business.just-eat.co.uk", "asset_type": "website", "location": null, "group": "Ouf of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-7effc3b4fbd675a8", "name": "K15t", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/k15t", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:58Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/k15t/changelog/29204ba3-1a5d-40a8-ad4d-dc52c83d9d04.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1215199/backbone-issue-sync-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215199/backbone-issue-sync-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1217608/scroll-documents-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217608/scroll-documents-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/7019/scroll-pdf-exporter-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/7019/scroll-pdf-exporter-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/24982/scroll-word-exporter-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/24982/scroll-word-exporter-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1217037/scroll-exporter-extensions?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217037/scroll-exporter-extensions?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/253/scroll-imagemap-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/253/scroll-imagemap-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1211636/scroll-viewport-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211636/scroll-viewport-for-confluence?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1226295/variants-for-scroll-documents?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1226295/variants-for-scroll-documents?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/7019/scroll-pdf-exporter-for-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/7019/scroll-pdf-exporter-for-confluence?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/24982/scroll-word-exporter-for-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/24982/scroll-word-exporter-for-confluence?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/420604/scroll-html-exporter-for-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/420604/scroll-html-exporter-for-confluence?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1210818/scroll-versions-for-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1210818/scroll-versions-for-confluence?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1211616/scroll-translations-for-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211616/scroll-translations-for-confluence?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/253/scroll-imagemap-for-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/253/scroll-imagemap-for-confluence?hosting=datacenter&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1215199/backbone-issue-sync-for-jira?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215199/backbone-issue-sync-for-jira?hosting=datacenter&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1217608/scroll-documents-for-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217608/scroll-documents-for-confluence?hosting=datacenter&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1226295/variants-for-scroll-documents?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1226295/variants-for-scroll-documents?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1211636/scroll-viewport-for-confluence?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211636/scroll-viewport-for-confluence?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227238/translations-for-scroll-documents?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1227238/translations-for-scroll-documents?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1227238/translations-for-scroll-documents?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1227238/translations-for-scroll-documents?hosting=datacenter", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/420604/scroll-html-exporter-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/420604/scroll-html-exporter-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1224799/scroll-content-quality-for-confluence?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1224799/scroll-content-quality-for-confluence", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "Any other subdomains of k15t.com, including but not limited to www.k15t.com, www.k15t.de and help.k15t.com", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "https://marketplace.atlassian.com/*", "asset_type": "website", "location": null, "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-b078255601c47c9f", "name": "Kaleido", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/kaleido", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $6,000", "reward_min": "$100", "reward_max": "$6,000", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:59Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/kaleido/changelog/3fc31473-2971-429d-8546-5c2770d21b09.json" ], "in_scope": [ { "name": "*.remove.bg", "asset_type": "website", "location": "https://www.remove.bg", "group": "In Scope Targets" }, { "name": "*.designify.com", "asset_type": "website", "location": "https://www.designify.com", "group": "In Scope Targets" }, { "name": "*.kaleido.ai", "asset_type": "website", "location": "https://www.kaleido.ai", "group": "In Scope Targets" }, { "name": "*.unscreen.com", "asset_type": "website", "location": "https://www.unscreen.com", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-0a2cee613b3d1476", "name": "Kantega SSO", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/kantega", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Corporate Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:00Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/kantega/changelog/f64034e3-a9dd-4c0a-a613-02b3b6c2039d.json" ], "in_scope": [ { "name": "K-SSO SAML SSO OAuth Kerberos User Management for Bamboo - Data Center - https://marketplace.atlassian.com/apps/1215262/k-sso-saml-sso-oauth-kerberos-user-management-for-bamboo?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215262/k-sso-saml-sso-oauth-kerberos-user-management-for-bamboo?hosting=datacenter&tab=overview", "group": "In Scope Targets" }, { "name": "K-SSO SAML SSO OAuth Kerberos User Management for Bitbucket - Data Center - https://marketplace.atlassian.com/apps/1213019/k-sso-saml-sso-oauth-kerberos-user-management-for-bitbucket?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1213019/k-sso-saml-sso-oauth-kerberos-user-management-for-bitbucket?hosting=datacenter", "group": "In Scope Targets" }, { "name": "K-SSO SAML SSO OAuth Kerberos User Management for Confluence - Data Center - https://marketplace.atlassian.com/apps/1212126/k-sso-saml-sso-oauth-kerberos-user-management-for-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212126/k-sso-saml-sso-oauth-kerberos-user-management-for-confluence?hosting=datacenter&tab=overview", "group": "In Scope Targets" }, { "name": "K-SSO SAML SSO OAuth Kerberos User Management for FeCru - Server - https://marketplace.atlassian.com/apps/1215263/k-sso-saml-sso-oauth-kerberos-user-management-for-fecru?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1215263/k-sso-saml-sso-oauth-kerberos-user-management-for-fecru?hosting=server&tab=overview", "group": "In Scope Targets" }, { "name": "K-SSO SAML SSO OAuth Kerberos User Management for Jira - Data Center - https://marketplace.atlassian.com/apps/1211923/k-sso-saml-sso-oauth-kerberos-user-management-for-jira?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211923/k-sso-saml-sso-oauth-kerberos-user-management-for-jira?hosting=datacenter&tab=overview", "group": "In Scope Targets" }, { "name": "Kantega User Management & License Optimizer for Bitbucket - Data Center - https://marketplace.atlassian.com/apps/2121739236/kantega-user-management-license-optimizer-for-bitbucket?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/2121739236/kantega-user-management-license-optimizer-for-bitbucket?hosting=datacenter", "group": "In Scope Targets" }, { "name": "Kantega User Management & License Optimizer for Confluence - Data Center - https://marketplace.atlassian.com/apps/1233591/kantega-user-management-license-optimizer-for-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1233591/kantega-user-management-license-optimizer-for-confluence?hosting=datacenter&tab=overview", "group": "In Scope Targets" }, { "name": "Kantega User Management & License Optimizer for Jira - Data Center - https://marketplace.atlassian.com/apps/1230481/kantega-user-management-license-optimizer-for-jira?hosting=datacenter", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1230481/kantega-user-management-license-optimizer-for-jira?hosting=datacenter", "group": "In Scope Targets" }, { "name": "Kantega User Management & License Optimizer for Confluence - Cloud - https://marketplace.atlassian.com/apps/1233591/kantega-user-management-license-optimizer-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233591/kantega-user-management-license-optimizer-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Kantega User Management & License Optimizer for Jira - Cloud - https://marketplace.atlassian.com/apps/1230481/kantega-user-management-license-optimizer-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230481/kantega-user-management-license-optimizer-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Issue/Work Item Summary & Description Templates for Jira - Cloud - https://marketplace.atlassian.com/apps/1228920/issue-work-item-summary-description-templates-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228920/issue-work-item-summary-description-templates-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-771bcebd44ede4d6", "name": "Keeper Security Public Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/keepersecurity", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$300 - $10,000", "reward_min": "$300", "reward_max": "$10,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:01Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/keepersecurity/changelog/0c2e8a25-07ad-4b8d-8846-a8a763faad93.json" ], "in_scope": [ { "name": "Keeper Browser Extension (Chrome, Safari, Firefox, Edge)", "asset_type": "other", "location": "https://www.keepersecurity.com/download.html", "group": "In Scope" }, { "name": "Keeper Desktop App for Mac, PC, Linux", "asset_type": "other", "location": "https://www.keepersecurity.com/download.html", "group": "In Scope" }, { "name": "Keeper Web Vault (US, EU, AU, CA, JP, GovCloud)", "asset_type": "website", "location": "https://keepersecurity.com/vault", "group": "In Scope" }, { "name": "Keeper for iOS", "asset_type": "ios", "location": "https://www.keepersecurity.com/download.html", "group": "In Scope" }, { "name": "Keeper for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.callpod.android_apps.keeper&hl=en_US&gl=US", "group": "In Scope" }, { "name": "Keeper Enterprise", "asset_type": "website", "location": "https://keepersecurity.com/password-manager-free-trial.html", "group": "In Scope" }, { "name": "KeeperPAM Privileged Access Manager", "asset_type": "website", "location": "https://docs.keeper.io/en/keeperpam", "group": "In Scope" }, { "name": "Keeper Connection Manager (KCM)", "asset_type": "other", "location": "https://docs.keeper.io/kcm", "group": "In Scope" }, { "name": "Keeper Secrets Manager SDK", "asset_type": "api", "location": "https://docs.keeper.io/en/keeperpam/secrets-manager/overview", "group": "In Scope" }, { "name": "Keeper Endpoint Privilege Manager", "asset_type": "api", "location": "https://keepersecurity.com/console", "group": "In Scope" }, { "name": "Keeper Admin Console (US, EU, AU, CA, JP, GovCloud)", "asset_type": "website", "location": "https://keepersecurity.com/console", "group": "In Scope" }, { "name": "Keeper Security Website", "asset_type": "website", "location": "https://keepersecurity.com", "group": "In Scope" }, { "name": "KeeperDB", "asset_type": "other", "location": "https://www.keepersecurity.com/download.html?t=db", "group": "In Scope" }, { "name": "Keeper AD / LDAP Bridge", "asset_type": "api", "location": "https://docs.keeper.io/keeper-bridge/", "group": "In Scope" }, { "name": "Keeper Gateway", "asset_type": "api", "location": "https://docs.keeper.io/en/keeperpam/privileged-access-manager/getting-started/gateways", "group": "In Scope" }, { "name": "SSO Connect Cloud and Automator Service", "asset_type": "api", "location": "https://docs.keeper.io/sso-connect-cloud/", "group": "In Scope" }, { "name": "SSO Connect On-Prem", "asset_type": "api", "location": "https://docs.keeper.io/sso-connect-guide/", "group": "In Scope" }, { "name": "Keeper Commander CLI/SDK", "asset_type": "api", "location": "https://docs.keeper.io/en/keeperpam/commander-cli/overview", "group": "In Scope" }, { "name": "KeeperChat for Windows", "asset_type": "other", "location": "https://www.microsoft.com/en-us/p/keeperchat/9pdqtcpn4kxn#activetab=pivot:overviewtab", "group": "In Scope" }, { "name": "KeeperChat for iOS", "asset_type": "ios", "location": "https://apps.apple.com/app/id1216446440", "group": "In Scope" }, { "name": "KeeperChat for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.keepersecurity.chat&hl=en_US&gl=US", "group": "In Scope" }, { "name": "KeeperChat for Mac", "asset_type": "other", "location": "https://apps.apple.com/us/app/keeperchat/id1273303729?mt=12", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-5666a64d02635d13", "name": "Kiteworks", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/kiteworks-public", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $25,000", "reward_min": "$250", "reward_max": "$25,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "P1 24/7", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:02Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/kiteworks-public/changelog/13ba2a60-317b-4c20-b9bb-e214266d874f.json" ], "in_scope": [ { "name": "█████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████" } ], "out_of_scope": [ { "name": "█████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-592aa85d2dad3c2d", "name": "Klaviyo Managed Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/klaviyo-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $3,500", "reward_min": "$150", "reward_max": "$3,500", "scope_rank": 4, "access_status": "open", "industry": "eCommerce", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:04Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/klaviyo-og/changelog/b9a9ae9f-653c-45bd-8624-34935291c360.json" ], "in_scope": [ { "name": "Klaviyo Hosted Pages - myklpages.com", "asset_type": "website", "location": "https://*.myklpages.com/*", "group": "In Scope" }, { "name": "Klaviyo APIs - a.klaviyo.com/api", "asset_type": "api", "location": "https://a.klaviyo.com/api/*", "group": "In Scope" }, { "name": "Klaviyo WebApp - klaviyo.com", "asset_type": "website", "location": "https://klaviyo.com/*", "group": "In Scope" }, { "name": "Klaviyo Services - *.services.klaviyo.com", "asset_type": "website", "location": "https://*.services.klaviyo.com", "group": "In Scope" }, { "name": "Klaviyo MSV - klaviyomsv.com", "asset_type": "website", "location": "https://*.klaviyomsv.com/*", "group": "In Scope" }, { "name": "Klaviyo Dev - klaviyo-dev.com", "asset_type": "website", "location": "https://*.klaviyo-dev.com/*", "group": "In Scope" }, { "name": "Klaviyo MCP - mcp.klaviyo.com", "asset_type": "other", "location": "http://mcp.klaviyo.com/", "group": "In Scope" }, { "name": "Klaviyo App - *.clovesoftware.com", "asset_type": "website", "location": "https://*.clovesoftware.com", "group": "In Scope" }, { "name": "Klaviyo Dev - *.clovesoftware-dev.com", "asset_type": "website", "location": "https://*.clovesoftware-dev.com", "group": "In Scope" }, { "name": "Klaviyo AWS/S3 Assets", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 12.109.179.242/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 12.109.179.243/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 12.109.179.244/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 12.162.226.194/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 12.162.226.195/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 12.162.226.196/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 12.162.226.197/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 12.162.226.198/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 13.236.111.63/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 14.200.250.155/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 14.200.250.156/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 144.121.5.144/29", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 144.121.57.208/29", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 18.133.56.249/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 18.144.159.16/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 18.168.137.251/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 18.168.212.94/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 18.168.232.92/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 23.20.21.255/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 3.105.93.78/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 3.208.141.108/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 3.222.226.200/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 38.140.97.154/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 38.140.97.155/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 38.140.97.156/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 44.197.10.144/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 46.31.171.122/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 46.31.171.123/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrascucture - 50.150.76.0/30", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 50.18.34.165/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 50.228.235.80/29", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 52.8.118.227/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 54.160.106.200/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 64.125.104.194/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 64.125.104.195/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 64.125.104.196/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 64.125.104.197/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 64.125.104.198/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 64.71.19.71/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 82.144.244.58/32", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Klaviyo Infrastructure - 82.144.244.59/32", "asset_type": "other", "location": null, "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-fc2f74cd83c9200e", "name": "Kohl's", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/kohls", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,500", "reward_min": "$100", "reward_max": "$4,500", "scope_rank": 2, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:05Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/kohls/changelog/127d8b50-3067-4aaf-ae19-de737a1017d5.json" ], "in_scope": [ { "name": "Kohl’s entire public digital footprint that is not Out-Of-Scope(See list below)", "asset_type": "other", "location": null, "group": "In Scope Targets" }, { "name": "www.kohls.com", "asset_type": "website", "location": "https://www.kohls.com", "group": "In Scope Targets" }, { "name": "Kohl's Mobile Application for iOS", "asset_type": "ios", "location": "https://www.kohls.com/feature/app.jsp", "group": "In Scope Targets" }, { "name": "Kohl's Mobile Application for Android", "asset_type": "android", "location": "https://www.kohls.com/feature/app.jsp", "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "apply.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*kohls.com/kohlscredit/prequal", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*kohlsecommerce.com/kohlscredit/prequal", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "corporate.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "productchampions.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "link-preprod.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "developer.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "lclive.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "author-mykohls.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "mykohls-origin.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "origin-stage65-corporate.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "origin-stage65-mykohls.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "author-stage65-mykohls.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "stage65-corporate.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "stage65-mykohls.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "author-qa65-mykohls.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "mykohls.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "any domain with archaius.json endoint is out of scope", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooter", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*kohls.com/checkout/prequal_inquiry.jsp#/preQualEligible", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooter", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/preQualEligible", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "vp-*.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*qa*.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "wfh*.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "kconnect.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "connection.kohls.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "kohlsmerch.kohls.com/", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "b2b.kohls.com/", "asset_type": "website", "location": "http://www.b2b.kohls.com", "group": "Out of Scope Targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-ee4b8b7deca259e1", "name": "KuCoin Managed Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/kucoin", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$20 - $15,000", "reward_min": "$20", "reward_max": "$15,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:06Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/kucoin/changelog/0c0f0b95-ec12-485c-ba8f-dee184f3f9bd.json" ], "in_scope": [ { "name": "https://kucoin.com", "asset_type": "website", "location": "https://kucoin.com", "group": "In-Scope Business-related assets" }, { "name": "*.kucoin.com", "asset_type": "website", "location": "https://kucoin.com", "group": "In-Scope None-Business-related assets" }, { "name": "Kucoin IOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/kucoin-buy-bitcoin-crypto/id1378956601?mt=8", "group": "In-Scope Mobile App Targets" }, { "name": "Kucoin Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.kubi.kucoin", "group": "In-Scope Mobile App Targets" } ], "out_of_scope": [ { "name": "support.kucoin.plus", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "store.kucoin.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "docs.kucoin.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "intro.kucoin.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "cert.kucoin.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "sandbox.kucoin.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "passport.kucoin.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*-sdb.kucoin.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*-sandbox.kucoin.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-154fcdb83c0de882", "name": "LastPass", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/lastpass", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $5,000", "reward_min": "Points", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:07Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/lastpass/changelog/3bacc2c8-b454-443d-a32f-4d9c474ebca6.json" ], "in_scope": [ { "name": "https://lastpass.com", "asset_type": "website", "location": "https://lastpass.com", "group": "In Scope Targets" }, { "name": "LastPass browser extensions (Chrome / Safari / Edge / Firefox)", "asset_type": "other", "location": "https://lastpass.com/misc_download2.php", "group": "In Scope Targets" }, { "name": "Local computer apps (UWP application / Windows installer (MSI) / MacOS)", "asset_type": "other", "location": "https://lastpass.com/misc_download2.php", "group": "In Scope Targets" }, { "name": "https://support.lastpass.com", "asset_type": "website", "location": "https://support.lastpass.com", "group": "In Scope Targets" }, { "name": "Workstation MFA (WMFA)", "asset_type": "other", "location": null, "group": "In Scope Targets" }, { "name": "https://blog.lastpass.com", "asset_type": "website", "location": "https://blog.lastpass.com", "group": "In Scope Targets" }, { "name": "https://admin.lastpass.com", "asset_type": "website", "location": "https://admin.lastpass.com", "group": "In Scope Targets" }, { "name": "https://auth.lastpass.com", "asset_type": "website", "location": "https://auth.lastpass.com", "group": "In Scope Targets" }, { "name": "https://accounts.lastpass.com", "asset_type": "website", "location": "https://accounts.lastpass.com", "group": "In Scope Targets" }, { "name": "https://www.lastpass.com", "asset_type": "website", "location": "https://www.lastpass.com", "group": "In Scope Targets" }, { "name": "LastPass Password Manager (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.lastpass.lpandroid", "group": "Mobile Targets" }, { "name": "LastPass Authenticator (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.lastpass.authenticator&hl=en_US&gl=US", "group": "Mobile Targets" }, { "name": "LastPass Password Manager (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/lastpass-password-manager/id324613447", "group": "Mobile Targets" }, { "name": "LastPass Authenticator (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/lastpass-authenticator/id1079110004", "group": "Mobile Targets" } ], "out_of_scope": [ { "name": "https://identity.lastpass.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "Lastpass CLI tool", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "https://info.lastpass.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://forums.lastpass.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-f264c5f391e0a256", "name": "Latitude Financial Services Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/latitude-financial-service-bugbounty", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $7,500", "reward_min": "$150", "reward_max": "$7,500", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:44:08Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/latitude-financial-service-bugbounty/changelog/9a0cc405-bbed-449a-9f4e-b767c0624e48.json" ], "in_scope": [ { "name": "https://api.test.latitudefinancial.com", "asset_type": "api", "location": null, "group": "In Scope Targets - Latitude Financial " }, { "name": "https://master.servicecentre.digitalservicing-np.lfscnp.com/", "asset_type": "website", "location": "https://master.servicecentre.digitalservicing-np.lfscnp.com/", "group": "In Scope Targets - Latitude Financial " }, { "name": "https://master.servicecentre-nz.digitalservicing-np.lfscnp.com/", "asset_type": "website", "location": "https://master.servicecentre-nz.digitalservicing-np.lfscnp.com/\t", "group": "In Scope Targets - Latitude Financial " }, { "name": "*.28degreescard.com.au", "asset_type": "website", "location": "https://28degreescard.com.au", "group": "In scope - Latitude Financial Brands " }, { "name": "*.buyersedge.com.au", "asset_type": "website", "location": "https://buyersedge.co.nz", "group": "In scope - Latitude Financial Brands " }, { "name": "*.carecredit.com.au", "asset_type": "website", "location": "https://carecredit.com.au", "group": "In scope - Latitude Financial Brands " }, { "name": "*.gemcreditline.co.nz", "asset_type": "website", "location": "https://gemcreditline.co.nz", "group": "In scope - Latitude Financial Brands " }, { "name": "*.gemfinance.co.nz", "asset_type": "website", "location": "https://gemfinance.co.nz", "group": "In scope - Latitude Financial Brands " }, { "name": "*.gemvisa.com.au", "asset_type": "website", "location": "https://gemvisa.com.au", "group": "In scope - Latitude Financial Brands " }, { "name": "*.genoapay.co.nz", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.genoapay.com", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.gomastercard.com.au", "asset_type": "website", "location": "https://gomastercard.com.au", "group": "In scope - Latitude Financial Brands " }, { "name": "*.interestfree.com.au", "asset_type": "website", "location": "https://interestfree.com.au", "group": "In scope - Latitude Financial Brands " }, { "name": "*.latitudefinancial.co.nz", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.latitudefinancial.com", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.latitudefinancial.com.au", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.latitudeinfinity.com.au", "asset_type": "website", "location": "https://latitudeinfinity.com.au", "group": "In scope - Latitude Financial Brands " }, { "name": "*.latitudepay.com.au", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.latitudepay.com", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.umiloans.com.au", "asset_type": "website", "location": "https://umiloans.com.au", "group": "In scope - Latitude Financial Brands " }, { "name": "images.latitudepayapps.com", "asset_type": "api", "location": "https://images.latitudepayapps.com/", "group": "In scope - Latitude Financial Brands " }, { "name": "app.latitudepayapps.com", "asset_type": "api", "location": "https://app.latitudepayapps.com/", "group": "In scope - Latitude Financial Brands " }, { "name": "*.test.*.lfscnp.com", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.dev.*.lfscnp.com", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.sandbox.*.lfscnp.com", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " }, { "name": "*.-np.*.lfscnp.com", "asset_type": "website", "location": null, "group": "In scope - Latitude Financial Brands " } ], "out_of_scope": [ { "name": "https://investors.latitudefinancial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://auth.latitudefinancial.com", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "https://auth.*.latitudefinancial.com", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "*.latitudefs.com", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "https://*.my.latitudepay.com/", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://*.sg.latitudepay.com/", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://my.latitudepay.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://sg.latitudepay.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://t.latitudefinancial.com", "asset_type": "website", "location": "https://t.latitudefinancial.com/*", "group": "Out of Scope Targets" }, { "name": "https://p.latitudefinancial.com", "asset_type": "website", "location": "https://p.latitudefinancial.com", "group": "Out of Scope Targets" }, { "name": "Payment APIs", "asset_type": "website", "location": "https://payments.latitudefinancial.com/hosted/*,https://payments.latitudefinancial.com/embed/*,https://payments-api.latitudefinancial.com/*", "group": "Out of Scope Targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-8c79e5965dcb8c85", "name": "LaunchDarkly Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/launchdarkly-mbb-og", "bounty_classification": "verified_policy", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $7,500", "reward_min": "$150", "reward_max": "$7,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "launchdarkly-managed-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:09Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/launchdarkly-mbb-og/changelog/884450ef-4277-41a9-8394-5f8c49cae2d8.json" ], "in_scope": [ { "name": "app.launchdarkly.com", "asset_type": "website", "location": null, "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "events.launchdarkly.com", "asset_type": "website", "location": null, "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "stream.launchdarkly.com", "asset_type": "website", "location": null, "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "LaunchDarkly Open Source SDKs", "asset_type": "other", "location": null, "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "docs.launchdarkly.com", "asset_type": "website", "location": null, "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://launchdarkly.com/docs", "asset_type": "website", "location": "https://launchdarkly.com/docs", "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "blog.launchdarkly.com", "asset_type": "other", "location": null, "group": "Out of Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "launchdarkly.com", "asset_type": "other", "location": null, "group": "Out of Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "sandbox.launchdarkly.com", "asset_type": "other", "location": null, "group": "Out of Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "slack.launchdarkly.com", "asset_type": "other", "location": null, "group": "Out of Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "status.launchdarkly.com", "asset_type": "other", "location": null, "group": "Out of Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "launchdarkly.atlassian.net", "asset_type": "other", "location": "https://launchdarkly.atlassian.net", "group": "Out of Scope ", "source_ids": [ "assets-scope-2026-10-03" ] } ], "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ], "review_flags": [] }, { "id": "bugcrowd-005bf6589fbb8fe1", "name": "Lightspeed Hospitality", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/lightspeed-hospitality", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,500", "reward_min": "$250", "reward_max": "$7,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:08Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/lightspeed-hospitality/changelog/b409de16-0a3b-4cad-9292-92582ced5b2f.json" ], "in_scope": [ { "name": "https://manager.trial.lsk.lightspeed.app/", "asset_type": "website", "location": "https://manager.trial.lsk.lightspeed.app/", "group": "Lightspeed Hospitality K-Series" }, { "name": "mylightspeed.app", "asset_type": "website", "location": "https://mylightspeed.app", "group": "Lightspeed Hospitality K-Series" }, { "name": "https://hq.breadcrumb.com/hq/restaurants/bounty-cafe-2/", "asset_type": "website", "location": "https://hq.breadcrumb.com/hq/restaurants/bounty-cafe-2/", "group": "Lightspeed Hospitality U-Series" } ], "out_of_scope": [ { "name": "lightspeedhq.com/trial", "asset_type": "website", "location": "https://lightspeedhq.com/trial ", "group": "Out of Scope" }, { "name": "pos-admin.trial.lsk.lightspeed.app", "asset_type": "other", "location": "https://pos-admin.trial.lsk.lightspeed.app", "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-5988a137d047f023", "name": "Lightspeed Retail", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/lightspeed-retail", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,500", "reward_min": "$250", "reward_max": "$7,500", "scope_rank": 3, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:09Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/lightspeed-retail/changelog/0c06fd61-053e-4724-a145-506fde7e211c.json" ], "in_scope": [ { "name": "developers.retail.lightspeed.app", "asset_type": "website", "location": "https://developers.retail.lightspeed.app", "group": "Lightspeed Retail X-Series In Scope Targets" }, { "name": "payment-connectors.vendhq.com", "asset_type": "website", "location": "https://payment-connectors.vendhq.com/", "group": "Lightspeed Retail X-Series In Scope Targets" }, { "name": "store.retail.lightspeed.app", "asset_type": "website", "location": "https://store.retail.lightspeed.app", "group": "Lightspeed Retail X-Series In Scope Targets" }, { "name": "https://apps.apple.com/us/app/ecwid-ecommerce/id626731456", "asset_type": "ios", "location": null, "group": "Lightspeed Ecommerce E-Series In Scope Targets" }, { "name": "https://play.google.com/store/apps/details?id=com.ecwid.android&pli=1", "asset_type": "android", "location": null, "group": "Lightspeed Ecommerce E-Series In Scope Targets" }, { "name": "https://app.ecwid.com/api/v3/", "asset_type": "api", "location": "https://app.ecwid.com/api/v3/", "group": "Lightspeed Ecommerce E-Series In Scope Targets" } ], "out_of_scope": [ { "name": "x-series-support.lightspeedhq.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "vendhq.force.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "vendimageuploadcdn.global.ssl.fastly.net", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "partners.vendhq.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "track.api.vendhq.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "your-store.vendecommerce.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "partnerportal.vendhq.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "https://support.ecwid.com/hc/en-us", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "https://www.ecwid.com/", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-01ae570586519d32", "name": "Lime", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/lime", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $7,000", "reward_min": "$150", "reward_max": "$7,000", "scope_rank": 4, "access_status": "open", "industry": "Transportation", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:10Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/lime/changelog/75a57d34-9894-4750-bc84-f6937a266609.json" ], "in_scope": [ { "name": "proxy-production.lime.bike", "asset_type": "api", "location": null, "group": "Public In-Scope" }, { "name": "web-message.lime.bike", "asset_type": "api", "location": null, "group": "Public In-Scope" }, { "name": "web-message-high.lime.bike", "asset_type": "api", "location": null, "group": "Public In-Scope" }, { "name": "Supply iOS", "asset_type": "ios", "location": "https://apps.apple.com/ca/app/lime-supply/id1620058457", "group": "Public In-Scope" }, { "name": "web-production.lime.bike", "asset_type": "api", "location": null, "group": "Public In-Scope" }, { "name": "external-api.lime.bike", "asset_type": "api", "location": null, "group": "Public In-Scope" }, { "name": "Data.lime.bike", "asset_type": "api", "location": null, "group": "Public In-Scope" }, { "name": "Rider iOS", "asset_type": "ios", "location": "https://apps.apple.com/ca/app/lime-ridegreen/id1199780189", "group": "Public In-Scope" }, { "name": "Rider Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.limebike", "group": "Public In-Scope" }, { "name": "Supply Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.lime.supply&hl=en_US", "group": "Public In-Scope" }, { "name": "admintool.lime.bike", "asset_type": "api", "location": null, "group": "Private In-Scope" }, { "name": "juicer.lime.bike", "asset_type": "api", "location": null, "group": "Private In-Scope" }, { "name": "Data portal", "asset_type": "website", "location": "https://data.limeinternal.com", "group": "Private In-Scope" }, { "name": "help.lime.bike", "asset_type": "api", "location": null, "group": "Private In-Scope" }, { "name": "Admintool", "asset_type": "website", "location": "https://admintool.lime.bike", "group": "Private In-Scope" }, { "name": "ops.lime.bike", "asset_type": "api", "location": null, "group": "Private In-Scope" }, { "name": "LP dashboard", "asset_type": "website", "location": "https://lp.lime.bike/", "group": "Private In-Scope" }, { "name": "Inhouse deployment pipeline", "asset_type": "website", "location": "https://orchard.limeinternal.com", "group": "Private In-Scope" }, { "name": "Lime website", "asset_type": "website", "location": "https://www.li.me/", "group": "Private In-Scope" }, { "name": "Lime GPT", "asset_type": "website", "location": "https://gpt.lime.bike", "group": "Private In-Scope" } ], "out_of_scope": [ { "name": "community.li.me (bevy)", "asset_type": "api", "location": null, "group": "Out-of-Scope" }, { "name": "*.airflow.limeinternal.com (legacy domain)", "asset_type": "website", "location": null, "group": "Out-of-Scope" }, { "name": "https://help.li.me (Zendesk)", "asset_type": "website", "location": null, "group": "Out-of-Scope" }, { "name": "*.limeinternal.com", "asset_type": "api", "location": null, "group": "Out-of-Scope" }, { "name": "*.lime.bike", "asset_type": "api", "location": null, "group": "Out-of-Scope" }, { "name": "https://li.me (HubSpot)", "asset_type": "website", "location": null, "group": "Out-of-Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-fddd727b486a2d92", "name": "Linktree", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/linktree-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$25 - $7,500", "reward_min": "$25", "reward_max": "$7,500", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:11Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/linktree-mbb-og/changelog/c2fdce1d-ed5f-4a57-b7f0-8f79417d5cd0.json" ], "in_scope": [ { "name": "*.linktr.ee", "asset_type": "website", "location": "https://linktr.ee", "group": "Primary Targets" }, { "name": "*.linktree.com", "asset_type": "website", "location": "https://linktree.com", "group": "Primary Targets" }, { "name": "*.tr.ee", "asset_type": "website", "location": "https://tr.ee", "group": "Primary Targets" }, { "name": "*.linktree-extensions.com", "asset_type": "website", "location": null, "group": "Primary Targets" }, { "name": "Linktree iOS app", "asset_type": "ios", "location": "https://linktree.app.link/LinktreeWebsite?utm_medium=Linktree_Footer", "group": "Primary Targets" }, { "name": "Linktree Android app", "asset_type": "android", "location": "https://linktree.app.link/LinktreeWebsite?utm_medium=Linktree_Footer", "group": "Primary Targets" }, { "name": "plannthat.com", "asset_type": "website", "location": "https://*.plannthat.com", "group": "Secondary Targets" }, { "name": "Plann iOS app", "asset_type": "ios", "location": "https://apps.apple.com/au/app/plann-preview-for-instagram/id1106201141", "group": "Secondary Targets" }, { "name": "Plann Android app", "asset_type": "android", "location": "https://play.google.com/store/search?q=plann&c=apps", "group": "Secondary Targets" }, { "name": "*.odesli.co", "asset_type": "website", "location": "https://odesli.co", "group": "Secondary Targets" }, { "name": "*.odesli.com", "asset_type": "website", "location": "https://odesli.com", "group": "Secondary Targets" }, { "name": "*.song.link", "asset_type": "website", "location": "https://song.link", "group": "Secondary Targets" }, { "name": "*.songlink.io", "asset_type": "website", "location": "https://songlink.io", "group": "Secondary Targets" }, { "name": "*.album.link", "asset_type": "website", "location": "https://album.link", "group": "Secondary Targets" }, { "name": "*.artist.link", "asset_type": "website", "location": "https://artist.link", "group": "Secondary Targets" }, { "name": "*.pods.link", "asset_type": "website", "location": "https://pods.link", "group": "Secondary Targets" }, { "name": "*.playlist.link", "asset_type": "website", "location": "https://playlist.link", "group": "Secondary Targets" }, { "name": "*.mylink.page", "asset_type": "website", "location": "https://mylink.page", "group": "Secondary Targets" } ], "out_of_scope": [ { "name": "*.filestack.com", "asset_type": "website", "location": "https://filestack.com", "group": "Out of Scope Targets" }, { "name": "*.freshdesk.com", "asset_type": "website", "location": "https://freshdesk.com", "group": "Out of Scope Targets" }, { "name": "*.blstr.xyz", "asset_type": "website", "location": "https://blstr.xyz", "group": "Out of Scope Targets" }, { "name": "*.blstr.co", "asset_type": "website", "location": "https://blstr.co", "group": "Out of Scope Targets" }, { "name": "community.linktr.ee", "asset_type": "website", "location": "https://community.linktr.ee", "group": "Out of Scope Targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-9d73a32f2e0574aa", "name": "Litew8 GmbH - Marketplace Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/litew8", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:12Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/litew8/changelog/9c8e2d48-6a92-44d3-9d7e-c72ec4d1b68e.json" ], "in_scope": [ { "name": "Space Templates & Content Templates for Jira | https://marketplace.atlassian.com/apps/1230303/project-templates-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230303/project-templates-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Space Templates for Confluence | https://marketplace.atlassian.com/apps/1235430/space-templates-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235430/space-templates-for-confluence?tab=overview&hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-0869e67e1925baf6", "name": "lululemon", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/lululemon", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $8,000", "reward_min": "$50", "reward_max": "$8,000", "scope_rank": 3, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:13Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/lululemon/changelog/dbc3059a-d453-413b-bf8c-6a0b4290bd75.json" ], "in_scope": [ { "name": "shop.lululemon.com", "asset_type": "website", "location": "https://shop.lululemon.com", "group": "North America e-commerce sites" }, { "name": "*.lululemon.com", "asset_type": "other", "location": null, "group": "North America e-commerce sites" }, { "name": "Lululemon Mobile App - iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/lululemon/id920098546", "group": "North America e-commerce sites" }, { "name": "https://www.lululemon.com.au", "asset_type": "website", "location": "https://www.lululemon.com.au/ ", "group": "International e-commerce sites" }, { "name": "https://www.lululemon.de", "asset_type": "website", "location": "https://www.lululemon.de/", "group": "International e-commerce sites" }, { "name": "https://www.lululemon.es", "asset_type": "website", "location": "https://www.lululemon.es/ ", "group": "International e-commerce sites" }, { "name": "https://www.eu.lululemon.com", "asset_type": "website", "location": "https://www.eu.lululemon.com/", "group": "International e-commerce sites" }, { "name": "https://www.lululemon.fr", "asset_type": "website", "location": "https://www.lululemon.fr/", "group": "International e-commerce sites" }, { "name": "https://www.lululemon.com.hk", "asset_type": "website", "location": "https://www.lululemon.com.hk/", "group": "International e-commerce sites" }, { "name": "http://www.lululemon.co.jp", "asset_type": "website", "location": "https://www.lululemon.co.jp/", "group": "International e-commerce sites" }, { "name": "http://www.lululemon.co.kr", "asset_type": "website", "location": "http://www.lululemon.co.kr/", "group": "International e-commerce sites" }, { "name": "https://www.lululemon.co.nz", "asset_type": "website", "location": "https://www.lululemon.co.nz/", "group": "International e-commerce sites" }, { "name": "https://www.lululemon.co.uk", "asset_type": "website", "location": "https://www.lululemon.co.uk/", "group": "International e-commerce sites" } ], "out_of_scope": [ { "name": "*.lululemon.cn", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://fr.shop.lululemon.com", "asset_type": "website", "location": "https://fr.shop.lululemon.com", "group": "Out of Scope" }, { "name": "*.lululemon.me", "asset_type": "website", "location": "https://www.lululemon.me", "group": "Out of Scope" }, { "name": "careers.lululemon.com", "asset_type": "website", "location": "https://careers.lululemon.com/", "group": "Out of Scope" }, { "name": "https://info.lululemon.com", "asset_type": "website", "location": "https://info.lululemon.com", "group": "AEM Systems" }, { "name": "https://pnimages.lululemon.com", "asset_type": "website", "location": "https://pnimage.lululemon.com", "group": "AEM Systems" }, { "name": "AEM - Assets", "asset_type": "website", "location": null, "group": "AEM Systems" }, { "name": "AEM - Sites", "asset_type": "website", "location": null, "group": "AEM Systems" }, { "name": "https://www.mirror.co", "asset_type": "website", "location": "https://www.mirror.co/", "group": "lululemon Studio" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-5b3e28b10305cbb4", "name": "Luno Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/luno-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $7,500", "reward_min": "$100", "reward_max": "$7,500", "scope_rank": 3, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:14Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/luno-og/changelog/75bc83aa-24dc-4496-aaa2-9fc9abcbbb37.json" ], "in_scope": [ { "name": "Luno Android Application", "asset_type": "android", "location": "https://play.google.com/store/apps/details?hl=en&id=co.bitx.android.wallet", "group": "Mobile targets" }, { "name": "Luno iOS Application", "asset_type": "ios", "location": "https://apps.apple.com/app/bitx-wallet/id927362479", "group": "Mobile targets" }, { "name": "https://mobileapi.staging.luno.com/", "asset_type": "api", "location": "https://mobileapi.staging.luno.com/", "group": "Mobile targets" }, { "name": "*.staging.luno.com/", "asset_type": "website", "location": "https://staging.luno.com/", "group": "Web targets" }, { "name": "*staging.luno.com.ng/", "asset_type": "website", "location": "https://staging.luno.com.ng", "group": "Web targets" }, { "name": "https://api.staging.luno.com/", "asset_type": "api", "location": "https://api.staging.luno.com/", "group": "Web targets" }, { "name": "https://app.staging.luno.com/", "asset_type": "website", "location": "https://app.staging.luno.com/", "group": "Web targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-00126820d84bf20e", "name": "Magic Apps Marketplace Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/magic-apps", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:15Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/magic-apps/changelog/270acdfc-4023-4590-81e0-094bf3f19da9.json" ], "in_scope": [ { "name": "Async and Planning Poker sizing for Jira- https://marketplace.atlassian.com/apps/1223655/magic-estimations-async-and-planning-poker-sizing-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223655/magic-estimations-async-and-planning-poker-sizing-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-5cd930125a62c3e1", "name": "Magic Labs Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/magiclabs-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $3,000", "reward_min": "$250", "reward_max": "$3,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:16Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/magiclabs-mbb-og/changelog/ab298bcb-308d-4860-b3fb-cbcee5285d50.json" ], "in_scope": [ { "name": "████████████████████", "asset_type": "website", "location": null, "group": "█████████" }, { "name": "███████████████", "asset_type": "website", "location": null, "group": "█████████" }, { "name": "██████████████", "asset_type": "api", "location": null, "group": "█████████" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-5be877d1d2b3dfa7", "name": "Majid Al Futtaim Customer Solutions", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/majidalfuttaim-loyalty", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $2,500", "reward_min": "Points", "reward_max": "$2,500", "scope_rank": 4, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:17Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/majidalfuttaim-loyalty/changelog/c1fed137-acc0-4508-9396-ee9ea7a6c625.json" ], "in_scope": [ { "name": "https://www.sharerewards.com/", "asset_type": "website", "location": "https://www.sharerewards.com/", "group": "Share Rewards App" }, { "name": "Share Rewards Programme iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/share-rewards/id1465450657", "group": "Share Rewards App" }, { "name": "Share Rewards Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.maf.share&hl=en_US&gl=US", "group": "Share Rewards App" }, { "name": "https://www.vtcprodapi.maf.ae/svc/svcHifi.svc/SaveOCRReceipt", "asset_type": "api", "location": null, "group": "Share Rewards App" }, { "name": "https://production.maf.auth0.com/api/v2/", "asset_type": "api", "location": null, "group": "Share Rewards App" }, { "name": "https://production.maf.auth0.com", "asset_type": "api", "location": null, "group": "Share Rewards App" }, { "name": "https://maf-holding-prod.apigee.net", "asset_type": "api", "location": null, "group": "Share Rewards App" }, { "name": "WIFI", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/9h0hkx6nBNSDuhTSFySzPgcFyXrHOVNI", "group": "MPASS Targets" }, { "name": "SHARE", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/bN1YiObxLzbCkU6z6lRdE8jpGgEM2bqG", "group": "MPASS Targets" }, { "name": "MOE", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/8VdAQsuIqDPQhsNC1sNQtS2Jf7anninl", "group": "MPASS Targets" }, { "name": "LEGO", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/zISrnnxfS19jUJTUAtnFaTUkAJ27r8mE", "group": "MPASS Targets" }, { "name": "SKI-DUBAI", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/0dfwUn870OFm3aebVTKv0xz1viKKyXlL", "group": "MPASS Targets" }, { "name": "CRATE-BARREL", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/C1o8u0aPez0Qs5W5TGa1Cbpxq8Ieb63G", "group": "MPASS Targets" }, { "name": "THAT", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/I3ev7JpJpG4tmIKuXfQ5s29e1uUgtdaL", "group": "MPASS Targets" }, { "name": "THAT-MOBILE", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/gbYSXvAJqSRL0gb76oaWWBojroIDBJrb", "group": "MPASS Targets" }, { "name": "VOX", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/v0uVcrcyayqiTSbRUJPAWz2YJNN1tHTy", "group": "MPASS Targets" }, { "name": "VOX-MOBILE", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/9AHmz8YYRY6OVVTNHtLKjrFgwovO1eDE", "group": "MPASS Targets" }, { "name": "CBU", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/abGQxSUDBML2iWEP9P1KWjxnUi7RwfT1", "group": "MPASS Targets" }, { "name": "ALLSAINTS", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/kfwPMuCVbxNPvPpfDKiyvgVvHWmThXc8", "group": "MPASS Targets" }, { "name": "CB2", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/VhYxO10cBfgbvQ1KzcO0XYIsz9kLahZ6", "group": "MPASS Targets" }, { "name": "MAGIC-PLANET", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/xD3ktDwA9dnX1xNLig2S3oM8xvxXTnty", "group": "MPASS Targets" }, { "name": "MR-USTA", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/gsUkX5A6BA7wJLQxEiIjdC8PDrNJ42Mo", "group": "MPASS Targets" }, { "name": "MAFID-FAB", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/hqrMBSRmjuH85ACKnBvUEvOoBJllGPWn", "group": "MPASS Targets" }, { "name": "MAFID-DREAMSCAPE", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/p1Ji7cKQ7RG5KU3Jjuke5ZMG6vfWe0IV", "group": "MPASS Targets" }, { "name": "MAFID-MOE-MOBILE", "asset_type": "website", "location": "https://lazzx4o5mh.execute-api.eu-west-1.amazonaws.com/production/landing/client/mPbXCx7lA4dQNyEhhyCGMV6XKjuccbk8", "group": "MPASS Targets" }, { "name": "www.premogiftcards.com/", "asset_type": "website", "location": "https://www.premogiftcards.com/", "group": "MPASS Targets" }, { "name": "MPASS MAFid, Identity.majidalfutaaim.com", "asset_type": "website", "location": "https://identity.majidalfuttaim.com", "group": "MPASS Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-e9a9f536e2fdf50d", "name": "Majid Al Futtaim Entertainment", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/vox", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $2,500", "reward_min": "Points", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:18Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/vox/changelog/e5223795-795b-45fb-9b38-28f6d7994775.json" ], "in_scope": [ { "name": "Vox Cinemas iOS", "asset_type": "ios", "location": null, "group": "InScope Target" }, { "name": "Vox Cinemas Android", "asset_type": "android", "location": null, "group": "InScope Target" }, { "name": "https://uae.voxcinemas.com/", "asset_type": "website", "location": "https://uae.voxcinemas.com/", "group": "InScope Target" }, { "name": "https://www.skidxb.com/", "asset_type": "website", "location": "https://www.skidxb.com/", "group": "InScope Target" }, { "name": "https://www.magicplanetmena.com/", "asset_type": "website", "location": "https://www.magicplanetmena.com/", "group": "InScope Target" } ], "out_of_scope": [ { "name": "http://www.theplaymania.com/", "asset_type": "website", "location": null, "group": "Out of scope targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-1d665db53af0f4a0", "name": "Majid Al Futtaim Lifestyle", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/maffashion", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $3,500", "reward_min": "Points", "reward_max": "$3,500", "scope_rank": 4, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:19Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/maffashion/changelog/17e7a8a3-0049-417f-956e-6f7ae42679d0.json" ], "in_scope": [ { "name": "www.crateandbarrel.me", "asset_type": "website", "location": "https://www.crateandbarrel.me", "group": "In Scope Targets" }, { "name": "https://api-prod.thatconceptstore.com/", "asset_type": "api", "location": "https://api-prod.thatconceptstore.com/", "group": "In Scope Targets" }, { "name": "THAT Concept Store iOS", "asset_type": "ios", "location": "https://apps.apple.com/app/id1503045795", "group": "In Scope Targets" }, { "name": "THAT Concept Store Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.maf.thatandroid", "group": "In Scope Targets" }, { "name": "https://thatconceptstore.com", "asset_type": "website", "location": "https://thatconceptstore.com", "group": "In Scope Targets" }, { "name": "https://www.cb2.ae/en", "asset_type": "website", "location": "https://www.cb2.ae/en", "group": "In Scope Targets" }, { "name": "https://www.allsaints.me/", "asset_type": "website", "location": "https://www.allsaints.me/", "group": "In Scope Targets" }, { "name": "www.lululemon.me", "asset_type": "website", "location": "https://www.lululemon.me", "group": "In Scope Targets" }, { "name": "lapi.yellowblocks.me", "asset_type": "api", "location": "https://lapi.yellowblocks.me", "group": "In Scope Targets" }, { "name": "https://www.shiseido.me/", "asset_type": "website", "location": "https://www.shiseido.me/", "group": "In Scope Targets" }, { "name": "lego.me", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "psychobunny.me", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "fashion4less.me", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "www.americangirlmena.com", "asset_type": "website", "location": null, "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-790d2d69602f2358", "name": "Majid Al Futtaim Properties", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/mallofemirates", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $2,500", "reward_min": "Points", "reward_max": "$2,500", "scope_rank": 4, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:20Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/mallofemirates/changelog/df50d9f1-2116-4dbe-aec5-6c901d965e07.json" ], "in_scope": [ { "name": "https://www.malloftheemirates.com", "asset_type": "website", "location": "https://www.malloftheemirates.com", "group": "Mall of Emirates" }, { "name": "https://api.mafshoppingmalls.com/", "asset_type": "api", "location": "https://api.mafshoppingmalls.com/", "group": "Mall of Emirates" }, { "name": "https://apps.apple.com/app/mall-of-the-emirates-moe/id1449578693", "asset_type": "ios", "location": "https://apps.apple.com/app/mall-of-the-emirates-moe/id1449578693", "group": "Mall of Emirates" }, { "name": "https://play.google.com/store/apps/details?id=com.belongi.moe", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.belongi.moe", "group": "Mall of Emirates" }, { "name": "Partner Connect", "asset_type": "website", "location": "https://partnerconnect.maf.ae/", "group": "Mall of Emirates" }, { "name": "Ecoupon", "asset_type": "website", "location": "https://ecoupon.maf.ae/", "group": "Mall of Emirates" }, { "name": "City Centre Deira", "asset_type": "website", "location": "https://citycentredeira.com/", "group": "Mall of Emirates" }, { "name": "City Centre Al Barsha", "asset_type": "website", "location": "https://www.mycitycentrealbarsha.com/", "group": "Mall of Emirates" }, { "name": "Tilal Al Ghaf Website", "asset_type": "website", "location": "https://www.tilalalghaf.com/en", "group": "Mall of Emirates" }, { "name": "Junction Website", "asset_type": "website", "location": "https://atjunction.com/", "group": "Mall of Emirates" }, { "name": "Ghafwoods Website", "asset_type": "website", "location": "https://www.ghafwoods.com/en", "group": "Mall of Emirates" }, { "name": "MAF Properties Website", "asset_type": "website", "location": "https://www.majidalfuttaimproperties.com/en", "group": "Mall of Emirates" }, { "name": "Sitefinity Portal", "asset_type": "website", "location": "https://smbu.mafcms.com/Sitefinity/adminapp/renderer/dashboard", "group": "Mall of Emirates" }, { "name": "Belong by MAF (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/belong-by-maf/id6443736108", "group": "Mall of Emirates" }, { "name": "Belong by MAF (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.maf.communities&hl=en-US", "group": "Mall of Emirates" }, { "name": "https://maf-properties-prod.apigee.net", "asset_type": "api", "location": "https://maf-properties-prod.apigee.net", "group": "Mall of Emirates" }, { "name": "https://api.mafshoppingmalls.com", "asset_type": "api", "location": "https://api.mafshoppingmalls.com", "group": "Mall of Emirates" }, { "name": "https://smbu-api.maf.ae/", "asset_type": "api", "location": "https://smbu-api.maf.ae/", "group": "Mall of Emirates" }, { "name": "https://www.citycentremalls.com/en", "asset_type": "website", "location": "https://www.citycentremalls.com/en", "group": "Mall of Emirates" }, { "name": "Mall of the Emirates", "asset_type": "android", "location": "https://play.google.com/store/search?q=mall+of+emirates&c=apps&hl=en_IN", "group": "Mall of Emirates" }, { "name": "Mall of the Emirates IOS", "asset_type": "ios", "location": "https://apps.apple.com/in/app/mall-of-the-emirates-moe/id1449578693", "group": "Mall of Emirates" }, { "name": "Mall of Egypt iOS", "asset_type": "ios", "location": "https://apps.apple.com/in/app/mall-of-egypt-official-app/id1441905105", "group": "Mall of Emirates" }, { "name": "Mall of Egypt Android", "asset_type": "android", "location": "https://apps.apple.com/in/app/mall-of-egypt-official-app/id1441905105", "group": "Mall of Emirates" }, { "name": "City Centre", "asset_type": "ios", "location": "https://apps.apple.com/in/app/city-centres/id1448471823", "group": "Mall of Emirates" }, { "name": "City Centre", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.belongi.citycenter&hl=en_IN", "group": "Mall of Emirates" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-e5c5830dc946aef5", "name": "Majid Al Futtaim Retail", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/carrefour", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $4,000", "reward_min": "Points", "reward_max": "$4,000", "scope_rank": 2, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:21Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/carrefour/changelog/d7ee1cb5-3958-4a62-93ab-0747552a0aea.json" ], "in_scope": [ { "name": "Carrefour UAE iOS", "asset_type": "ios", "location": "https://itunes.apple.com/app/carrefour-uae/id626805470", "group": "MAF-Retail" }, { "name": "Carrefour UAE Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.aswat.carrefouruae", "group": "MAF-Retail" }, { "name": "carrefouruae.com", "asset_type": "website", "location": "https://www.carrefouruae.com/", "group": "MAF-Retail" }, { "name": "https://api-prod.retailsso.com", "asset_type": "api", "location": "https://api-prod.retailsso.com", "group": "MAF-Retail" } ], "out_of_scope": [ { "name": "https://cwingsfe.mafrservices.com/login", "asset_type": "website", "location": "https://cwingsfe.mafrservices.com/login", "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-54c317684c814148", "name": "Marketplace Expert SL", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/marketplaceexpert", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Real Estate", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:22Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/marketplaceexpert/changelog/d50d1b75-009b-490c-b554-7d06d2816afb.json" ], "in_scope": [ { "name": "Links Hierarchy (Jira Datacenter) - https://marketplace.atlassian.com/apps/1211022/?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211022/?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "Links Hierachy (Jira Cloud) - https://marketplace.atlassian.com/apps/1211022/?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211022/?hosting=cloud", "group": "In Scope" }, { "name": "Links Hierarchy (Jira Server) - https://marketplace.atlassian.com/apps/1211022/links-hierarchy-jira-agile?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211022/links-hierarchy-jira-agile?hosting=server&tab=overview", "group": "In Scope" }, { "name": "Subversion ALM for the enterprise (Jira Datacenter) - https://marketplace.atlassian.com/apps/1211642/subversion-alm-for-the-enterprise?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211642/subversion-alm-for-the-enterprise?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "Subversion ALM for the enterprise (Jira Server) - https://marketplace.atlassian.com/apps/1211642/subversion-alm-for-the-enterprise?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211642/subversion-alm-for-the-enterprise?hosting=server&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-b314a0ab874b4cad", "name": "Marvelution", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/marvelutionbv", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:23Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/marvelutionbv/changelog/88507c74-4c3d-4f51-ae25-1670e1e371b3.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1211376/jenkins-integration-for-jira?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211376/jenkins-integration-for-jira?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1211376/jenkins-integration-for-jira?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211376/jenkins-integration-for-jira?hosting=server&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1211376/jenkins-integration-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211376/jenkins-integration-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1234756/jenkins-for-compass?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1234756/jenkins-for-compass?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1236248/jenkins-for-confluence/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236248/jenkins-for-confluence/?tab=overview&hosting=cloud", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-9cac9944ac97cc74", "name": "Mastercard Public Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/mastercard", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $5,000", "reward_min": "$50", "reward_max": "$5,000", "scope_rank": 3, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:24Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/mastercard/changelog/0eb3c506-d8ac-41ee-b469-3e0c2778dd1b.json" ], "in_scope": [ { "name": "MasterCard.us - www.mastercard.us/en-us.html", "asset_type": "website", "location": "https://www.mastercard.us/en-us.html", "group": "Public Targets (In-scope)" }, { "name": "MasterCard.ch - (German) - www.mastercard.ch/de-ch.html", "asset_type": "website", "location": "https://www.mastercard.ch/de-ch.html", "group": "Public Targets (In-scope)" }, { "name": "MasterCard.ch - (French) - www.mastercard.ch/fr-ch.html", "asset_type": "website", "location": "https://www.mastercard.ch/fr-ch.html", "group": "Public Targets (In-scope)" }, { "name": "MasterCard.com.au - www.mastercard.com.au/en-au.html", "asset_type": "website", "location": "https://www.mastercard.com.au/en-au.html", "group": "Public Targets (In-scope)" }, { "name": "MasterCard.nl - www.mastercard.nl/nl-nl.html", "asset_type": "website", "location": "https://www.mastercard.nl/nl-nl.html", "group": "Public Targets (In-scope)" }, { "name": "https://developer.mastercard.com", "asset_type": "website", "location": "https://developer.mastercard.com", "group": "Public Targets (In-scope)" }, { "name": "donate.mastercard.com", "asset_type": "website", "location": "https://donate.mastercard.com", "group": "Public Targets (In-scope)" }, { "name": "Core Priceless.com - demo.priceless.com", "asset_type": "website", "location": "https://demo.priceless.com/", "group": "Public Targets (In-scope)" }, { "name": "https://priceless.com/golf/", "asset_type": "website", "location": "https://priceless.com/golf/", "group": "Public Targets (In-scope)" }, { "name": "https://performancemarketing.mastercard.com/portal/", "asset_type": "website", "location": "https://performancemarketing.mastercard.com/portal/", "group": "Public Targets (In-scope)" }, { "name": "https://src.mastercard.com/profile/enroll", "asset_type": "website", "location": "https://src.mastercard.com/profile/enroll", "group": "Public Targets (In-scope)" }, { "name": "https://src.mastercard.com/*", "asset_type": "website", "location": null, "group": "Public Targets (In-scope)" }, { "name": "SRC integration on https://masterpassteststore.com/. Only the Masterpass checkout functionality is in scope", "asset_type": "website", "location": null, "group": "Public Targets (In-scope)" }, { "name": "Finicity Connect", "asset_type": "api", "location": null, "group": "Public Targets (In-scope)" }, { "name": "Finicity- Data Services", "asset_type": "api", "location": null, "group": "Public Targets (In-scope)" }, { "name": "Finicity Decisioning", "asset_type": "api", "location": null, "group": "Public Targets (In-scope)" }, { "name": "https://www.finicity.com", "asset_type": "website", "location": "https://www.finicity.com", "group": "Public Targets (In-scope)" }, { "name": "https://consumer.finicityreports.com", "asset_type": "website", "location": "https://consumer.finicityreports.com", "group": "Public Targets (In-scope)" }, { "name": "Finicity- Open Banking Payment History application", "asset_type": "api", "location": null, "group": "Public Targets (In-scope)" }, { "name": "Finicity - OBB (Open Banking Business Service)", "asset_type": "api", "location": null, "group": "Public Targets (In-scope)" }, { "name": "https://pioneer.truata.com/", "asset_type": "website", "location": "https://pioneer.truata.com/", "group": "Public Targets (In-scope)" }, { "name": "Public Others Target", "asset_type": "other", "location": null, "group": "Public Other Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-b4bd8b3b0916e90f", "name": "MATLAB Online - Ongoing Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/matlab-online", "bounty_classification": "verified_policy", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $7,000", "reward_min": "$200", "reward_max": "$7,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "matlab-online-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:10Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/matlab-online/changelog/6b90f7f3-355b-406d-848e-3dfb0622f02a.json" ], "in_scope": [ { "name": "https://matlab.mathworks.com/ [MATLAB ONLINE]", "asset_type": "website", "location": "https://matlab.mathworks.com/", "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [], "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ], "review_flags": [] }, { "id": "bugcrowd-8965552f30be5e0b", "name": "Mattermost Public Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/mattermost-mbb-public", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,000", "reward_min": "$150", "reward_max": "$2,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:25Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/mattermost-mbb-public/changelog/12e51944-fd89-4d71-bf45-6e5868fa4d9c.json" ], "in_scope": [ { "name": "Mattermost Mobile Android", "asset_type": "android", "location": "https://play.google.com/store/search?q=mattermost&c=apps", "group": "In Scope" }, { "name": "Mattermost Mobile iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/mattermost/id1257222717", "group": "In Scope" }, { "name": "Mattermost Desktop Apps", "asset_type": "other", "location": "https://mattermost.com/apps/", "group": "In Scope" }, { "name": "https://bugcrowd-*your-own-instance*.cloud.mattermost.com/", "asset_type": "website", "location": "https://bugcrowd-*your-own-instance*.cloud.mattermost.com/", "group": "In Scope" }, { "name": "Mattermost Jira Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-jira ", "group": "In Scope" }, { "name": "Mattermost Zoom Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-zoom", "group": "In Scope" }, { "name": "Mattermost Github Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-github", "group": "In Scope" }, { "name": "Mattermost Gitlab Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-gitlab", "group": "In Scope" }, { "name": "Mattermost Calls Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-calls", "group": "In Scope" }, { "name": "Mattermost Playbooks Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-playbooks", "group": "In Scope" }, { "name": "Mattermost Boards Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-boards", "group": "In Scope" }, { "name": "Mattermost Copilot Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-ai", "group": "In Scope" }, { "name": "Mattermost Microsoft Calendar Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-mscalendar", "group": "In Scope" }, { "name": "Mattermost Plugin for Microsoft Teams Meetings", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-msteams-meetings", "group": "In Scope" }, { "name": "Mattermost Confluence Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-confluence", "group": "In Scope" }, { "name": "Mattermost MSTeams Plugin", "asset_type": "other", "location": "https://github.com/mattermost/mattermost-plugin-msteams", "group": "In Scope" } ], "out_of_scope": [ { "name": "about.mattermost.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "integrations.mattermost.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "docs.mattermost.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "academy.mattermost.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "developers.mattermost.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "forum.mattermost.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "mattermost.com (the main website)", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-e0dfaa34918b0ab2", "name": "Meetical", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/meetical", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 1, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:26Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/meetical/changelog/bd4c7c9e-b655-415b-83c4-2c0892bede47.json" ], "in_scope": [ { "name": "Meetical for Confluence Cloud - https://marketplace.atlassian.com/apps/1222405/meetical-for-confluence-cloud?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222405/meetical-for-confluence-cloud", "group": "In Scope" }, { "name": "For reporting purposes only. Use staging environment listed in brief.", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "Easy Calendar for Jira (Forge App) - https://marketplace.atlassian.com/apps/1229489/easy-calendar-integration-for-jira-sync-issues-ics-export?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1229489/easy-calendar-integration-for-jira-sync-issues-ics-export?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "1 repeated rows in the published table were collapsed in this catalog." ], "review_flags": [] }, { "id": "bugcrowd-47fd8590e5ec12ce", "name": "META-INF", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/metainfkft", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:27Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/metainfkft/changelog/d5962265-57cb-47c8-be2e-3b9619de3b68.json" ], "in_scope": [ { "name": "Email This Issue - Cloud - https://marketplace.atlassian.com/apps/4977/email-this-issue?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/4977/email-this-issue?hosting=cloud&tab=overview", "group": "In-Scope" }, { "name": "Content Exporter (Word, PDF, HTML) - https://marketplace.atlassian.com/apps/4909/content-exporter-word-pdf-html?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/4909/content-exporter-word-pdf-html?tab=overview&hosting=cloud", "group": "In-Scope" }, { "name": "Glass Project Documentation for Jira - Cloud - https://marketplace.atlassian.com/apps/1219628/glass-project-documentation-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219628/glass-project-documentation-for-jira?hosting=cloud&tab=overview", "group": "In-Scope" }, { "name": "Glass Project Information for Jira - Cloud - https://marketplace.atlassian.com/apps/1224984/glass-project-information-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224984/glass-project-information-for-jira?hosting=cloud&tab=overview", "group": "In-Scope" }, { "name": "Advanced Children Display for Confluence - https://marketplace.atlassian.com/apps/1218865/advanced-children-display-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218865/advanced-children-display-for-confluence?hosting=cloud&tab=overview", "group": "In-Scope" }, { "name": "Marketplace Integration for Jira - https://marketplace.atlassian.com/apps/1229346/marketplace-integration-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229346/marketplace-integration-for-jira?tab=overview&hosting=cloud", "group": "In-Scope" }, { "name": "Myra: CSAT, NPS & CES Feedback Hub for JSM - https://marketplace.atlassian.com/apps/3762467523/myra-csat-nps-ces-feedback-hub-for-jsm?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/3762467523/myra-csat-nps-ces-feedback-hub-for-jsm?hosting=cloud&tab=overview", "group": "In-Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-26449df1f3798802", "name": "MGM China Holdings Limited Managed Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/mgmmacau-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,500", "reward_min": "$250", "reward_max": "$7,500", "scope_rank": 4, "access_status": "open", "industry": "Hospitality", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:29Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/mgmmacau-mbb-og/changelog/b597340e-20d4-46bb-bde5-dc8c87525e15.json" ], "in_scope": [ { "name": "*.www.mgm.mo", "asset_type": "website", "location": "https://mgm.mo", "group": "MGM Grand Paradise Macau - Web" }, { "name": "*.mgm.mo", "asset_type": "website", "location": "https://mgm.mo", "group": "MGM Grand Paradise Macau - Web" }, { "name": "*.booking.mgm.mo", "asset_type": "website", "location": "https://booking.mgm.mo/", "group": "MGM Grand Paradise Macau - Web" }, { "name": "*.jobs.mgm.mo", "asset_type": "website", "location": "https://jobs.mgm.mo", "group": "MGM Grand Paradise Macau - Web" }, { "name": "*.static.mgm.mo", "asset_type": "website", "location": "https://static.mgm.mo", "group": "MGM Grand Paradise Macau - Web" }, { "name": "*.Mlife.mo", "asset_type": "website", "location": "https://Mlife.mo", "group": "MGM Grand Paradise Macau - Web" }, { "name": "*.mgmmacau.com", "asset_type": "website", "location": "https://www.mgmmacau.com", "group": "MGM Grand Paradise Macau - Web" }, { "name": "*.tickets.mgm.mo", "asset_type": "website", "location": "https://www.tickets.mgm.mo/", "group": "MGM Grand Paradise Macau - Web" }, { "name": "MGM membership rewards iOS app", "asset_type": "ios", "location": "https://apps.apple.com/mo/app/%E7%BE%8E%E9%AB%98%E6%A2%85%E6%9C%83%E5%93%A1%E6%9C%8D%E5%8B%99-mgm-membership-rewards/id6444925665?l=en-GB", "group": "MGM Grand Paradise Macau - Mobile Apps and API " }, { "name": "MGM membership rewards Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=mo.mgm.app", "group": "MGM Grand Paradise Macau - Mobile Apps and API " }, { "name": "mobileapp-gaming.mgm.mo", "asset_type": "website", "location": "http://mobileapp-gaming.mgm.mo", "group": "MGM Grand Paradise Macau - Mobile Apps and API " }, { "name": "mobileapp-non-gaming.mgm.mo", "asset_type": "website", "location": "http://mobileapp-non-gaming.mgm.mo/", "group": "MGM Grand Paradise Macau - Mobile Apps and API " } ], "out_of_scope": [ { "name": "opay.icbc.com.cn", "asset_type": "website", "location": "https://opay.icbc.com", "group": "MGM Grand Paradise Macau - Out of Scope" }, { "name": "mgmchinaholdings.com", "asset_type": "website", "location": "https://mgmchinaholdings.com", "group": "MGM Grand Paradise Macau - Out of Scope" }, { "name": "hq.hero-cloud.com", "asset_type": "website", "location": "https://hq.hero-cloud.com/", "group": "MGM Grand Paradise Macau - Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-41bbf7a8aac7694e", "name": "MobilityStream Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/mobilitystream", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:30Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/mobilitystream/changelog/2982539c-dfb0-4453-960c-da7b43db8c34.json" ], "in_scope": [ { "name": "Google Sheets Integration for Jira - https://marketplace.atlassian.com/apps/1216313/google-sheets-integration?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216313/google-sheets-integration?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Excel Online Integration - Cloud - https://marketplace.atlassian.com/apps/1220350/excel-online-integration?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220350/excel-online-integration?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Google Sheets Integration - Server - https://marketplace.atlassian.com/apps/1216313/google-sheets-integration?hosting=server&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216313/google-sheets-integration?hosting=server&tab=overview", "group": "In Scope" }, { "name": "Google Sheets Integration - Data Center - https://marketplace.atlassian.com/apps/1216313/google-sheets-integration?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216313/google-sheets-integration?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "Mobility for Jira - Cloud - https://marketplace.atlassian.com/apps/1211459/mobility-for-jira-mobile-jira-team?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211459/mobility-for-jira-mobile-jira-team?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Excel Online Integration - Server - https://marketplace.atlassian.com/apps/1220350/excel-online-integration?hosting=server&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220350/excel-online-integration?hosting=server&tab=overview", "group": "In Scope" }, { "name": "Excel Online Integration - Datacenter - https://marketplace.atlassian.com/apps/1220350/excel-online-integration?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220350/excel-online-integration?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1211459/mobility-for-jira-mobile-jira-team?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211459/mobility-for-jira-mobile-jira-team?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1220350/excel-online-integration?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220350/excel-online-integration?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1211459/mobility-for-jira-mobile-for-enterprise-teams?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211459/mobility-for-jira-mobile-for-enterprise-teams?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1211459/mobility-for-jira-mobile-for-enterprise-teams?hosting=server&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211459/mobility-for-jira-mobile-for-enterprise-teams?hosting=server&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1227353/snowflake-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227353/snowflake-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Databricks for Jira - Cloud - https://marketplace.atlassian.com/apps/1233310/databricks-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233310/databricks-for-jira?hosting=cloud", "group": "In Scope" }, { "name": "Microsoft Fabric for Jira - https://marketplace.atlassian.com/apps/738419736/microsoft-fabric-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/738419736/microsoft-fabric-for-jira?hosting=cloud", "group": "In Scope" }, { "name": "Asset Manager for Jira - https://marketplace.atlassian.com/apps/1442498121/asset-manager-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1442498121/asset-manager-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-ed08e337730b0d9a", "name": "Monash University Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/monash-mbb", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $7,500", "reward_min": "$50", "reward_max": "$7,500", "scope_rank": 4, "access_status": "open", "industry": "Education", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:31Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/monash-mbb/changelog/78091ed2-458c-4c85-ba6b-f585fd7c6d72.json" ], "in_scope": [ { "name": "identity.monash.edu", "asset_type": "website", "location": "https://identity.monash.edu/", "group": "Monash University - In Scope Targets - Tier 0" }, { "name": "mix.monash.edu", "asset_type": "api", "location": null, "group": "Monash University - In Scope Targets - Tier 0" }, { "name": "connect.monash.edu", "asset_type": "website", "location": "https://connect.monash.edu", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "identity.monash.edu", "asset_type": "website", "location": "https://identity.monash.edu", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "monash.edu", "asset_type": "website", "location": "https://www.monash.edu", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "Staff.monash", "asset_type": "website", "location": "https://staff.monash", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "apps.connect.monash.edu/", "asset_type": "website", "location": "http://apps.connect.monash.edu/", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "eassessment.monash.edu", "asset_type": "website", "location": null, "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "fileshare.ze.monash.edu", "asset_type": "website", "location": "https://fileshare.ze.monash.edu", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "cms.mobile.monash", "asset_type": "website", "location": "https://cms.mobile.monash/ ", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "mobile.monash", "asset_type": "website", "location": "https://mobile.monash/ ", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "status.mobile.monash", "asset_type": "website", "location": "https://status.mobile.monash/", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "https://monashcollege.edu.au", "asset_type": "website", "location": "https://monashcollege.edu.au", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "https://online.monash.edu/", "asset_type": "website", "location": "https://online.monash.edu/", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "Monash Study iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/monash-study/id1462126829", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "Monash Study Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=edu.monash.monashmobile", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "https://myapp.monash.edu/", "asset_type": "website", "location": "https://myapp.monash.edu/", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "https://alumni-friends.monash.edu", "asset_type": "website", "location": "https://alumni-friends.monash.edu", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "https://agent.apps.monash.edu/", "asset_type": "website", "location": "https://agent.apps.monash.edu/", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "https://compulsoryunits.monash.edu/", "asset_type": "website", "location": "https://compulsoryunits.monash.edu/", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "monash.app.nutrip.com", "asset_type": "website", "location": "https://monash.app.nutrip.com", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "*.gp.monash.edu", "asset_type": "website", "location": "https://*.gp.monash.edu", "group": "Monash University - In Scope Targets - Tier 1" }, { "name": "studentplacements.monash.edu", "asset_type": "website", "location": "https://studentplacements.monash.edu", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "unihub.monash.edu", "asset_type": "website", "location": "https://unihub.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "interviews.monash.edu", "asset_type": "website", "location": "https://interviews.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "shop.monash.edu", "asset_type": "website", "location": "https://shop.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "mlivetickets.monash.edu", "asset_type": "website", "location": "https://mlivetickets.monash.edu", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "partner.apps.monash.edu", "asset_type": "website", "location": "https://partner.apps.monash.edu", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "bSafe Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.scu.bsafe", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "bSafe iPhone App", "asset_type": "ios", "location": "https://apps.apple.com/au/app/monash-bsafe/id1462241951", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "forms.apps.monash.edu", "asset_type": "website", "location": "https://forms.apps.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "formative.eassessment.monas.edu", "asset_type": "website", "location": "https://formative.eassessment.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "monashprofessional.edu.au", "asset_type": "website", "location": "https://www.monashprofessional.edu.au/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "account-registration.monash.edu", "asset_type": "website", "location": "https://account-registration.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "pay.monashcollege.edu.au", "asset_type": "website", "location": "http://pay.monashcollege.edu.au/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "Monash e-Vigilation", "asset_type": "website", "location": "https://evigilation.monash.edu", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "student.monash", "asset_type": "website", "location": "https://student.monash", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "mids.monash.edu", "asset_type": "website", "location": "https://mids.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "ims.monash.edu", "asset_type": "website", "location": "https://ims.monash.edu", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "research.monash.edu", "asset_type": "website", "location": "https://research.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "researchmgt.monash.edu", "asset_type": "website", "location": "https://researchmgt.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "move.monash.edu", "asset_type": "website", "location": "https://move.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "collections.monash.edu", "asset_type": "website", "location": "https://collections.monash.edu/", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "equella.monash.edu", "asset_type": "website", "location": "https://equella.monash.edu", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "M-Space App iOS", "asset_type": "ios", "location": "https://apps.apple.com/ky/app/m-space/id6761056432", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "M-Space App Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.monashuniversity.mspace.android&pcampaignid=web_share", "group": "Monash University - In Scope Targets - Tier 2" }, { "name": "mix-qat.monash.edu/*", "asset_type": "api", "location": null, "group": "API Target(s)" }, { "name": "mix-dev.monash.edu/*", "asset_type": "api", "location": null, "group": "API Target(s)" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-298d2da40b206bbb", "name": "Moneytree KK", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/moneytreekkog", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$300 - $5,000", "reward_min": "$300", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:32Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/moneytreekkog/changelog/86959e61-5387-49f8-b326-483b3a91aa9d.json" ], "in_scope": [ { "name": "Moneytree Web for Web", "asset_type": "website", "location": "https://wwws-staging.moneytree.jp/link/", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree Universal Vault", "asset_type": "website", "location": "https://vault-staging.getmoneytree.com", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree Internal Redash", "asset_type": "website", "location": "https://redash-staging.getmoneytree.com/", "group": "Staging @ moneytree.jp" }, { "name": "https://app-staging.getmoneytree.com", "asset_type": "website", "location": "https://app-staging.getmoneytree.com", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree Web for Mobile", "asset_type": "website", "location": "https://wwws-staging.moneytree.jp/link/mobile/", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree Web for Mobile (with Oauth)", "asset_type": "website", "location": "https://wwws-staging.moneytree.jp/link/mobile/#/signup?client_id=38d99a6e8e9fc87c866f5aa82bdc2569c464b2323a55e0b28f658efa678e9623&redirect_uri=https://wwws-staging.moneytree.jp/link/mobile/callback&response_type=token&scope=guest_read+accounts_read+transactions_read+request_refresh", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree MyAccount", "asset_type": "website", "location": "https://myaccount-staging.getmoneytree.com", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree Business", "asset_type": "website", "location": "https://business-staging.getmoneytree.com/", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree API", "asset_type": "api", "location": "https://jp-api-staging.getmoneytree.com", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree Android Mobile Application (staging; see below)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=jp.moneytree.moneytree&hl=en_AU&gl=US", "group": "Staging @ moneytree.jp" }, { "name": "Moneytree iOS Mobile Application (production; see below)", "asset_type": "ios", "location": "https://apps.apple.com/vc/app/moneytree-finance-made-easy/id586847189", "group": "Staging @ moneytree.jp" } ], "out_of_scope": [ { "name": "moneytree.jp", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "Any production asset of Moneytree KK (excepting the iOS app)", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "getmoneytree.com", "asset_type": "website", "location": null, "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-d6f8548570a7cae7", "name": "Moovit Managed Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/moovit-mbb-og", "bounty_classification": "verified_policy", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $7,000", "reward_min": "$100", "reward_max": "$7,000", "scope_rank": 1, "access_status": "open", "industry": "Utilities", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "moovit-managed-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:11Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/moovit-mbb-og/changelog/6bded391-eff8-479d-a41c-4efdcee70ed0.json" ], "in_scope": [ { "name": "All In Scope Targets", "asset_type": "other", "location": null, "group": "Limited Double Bounty Promotion | July 7th - July 22nd", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Moovit Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.tranzmate&hl=en_US", "group": "In Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Moovit iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/moovit-all-transit-options/id498477945", "group": "In Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "WayFinder - Augmented Reality helper to find your stop", "asset_type": "ios", "location": "https://support.moovitapp.com/hc/en-us/articles/11389054527122-WayFinder-Augmented-Reality-helper-to-find-your-stop-iPhone-only", "group": "In Scope", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "Every Web App is Out Of Scope.", "asset_type": "website", "location": null, "group": "Out Of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Every app not related to the Moovit mobile application.", "asset_type": "other", "location": null, "group": "Out Of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Any WebView sources or web application rendered within the mobile applications", "asset_type": "other", "location": null, "group": "Out Of Scope", "source_ids": [ "assets-scope-2026-10-03" ] } ], "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ], "review_flags": [] }, { "id": "bugcrowd-37f0fa1cdf25bda2", "name": "Motorola Mobility Hardware Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/motorolamobility-iot", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $5,000", "reward_min": "$100", "reward_max": "$5,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Hardware", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:33Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/motorolamobility-iot/changelog/a10ee0cf-8f1a-4b6b-8f47-c4a609f20c16.json" ], "in_scope": [ { "name": "All Motorola Devices running Android 13 and above.", "asset_type": "android", "location": null, "group": "In Scope " } ], "out_of_scope": [ { "name": "Vulnerabilities related to web-app related issues", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-1f577064397b1c92", "name": "Move Work Forward", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/moveworkforward", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:34Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/moveworkforward/changelog/a0f2ba8b-4e0c-4d78-a53f-04bf3d54e605.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1231122/azure-devops-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231122/azure-devops-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1216348/microsoft-teams-confluence-connector?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216348/microsoft-teams-confluence-connector?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1222079/microsoftteams-confluence-connector-lite?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222079/microsoftteams-confluence-connector-lite?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1216325/microsoft-teams-jira-connector?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216325/microsoft-teams-jira-connector?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1216106/github-links-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216106/github-links-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1217566/github-links-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217566/github-links-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1223149/azure-devops-confluence-connector?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223149/azure-devops-confluence-connector?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Gitlab for Confluence - Cloud - https://marketplace.atlassian.com/apps/1216286/gitlab-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216286/gitlab-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1216286/gitlab-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216286/gitlab-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1233491/google-chat-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233491/google-chat-for-jira?tab=overview&hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1236139/capybara-github-azure-devops-for-jira-service-management?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236139/capybara-github-azure-devops-for-jira-service-management?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-ed595d9e42796a36", "name": "MyFitnessPal Managed Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/myfitnesspal-mbb", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $4,500", "reward_min": "$50", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Healthcare", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:35Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/myfitnesspal-mbb/changelog/51bde1a9-f3e2-44b2-ba5b-55af984be7f2.json" ], "in_scope": [ { "name": "com.myfitnesspal.android", "asset_type": "android", "location": "https://market.android.com/details?id=com.myfitnesspal.android&rdid=com.myfitnesspal.android", "group": "Mobile application (High priority targets)" }, { "name": "iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/myfitnesspal-calorie-counter/id341232718", "group": "Mobile application (High priority targets)" }, { "name": "*.myfitnesspal.com", "asset_type": "website", "location": null, "group": "In Scope Targets (Regular)" } ], "out_of_scope": [ { "name": "community.myfitnesspal.com", "asset_type": "website", "location": "https://community.myfitnesspal.com", "group": "Out of Scope" }, { "name": "community-stage.myfitnesspal.com", "asset_type": "website", "location": "https://community-stage.myfitnesspal.com", "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-e51a6028c15466d7", "name": "Navan", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/navan", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $4,500", "reward_min": "$150", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Business Management", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:36Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/navan/changelog/75a59b74-de1b-4378-9e3a-bdc83286825d.json" ], "in_scope": [ { "name": "https://app.navan.com", "asset_type": "website", "location": "https://app.navan.com", "group": "In Scope" } ], "out_of_scope": [ { "name": "tripactions.com", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-b9f276bdb7e2dc10", "name": "Navarambh", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/navarambh", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:37Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/navarambh/changelog/c530f1e0-9d1b-44c6-8a74-fb1516ab2727.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1222843/aio-tests-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222843/aio-tests-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-440c8420c2ec7898", "name": "Nemetschek", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/nemetschek", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:38Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/nemetschek/changelog/7f34a1a9-027b-4755-afb7-dacd85dd2347.json" ], "in_scope": [ { "name": "Advanced Portal Reports for Service Desk - Cloud Hosted - https://marketplace.atlassian.com/apps/1219230/advanced-portal-reports-for-service-desk?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219230/advanced-portal-reports-for-service-desk?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Self-Service Portal Report - Cloud Hosted | https://marketplace.atlassian.com/apps/1238203/self-service-portal-report?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1238203/self-service-portal-report?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Modify My Request - Cloud Hosted | https://marketplace.atlassian.com/apps/1234378/modify-my-request?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1234378/modify-my-request?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-c50ff743ec931796", "name": "NEOGOV Public Assets", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/neohrms", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $3,500", "reward_min": "$100", "reward_max": "$3,500", "scope_rank": 3, "access_status": "open", "industry": "Government", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:39Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/neohrms/changelog/7907edd2-5273-4d95-a91d-581248c4547c.json" ], "in_scope": [ { "name": "https://secure.neogov.com", "asset_type": "website", "location": "https://secure.neogov.com", "group": "In Scope" }, { "name": "https://login.neogov.com", "asset_type": "website", "location": "https://login.neogov.com", "group": "In Scope" }, { "name": "https://performance.neogov.com", "asset_type": "website", "location": "https://performance.neogov.com", "group": "In Scope" }, { "name": "https://learn.neogov.com", "asset_type": "website", "location": "https://learn.neogov.com", "group": "In Scope" }, { "name": "https://api.neogov.com", "asset_type": "website", "location": "https://api.neogov.com", "group": "In Scope" }, { "name": "https://onboard.neogov.com", "asset_type": "website", "location": "https://onboard.neogov.com", "group": "In Scope" }, { "name": "https://unified.neogov.com", "asset_type": "website", "location": "https://unified.neogov.com", "group": "In Scope" }, { "name": "https://eforms.neogov.com", "asset_type": "website", "location": "https://eforms.neogov.com", "group": "In Scope" }, { "name": "https://cdn.neogov.com", "asset_type": "website", "location": "https://cdn.neogov.com", "group": "In Scope" }, { "name": "https://www.governmentjobs.com", "asset_type": "website", "location": "https://www.governmentjobs.com", "group": "In Scope" }, { "name": "https://analytics.neogov.com", "asset_type": "website", "location": "https://analytics.neogov.com", "group": "In Scope" }, { "name": "https://powerdms.com/", "asset_type": "website", "location": "https://powerdms.com/", "group": "In Scope" }, { "name": "https://secure.cuehit.net/", "asset_type": "website", "location": "https://secure.cuehit.net", "group": "In Scope" }, { "name": "https://app.agency360.com/", "asset_type": "website", "location": "https://app.agency360.com", "group": "In Scope" }, { "name": "https://securesignin.neogov.com/", "asset_type": "website", "location": "https://securesignin.neogov.com", "group": "In Scope" }, { "name": "https://securesignin.powerdms.com/", "asset_type": "website", "location": "https://securesignin.powerdms.com/", "group": "In Scope" }, { "name": "https://hr.neogov.com", "asset_type": "website", "location": "https://hr.neogov.com", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-78e9b168b036d683", "name": "New Blue Website (NBW) - VWFS Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/volkswagen-vwfs-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 3, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:40Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/volkswagen-vwfs-mbb-og/changelog/b503b4ee-59b2-4fc5-8273-b7edb619462d.json" ], "in_scope": [ { "name": "https://www.vwfs.de", "asset_type": "website", "location": "https://www.vwfs.de", "group": "In Scope Targets" }, { "name": "https://www.vwfs.com", "asset_type": "website", "location": "https://www.vwfs.de/", "group": "In Scope Targets" }, { "name": "https://www.vwfs.pl", "asset_type": "website", "location": "https://www.vwfs.pl", "group": "In Scope Targets" }, { "name": "https://www.vwfs.com.ar", "asset_type": "website", "location": "https://www.vwfs.com.ar", "group": "In Scope Targets" }, { "name": "https://www.vwfs.com.au", "asset_type": "website", "location": "https://www.vwfs.com.au", "group": "In Scope Targets" }, { "name": "https://www.vwfs.cz", "asset_type": "website", "location": "https://www.vwfs.cz", "group": "In Scope Targets" }, { "name": "https://www.vwfs.co.in", "asset_type": "website", "location": "https://www.vwfs.co.in", "group": "In Scope Targets" }, { "name": "https://www.vwfs.ie", "asset_type": "website", "location": "https://www.vwfs.ie", "group": "In Scope Targets" }, { "name": "https://www.vwfs.es", "asset_type": "website", "location": "https://www.vwfs.es", "group": "In Scope Targets" }, { "name": "https://www.vwfs.co.za", "asset_type": "website", "location": "https://www.vwfs.co.za", "group": "In Scope Targets" }, { "name": "https://www.vwfs.mx", "asset_type": "website", "location": "https://www.vwfs.mx", "group": "In Scope Targets" }, { "name": "https://www.vwfs.it", "asset_type": "website", "location": "https://www.vwfs.it", "group": "In Scope Targets" }, { "name": "https://www.vwfs.fr", "asset_type": "website", "location": "https://www.vwfs.fr", "group": "In Scope Targets" }, { "name": "https://www.vwfs.com.br", "asset_type": "website", "location": "https://www.vwfs.com.br", "group": "In Scope Targets" }, { "name": "https://www.vwfs.pt", "asset_type": "website", "location": "https://www.vwfs.pt", "group": "In Scope Targets" }, { "name": "https://www.vwfs.sk", "asset_type": "website", "location": "https://www.vwfs.sk", "group": "In Scope Targets" }, { "name": "https://www.vwfs.gr", "asset_type": "website", "location": "https://www.vwfs.gr", "group": "In Scope Targets" }, { "name": "https://www.vwfs.dk", "asset_type": "website", "location": "https://www.vwfs.dk", "group": "In Scope Targets" }, { "name": "https://www.vwfs.nl", "asset_type": "website", "location": "https://www.vwfs.nl", "group": "In Scope Targets" }, { "name": "https://www.vwfs.kr", "asset_type": "website", "location": "https://www.vwfs.kr", "group": "In Scope Targets" }, { "name": "https://www.vwfs.com.tw", "asset_type": "website", "location": "https://www.vwfs.com.tw", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-c3256a2af6f43a79", "name": "New Relic Public Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/newrelic-mbb-og-public", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $6,000", "reward_min": "$100", "reward_max": "$6,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:41Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/newrelic-mbb-og-public/changelog/fd927439-3332-4416-b6d3-b88f31184197.json" ], "in_scope": [ { "name": "https://one.newrelic.com", "asset_type": "website", "location": "https://one.newrelic.com", "group": "Tier One Targets" }, { "name": "New Relic Android Application", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.newrelic.rpm", "group": "Tier One Targets" }, { "name": "New Relic iOS Application", "asset_type": "ios", "location": "https://apps.apple.com/ie/app/new-relic/id594038638", "group": "Tier One Targets" }, { "name": "*.nr-data.net", "asset_type": "other", "location": null, "group": "Tier Two Targets" }, { "name": "*.nr-ops.net", "asset_type": "other", "location": null, "group": "Tier Two Targets" }, { "name": "https://docs.newrelic.com/", "asset_type": "website", "location": "https://docs.newrelic.com/", "group": "Tier Two Targets" }, { "name": "https://newrelic.com/*", "asset_type": "website", "location": "https://newrelic.com/", "group": "Tier Two Targets" }, { "name": "https://newrelic.com/blog", "asset_type": "website", "location": "https://newrelic.com/blog", "group": "Tier Two Targets" }, { "name": "https://support.newrelic.com/", "asset_type": "website", "location": "https://support.newrelic.com/", "group": "Tier Two Targets" }, { "name": "https://forum.newrelic.com", "asset_type": "website", "location": "https://forum.newrelic.com", "group": "Tier Two Targets" }, { "name": "https://knowledge.newrelic.com/", "asset_type": "website", "location": "https://knowledge.newrelic.com/", "group": "Tier Two Targets" }, { "name": "https://learn.newrelic.com/", "asset_type": "website", "location": "https://learn.newrelic.com/", "group": "Tier Two Targets" }, { "name": "https://developer.newrelic.com/", "asset_type": "website", "location": "https://developer.newrelic.com/", "group": "Tier Two Targets" } ], "out_of_scope": [ { "name": "https://status.newrelic.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "New Relic open source software repos in github.com not in the list of agents or on docs.newrelic.com; New Relic Example Code, New Relic Experimental and Archived repos are explicitly out of scope.", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "https://iopipe.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://one.newrelic.com/help-xp - This specific endpoint is excluded from scope", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://newrelic.com/lp/1mind-ai-chat", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-e12a5f0e456f4fa4", "name": "Nextup.ai", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/nextupai", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:42Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/nextupai/changelog/c7330ea0-1a3b-4b36-bc30-da642d8576b5.json" ], "in_scope": [ { "name": "████████████████████████████████████████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "██████████████████████████████████████████████████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "███████████████████████████████████████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "██████████████████████████████████████████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████" }, { "name": "████████████████████████████████████████████████████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-6a819e4aafe414d2", "name": "Northwestern Mutual - Public Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/northwestern-mutual-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $6,000", "reward_min": "$200", "reward_max": "$6,000", "scope_rank": 3, "access_status": "open", "industry": "Insurance", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:43Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/northwestern-mutual-mbb-og/changelog/023b04b9-26c1-48eb-8fe2-142a83ebc901.json" ], "in_scope": [ { "name": "Anything Owned by Northwestern Mutual on the Public Internet Not Listed as Out of Scope", "asset_type": "website", "location": null, "group": "🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual" }, { "name": "216.20.176.0/20", "asset_type": "website", "location": null, "group": "🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual" }, { "name": "*.northwesternmutual.com", "asset_type": "website", "location": "https://northwesternmutual.com", "group": "🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual" }, { "name": "*.nml.com", "asset_type": "website", "location": "https://*.nml.com", "group": "🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual" }, { "name": "*.nmfn.com", "asset_type": "website", "location": "https://*.nmfn.com", "group": "🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual" }, { "name": "NM Android Mobile App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.nm.nm&hl=en_US&gl=US", "group": "🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual" }, { "name": "NM iOS Mobile App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/northwestern-mutual/id1132579006", "group": "🎯 In Scope - Public Facing Targets Owned by Northwestern Mutual" }, { "name": "Anything that Clearly Affects Northwestern Mutual But is Not Own by Northwestern Mutual", "asset_type": "website", "location": null, "group": "🐞 In Scope - Other Public Targets (Vulnerability Disclosure)" } ], "out_of_scope": [ { "name": "northwesternmutual.com/find-a-financial-advisor/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/financial/advisor/*", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/careers-apply/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/report-a-death/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/notice-of-long-term-care-form/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/financial-professionals/?name=*", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/notice-of-disability-form/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "northwesternmutual.com/notice-of-group-disability-form/", "asset_type": "website", "location": null, "group": "❌ Out of Scope - General" }, { "name": "Any Domain that Follows the Pattern */webforms/nmfnForms/*", "asset_type": "website", "location": null, "group": "❌ Temporary Rules" }, { "name": "servicenmfn.awms.apps.northwesternmutual.com/webforms/nmfnForms/*", "asset_type": "website", "location": null, "group": "❌ Temporary Rules" }, { "name": "servicenmfnstage.awms.apps.northwesternmutual.com/webforms/nmfnForms/*", "asset_type": "website", "location": null, "group": "❌ Temporary Rules" }, { "name": "servicenmfntest.awms.apps.northwesternmutual.com/webforms/nmfnForms/*", "asset_type": "website", "location": null, "group": "❌ Temporary Rules" }, { "name": "service.nmfn.com/webforms/nmfnForms/*", "asset_type": "website", "location": null, "group": "❌ Temporary Rules" }, { "name": "servicestage.nmfn.com/webforms/nmfnForms/*", "asset_type": "website", "location": null, "group": "❌ Temporary Rules" }, { "name": "servicetest.nmfn.com/webforms/nmfnForms/*", "asset_type": "website", "location": null, "group": "❌ Temporary Rules" }, { "name": "calculator.northwesternmutual.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "gbpwealth.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "mymhs.nmfn.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "nmresearchlibrary.nml.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "nwm.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "sparks-financial.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "theandersonfinancialgroupnm.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "themint.org", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "21fiveca.com", "asset_type": "website", "location": null, "group": "❌ Out of Scope - Known Third Party" }, { "name": "Emerald Publications", "asset_type": "ip_address", "location": null, "group": "❌ Out of Scope - Known Third Party" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-52bd57313a7f7e27", "name": "Nubank Brasil Managed Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/nubank", "bounty_classification": "verified_policy", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $4,000", "reward_min": "$50", "reward_max": "$4,000", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "nubank-brasil-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:13Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/nubank/changelog/90947bf4-bb77-470a-85a7-a71bc80b9ef2.json" ], "in_scope": [ { "name": "Nubank Android: Play Store", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.nu.production&hl=pt_BR&gl=US&pli=1", "group": "Core Assets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Nubank iOS App", "asset_type": "ios", "location": "https://apps.apple.com/br/app/nubank-conta-e-cart%C3%A3o/id814456780", "group": "Core Assets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "prod-*.nubank.com.br", "asset_type": "api", "location": null, "group": "Core Assets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "prod-*.nu.com.mx", "asset_type": "api", "location": null, "group": "Core Assets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "prod-*.nu.com.co", "asset_type": "api", "location": null, "group": "Core Assets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.nubank.com.br", "asset_type": "other", "location": "https://nubank.com.br/", "group": "Primary Assets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.nu.com.mx", "asset_type": "other", "location": "https://nubank.com.mx", "group": "Primary Assets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.nu.com.co", "asset_type": "other", "location": "https://nubank.com.co", "group": "Primary Assets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.nuinvest.com.br", "asset_type": "website", "location": "https://www.nuinvest.com.br/", "group": "Supplementary Assets", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "*.nuinternational.com", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.nat-a.nubank.com.br", "asset_type": "other", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "international.nubank.com.br", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "NuCommunity endpoints (BR, MX, CO)", "asset_type": "website", "location": null, "group": "Out of Scope", "source_ids": [ "assets-scope-2026-10-03" ] } ], "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ], "review_flags": [] }, { "id": "bugcrowd-872c27a03a553259", "name": "Octopus", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/octopus-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $6,000", "reward_min": "$200", "reward_max": "$6,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:44Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/octopus-og/changelog/b99d1ef0-f64e-463b-9c35-e2a080e7ee8d.json" ], "in_scope": [ { "name": "*.octopus.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "Octopus Deploy Git Repo", "asset_type": "other", "location": "https://github.com/OctopusDeploy", "group": "In Scope" }, { "name": "octopus.com", "asset_type": "website", "location": "https://octopus.com", "group": "In Scope" } ], "out_of_scope": [ { "name": "partners.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.octopus.app", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "artifactorysample.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "bamboosample.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "jenkinssample.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "teamcitysample.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "nexussample.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "myget.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "trust.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "i.octopus.com", "asset_type": "other", "location": null, "group": "Out of scope targets" }, { "name": "ir.octopus.com", "asset_type": "other", "location": null, "group": "Out of scope targets" }, { "name": "shop.octopus.com", "asset_type": "website", "location": null, "group": "Out of scope targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-f0d49161a55c2e21", "name": "Octopus Deploy", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/octopus-deploy", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $6,000", "reward_min": "$200", "reward_max": "$6,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:45Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/octopus-deploy/changelog/e680db64-f4c3-4e11-bb1f-db7b32c2b905.json" ], "in_scope": [ { "name": "Octopus Tentacle", "asset_type": "other", "location": "https://octopus.com/downloads", "group": "In Scope" }, { "name": "Octopus Server", "asset_type": "other", "location": "https://octopus.com/downloads", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-c83dcd73ad17a9b0", "name": "oDesk", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/odesk", "bounty_classification": "official_bounty_category_paid_unverified", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": null, "reward_min": null, "reward_max": null, "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T16:03:19Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/odesk/changelog/d227fbed-0493-486e-a073-7dd275423337.json" ], "in_scope": [ { "name": "███████████", "asset_type": "other", "location": null, "group": "████████" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-ca27e2d750e1bf5b", "name": "Okapya", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/okapya", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:46Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/okapya/changelog/7589ea6b-f167-4ca8-8e62-134ba3af5c61.json" ], "in_scope": [ { "name": "Connectors for Jira (Atlassian Marketplace App) - https://marketplace.atlassian.com/apps/1233908/connectors-for-jira-free?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233908/connectors-for-jira-free?hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-758420a1e8b43734", "name": "Okta", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/okta", "bounty_classification": "verified_policy", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $75,000", "reward_min": "$100", "reward_max": "$75,000", "scope_rank": 4, "access_status": "open", "industry": "Cloud", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "okta-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:17Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/okta/changelog/d4dc2398-db8d-4b89-9f7f-0aae75251307.json" ], "in_scope": [ { "name": "bugcrowd-pam-###.oktapreview.com", "asset_type": "website", "location": null, "group": "Okta Privileged Access", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "bugcrowd-pam-###.pam.oktapreview.com", "asset_type": "website", "location": null, "group": "Okta Privileged Access", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://bugcrowd-pam-###.workflows.oktapreview.com", "asset_type": "website", "location": null, "group": "Okta Workflows", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Desktop MFA for Windows", "asset_type": "other", "location": null, "group": "Okta Device Access", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Desktop MFA for macOS", "asset_type": "other", "location": null, "group": "Okta Device Access", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Password Sync for macOS", "asset_type": "other", "location": null, "group": "Okta Device Access", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "support.okta.com", "asset_type": "website", "location": "https://support.okta.com", "group": "Okta Support Portal (support.okta.com)", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://bugcrowd-pam-###.at.oktapreview.com", "asset_type": "website", "location": null, "group": "AtSpoke (Okta Access Requests) (New)", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://bugcrowd-pam-###.oktapreview.com", "asset_type": "website", "location": null, "group": "Okta (OIE) In-Scope Targets (New)", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Okta Verify Fastpass", "asset_type": "other", "location": "https://www.okta.com/fastpass/", "group": "Okta (OIE) In-Scope Targets (New)", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://bugcrowd-pam-###-admin.oktapreview.com", "asset_type": "website", "location": null, "group": "Okta (OIE) In-Scope Targets (New)", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Advanced Server Access (ASA) / (ScaleFT)", "asset_type": "website", "location": "https://www.okta.com/products/advanced-server-access/", "group": "Advanced Server Access", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "http://app.scaleft.com/", "asset_type": "website", "location": null, "group": "Advanced Server Access", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Advanced Server Access Client / Agents", "asset_type": "other", "location": "https://help.okta.com/asa/en-us/Content/Topics/Adv_Server_Access/docs/client.htm", "group": "Advanced Server Access", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Okta Verify (iOS)", "asset_type": "ios", "location": "https://apps.apple.com/us/app/okta-verify/id490179405", "group": "Other In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Okta Verify (Android)", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.okta.android.auth&hl=en_US&gl=US", "group": "Other In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Okta Verify (Mac OS)", "asset_type": "other", "location": "https://apps.apple.com/us/app/okta-verify/id490179405", "group": "Other In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Okta Verify (Windows)", "asset_type": "other", "location": null, "group": "Other In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Okta On-Prem Agents ( AD, LDAP, RDP, IWA )", "asset_type": "other", "location": null, "group": "Other In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Okta Agent Windows", "asset_type": "other", "location": "https://help.okta.com/en/prod/Content/Topics/Adv_Server_Access/docs/sftd-windows.htm", "group": "Other In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Okta Browser Plugin (IE / Firefox / Chrome)", "asset_type": "other", "location": "https://help.okta.com/en/prod/Content/Topics/Settings/download-browser-plugin.htm", "group": "Other In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "personal.trexcloud.com", "asset_type": "website", "location": null, "group": "Okta Personal", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "bugcrowd-%username%-1.oktapreview.com", "asset_type": "website", "location": null, "group": "Okta (Classic) In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "bugcrowd-%username%-2.oktapreview.com", "asset_type": "website", "location": null, "group": "Okta (Classic) In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.okta.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.trexcloud.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "login.okta.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "pages.okta.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "developer.okta.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "trust.okta.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "www.okta.com (static site)", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://scaleft.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://app.scaleft.com/p/signup", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://github.com/oktadev", "asset_type": "website", "location": "https://github.com/oktadev", "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Backend Okta non-app infrastructure", "asset_type": "other", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Network layer issues", "asset_type": "other", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "AtSpoke - Okta Workflows actions in access requests", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "AtSpoke - Entitlement bundles as a resource in access requests", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Anything not explicitly called out above as in-scope", "asset_type": "other", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] } ], "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ], "review_flags": [] }, { "id": "bugcrowd-bc1852a81ee6062a", "name": "OneTrust", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/onetrust", "bounty_classification": "verified_policy", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$300 - $6,500", "reward_min": "$300", "reward_max": "$6,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "P1 24/7", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "onetrust-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:19Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/onetrust/changelog/33280231-4d3c-4ce3-9c8f-8d8ee98aeec7.json" ], "in_scope": [ { "name": "https://pentest-app.onetrust.com/", "asset_type": "website", "location": "https://pentest-app.onetrust.com/", "group": "In-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "https://*.onetrust.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://store.onetrust.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.convercent.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.dataguidance.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://app.vendorpedia.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.preferencechoice.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.redacted.ai", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.sharedassessments.org", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://developer.onetrust.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://my.onetrust.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.vendorpedia.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.onetrustgrc.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.cookiepro.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://tv.onetrust.com/", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.cookielaw.org", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.onetrustpro.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.privacyconnect.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.onetrust.de", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.onetrust.se", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.onetrust.es", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.onetrust.fr", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.onetrust.it", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.privacytech.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.privacypedia.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.esgiq.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://*.trustweek2021.com", "asset_type": "website", "location": null, "group": "Out-of-Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] } ], "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ], "review_flags": [] }, { "id": "bugcrowd-ab096e58d404fd6b", "name": "Onward Software Solutions Inc. - Marketplace Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/onward-software-solutions-inc", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:47Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/onward-software-solutions-inc/changelog/f6331dac-f269-4d8b-8d82-42f2b0c24171.json" ], "in_scope": [ { "name": "OnLink - HR Systems Integration for Jira - https://marketplace.atlassian.com/apps/1231655/onlink-hr-systems-integration-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231655/onlink-hr-systems-integration-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "OnRamp - Employee Onboarding and Offboarding - https://marketplace.atlassian.com/apps/1232053/onramp-employee-onboarding-and-offboarding?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1232053/onramp-employee-onboarding-and-offboarding?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "OnLink AI - Integrations Toolkit - https://marketplace.atlassian.com/apps/1235010/onlink-ai-integration-toolkit-to-automate-your-workflows?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235010/onlink-ai-integration-toolkit-to-automate-your-workflows?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-00daeb0512f7127a", "name": "OpenAI", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/openai", "bounty_classification": "verified_policy", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $6,500", "reward_min": "$50", "reward_max": "$6,500", "scope_rank": 3, "access_status": "open", "industry": "Technology", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "openai-security-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:20Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/openai/changelog/e76106d3-3796-492b-9997-569446b51b72.json" ], "in_scope": [ { "name": "api.openai.com", "asset_type": "api", "location": "https://api.openai.com", "group": "API Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "ChatGPT", "asset_type": "website", "location": "https://chat.openai.com", "group": "ChatGPT", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "ChatGPT Plugins", "asset_type": "api", "location": "https://chat.openai.com", "group": "ChatGPT", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Third Party Targets", "asset_type": "website", "location": null, "group": "Third Party Corporate Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "OpenAI API Keys", "asset_type": "api", "location": null, "group": "OpenAI API Keys", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://openai.org", "asset_type": "website", "location": "https://*.openai.org", "group": "OpenAI Research Org", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.openai.org", "asset_type": "api", "location": "https://*.openai.org", "group": "OpenAI Research Org", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "openai.com", "asset_type": "website", "location": "https://openai.com/", "group": "Other OpenAI Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.openai.com", "asset_type": "other", "location": null, "group": "Other OpenAI Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Developer Platform Playground", "asset_type": "website", "location": "https://platform.openai.com/playground", "group": "Other OpenAI Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Other", "asset_type": "other", "location": null, "group": "Other OpenAI Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Codex Desktop", "asset_type": "other", "location": null, "group": "Codex", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [], "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ], "review_flags": [] }, { "id": "bugcrowd-8aad9224e529fec9", "name": "OpenSea Managed Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/opensea", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$125 - $3,000,000", "reward_min": "$125", "reward_max": "$3,000,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:48Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/opensea/changelog/fcf4828b-8af5-4c9a-9516-6b41140343eb.json" ], "in_scope": [ { "name": "opensea.io", "asset_type": "website", "location": "https://opensea.io/", "group": "Opensea.io" }, { "name": "http://wallet.opensea.io/", "asset_type": "website", "location": "http://wallet.opensea.io/", "group": "Embedded Wallet Experience Powered by Privy" }, { "name": "io.opensea - Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=io.opensea&hl=en_US&gl=US", "group": "io.opensea - Android App" }, { "name": "io.opensea - iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/opensea-nft-marketplace/id1582861796", "group": "io.opensea - iOS App" }, { "name": "OpenSea MCP", "asset_type": "other", "location": "https://mcp.opensea.io", "group": "OpenSea MCP" }, { "name": "https://github.com/ProjectOpenSea/seaport#deployments", "asset_type": "other", "location": "https://github.com/ProjectOpenSea/seaport#deployments", "group": "Seaport Deployment" }, { "name": "https://etherscan.io/address/0x0000a26b00c1F0DF003000390027140000fAa719", "asset_type": "other", "location": "https://etherscan.io/address/0x0000a26b00c1F0DF003000390027140000fAa719", "group": "Fee Collector Smart Contract" }, { "name": "https://etherscan.io/address/0x00005EA00Ac477B1030CE78506496e8C2dE24bf5", "asset_type": "other", "location": "https://etherscan.io/address/0x00005EA00Ac477B1030CE78506496e8C2dE24bf5", "group": "Seadrop Smart Contract" }, { "name": "OpenSea Solana Marketplace Program", "asset_type": "other", "location": null, "group": "OpenSea Solana Marketplace Program" }, { "name": "Agent SDKs", "asset_type": "other", "location": null, "group": "OpenSea Agent SDKs" }, { "name": "Broken Link", "asset_type": "website", "location": null, "group": "Broken Links" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-a216bcdd2eca3cdd", "name": "Opera Public Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/opera", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $5,000", "reward_min": "$50", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:50Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/opera/changelog/da132bfc-7cac-47cb-b07b-8069d169a63e.json" ], "in_scope": [ { "name": "auth.opera.com", "asset_type": "website", "location": "https://auth.opera.com", "group": "Primary Targets" }, { "name": "accounts.opera.com", "asset_type": "api", "location": "https://accounts.opera.com", "group": "Primary Targets" }, { "name": "flow.opera.com", "asset_type": "api", "location": "https://flow.opera.com", "group": "Primary Targets" }, { "name": "autoupdate.geo.opera.com", "asset_type": "api", "location": "https://autoupdate.geo.opera.com", "group": "Primary Targets" }, { "name": "net.geo.opera.com", "asset_type": "api", "location": "https://net.geo.opera.com", "group": "Primary Targets" }, { "name": "download.opera.com", "asset_type": "website", "location": "https://download.opera.com", "group": "Primary Targets" }, { "name": "speeddials.opera.com", "asset_type": "api", "location": "https://speeddials.opera.com", "group": "Primary Targets" }, { "name": "browser-notifications.opera.com", "asset_type": "api", "location": "https://browser-notifications.opera.com", "group": "Primary Targets" }, { "name": "www.opera.com", "asset_type": "website", "location": "https://www.opera.com/", "group": "Primary Targets" }, { "name": "Opera PC", "asset_type": "other", "location": "https://www.opera.com/computer/thanks?ni=stable&os=windows", "group": "Primary Targets" }, { "name": "Opera GX", "asset_type": "other", "location": "https://www.opera.com/computer/thanks?ni=eapgx&os=windows", "group": "Primary Targets" }, { "name": "Opera Neon", "asset_type": "other", "location": "https://www.operaneon.com", "group": "Primary Targets" }, { "name": "Opera Air", "asset_type": "other", "location": "https://www.opera.com/computer/thanks?ni=opera_air&os=windows", "group": "Primary Targets" }, { "name": "get.geo.opera.com", "asset_type": "website", "location": "https://get.geo.opera.com", "group": "Primary Targets" }, { "name": "Opera Mini", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.opera.mini.native", "group": "Mobile Targets" }, { "name": "Apex Football", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.opera.app.sports", "group": "Mobile Targets" }, { "name": "Opera for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.opera.browser", "group": "Mobile Targets" }, { "name": "Opera News", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.opera.app.news", "group": "Mobile Targets" }, { "name": "Opera GX for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.opera.gx", "group": "Mobile Targets" }, { "name": "Opera for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/opera-ai-browser-with-vpn/id1411869974", "group": "Mobile Targets" }, { "name": "Opera GX for iOS", "asset_type": "ios", "location": "https://apps.apple.com/pl/app/opera-gx/id1559740799", "group": "Mobile Targets" }, { "name": "MiniPay", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.opera.minipay", "group": "Mobile Targets" }, { "name": "cryptowallet.opera-api.com", "asset_type": "api", "location": "https://cryptowallet.opera-api.com", "group": "Secondary Targets" }, { "name": "suggestions.opera-api.com", "asset_type": "api", "location": "https://suggestions.opera-api.com", "group": "Secondary Targets" }, { "name": "*.opera.software", "asset_type": "other", "location": null, "group": "Secondary Targets" }, { "name": "weather.opera-api.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "push.opera.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.osp.opera.software", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "bugs.opera.com", "asset_type": "website", "location": "https://bugs.opera.com/", "group": "Secondary Targets" }, { "name": "*.opera.technology", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "https://gx.games", "asset_type": "website", "location": "https://gx.games", "group": "Secondary Targets" }, { "name": "https://create.gx.games", "asset_type": "website", "location": "https://create.gx.games", "group": "Secondary Targets" }, { "name": "https://gx.me", "asset_type": "website", "location": "https://gx.me", "group": "Secondary Targets" }, { "name": "features.opera-api.com", "asset_type": "api", "location": "https://features.opera-api.com", "group": "Secondary Targets" }, { "name": "cdn-store.opera-api.com", "asset_type": "api", "location": "https://cdn-store.opera-api.com", "group": "Secondary Targets" }, { "name": "*.sec-tunnel.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.opera.com", "asset_type": "website", "location": null, "group": "Secondary Targets" }, { "name": "exchange.opera.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "merchandise.opera-api.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "blocklist.opera-api.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "gx.opera-api.com", "asset_type": "api", "location": "https://gx.opera-api.com", "group": "Secondary Targets" }, { "name": "37.228.104.0/21", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "77.111.244.0/22", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "82.145.208.0/20", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "91.203.96.0/22", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "102.23.96.0/22", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "103.83.120.0/22", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "107.167.96.0/19", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "141.0.8.0/21", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "185.26.180.0/22", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "195.189.143.0/24", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "203.89.100.0/22", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "marketplace.gamemaker.io", "asset_type": "website", "location": null, "group": "Secondary Targets" }, { "name": "*.opera-mini.net", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.opera.news", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.operanewsapp.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "GameMaker Studio 2", "asset_type": "other", "location": null, "group": "Secondary Targets" }, { "name": "*.yoyogames.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "www.gamemaker.io", "asset_type": "website", "location": "https://www.gamemaker.io", "group": "Secondary Targets" }, { "name": "cashback.opera.com", "asset_type": "website", "location": "https://cashback.opera.com/", "group": "Secondary Targets" }, { "name": "*.apex-football.com", "asset_type": "website", "location": null, "group": "Secondary Targets" }, { "name": "*.operafootball.com", "asset_type": "website", "location": null, "group": "Secondary Targets" }, { "name": "*.feednews.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.dailyadvent.com", "asset_type": "website", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.games/gxc", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.games/dc", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.games/dev", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.games/profile", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.games/session", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.games/gms", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.games/gx", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.games/pub", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.gx.me/me", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.apexnews.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.apexscores.io", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.opr.news", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.osite99.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.savi.xyz", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "*.rtbscale.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "ofp.adx.opera.com", "asset_type": "website", "location": "https://ofp.adx.opera.com", "group": "Secondary Targets" }, { "name": "ofa.adx.opera.com", "asset_type": "website", "location": "https://ofa.adx.opera.com", "group": "Secondary Targets" }, { "name": "cms.adx.opera.com", "asset_type": "website", "location": "https://cms.adx.opera.com", "group": "Secondary Targets" }, { "name": "auth-adx.op-mobile.opera.com", "asset_type": "website", "location": "https://auth-adx.op-mobile.opera.com", "group": "Secondary Targets" }, { "name": "*.adx.opera.com", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "operaneon.com", "asset_type": "website", "location": "https://operaneon.com", "group": "Secondary Targets" }, { "name": "api.neon.opera.com/neon/pub", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.neon.opera.com/neon/store", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "api.neon.opera.com/pub", "asset_type": "api", "location": null, "group": "Secondary Targets" }, { "name": "https://neon.opera.com/cards/", "asset_type": "website", "location": "https://neon.opera.com/cards/", "group": "Secondary Targets" } ], "out_of_scope": [ { "name": "concurso.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "investor.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "help.yoyogames.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "bugs.yoyogames.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "admanager.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "accountsstage.yoyogames.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "control.gx-servers.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "help.gx-servers.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "verizon-us-seattle.opera-mini.net", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "s2{1,2}-05-08-v09.opera-mini.net", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "verizon-us-lvs-seattle.opera-mini.net", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "107.167.127.4{0,1}", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "jobs.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "verizon-us-lvs-ashburn.opera-mini.net", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "interstitial.opera-mini.net", "asset_type": "api", "location": null, "group": "Out of scope" }, { "name": "certs.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "checkout.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "contest.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "catch.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "wallpaper.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "tabfulness.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" }, { "name": "32s.opera.com", "asset_type": "website", "location": null, "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-dce78967aa941ffc", "name": "Opsgenie", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/opsgenie", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,000", "reward_min": "$100", "reward_max": "$4,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:51Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/opsgenie/changelog/ff365908-5159-4d8d-9895-43512891a90b.json" ], "in_scope": [ { "name": "app.opsgenie.com", "asset_type": "website", "location": "https://app.opsgenie.com", "group": "In Scope" }, { "name": "mobileapp.opsgenie.com", "asset_type": "website", "location": "https://mobileapp.opsgenie.com", "group": "In Scope" }, { "name": "*.opsgenie.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "Opsgenie (IoS)", "asset_type": "ios", "location": null, "group": "In Scope" }, { "name": "Opsgenie (Android)", "asset_type": "android", "location": null, "group": "In Scope" } ], "out_of_scope": [ { "name": "Opsgenie Production (billing systems, third parties)", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Any internal or development services.", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-b733e2b078ea0162", "name": "Optimizely", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/optimizely", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $3,500", "reward_min": "Points", "reward_max": "$3,500", "scope_rank": 3, "access_status": "open", "industry": "Business Management", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:52Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/optimizely/changelog/34794730-0036-45c7-b6c6-9a0b462b1233.json" ], "in_scope": [ { "name": "https://app.optimizely.com/", "asset_type": "website", "location": "https://app.optimizely.com/", "group": "In scope" }, { "name": "https://cdn.optimizely.com/", "asset_type": "website", "location": "https://cdn.optimizely.com/", "group": "In scope" }, { "name": "https://cdn-pci.optimizely.com/", "asset_type": "website", "location": "https://cdn-pci.optimizely.com/", "group": "In scope" }, { "name": "https://optimizely-edge.com", "asset_type": "website", "location": "https://optimizely-edge.com", "group": "In scope" }, { "name": "https://api.optimizely.com/", "asset_type": "api", "location": "https://api.optimizely.com/", "group": "In scope" }, { "name": "https://dxc.episerver.net/", "asset_type": "website", "location": "https://dxc.episerver.net/ ", "group": "In scope" }, { "name": "https://paasportal.episerver.net/", "asset_type": "website", "location": "https://paasportal.episerver.net/", "group": "In scope" }, { "name": "https://paasportal.episerver.net/api/v1.0/", "asset_type": "website", "location": "https://paasportal.episerver.net/api/v1.0/", "group": "In scope" }, { "name": "https://app.welcomesoftware.com/", "asset_type": "website", "location": "https://app.welcomesoftware.com/", "group": "In scope" }, { "name": "https://accounts.welcomesoftware.com/", "asset_type": "website", "location": "https://accounts.welcomesoftware.com/", "group": "In scope" }, { "name": "https://api.welcomesoftware.com/", "asset_type": "api", "location": "https://api.welcomesoftware.com/", "group": "In scope" }, { "name": "https://cdn-app.welcomesoftware.com/", "asset_type": "website", "location": "https://cdn-app.welcomesoftware.com/", "group": "In scope" }, { "name": "https://analytics.welcomesoftware.com/", "asset_type": "website", "location": "https://analytics.welcomesoftware.com/", "group": "In scope" }, { "name": "https://flags.expeng.optimizely.com", "asset_type": "api", "location": "https://flags.expeng.optimizely.com", "group": "In scope" }, { "name": "https://accounts.cmp.optimizely.com/", "asset_type": "website", "location": "https://accounts.cmp.optimizely.com/", "group": "In scope" } ], "out_of_scope": [ { "name": "https://www.optimizely.com/", "asset_type": "website", "location": "https://www.optimizely.com/", "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-9e66537b932e44c2", "name": "Optus Managed Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/optus-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $5,000", "reward_min": "$150", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:53Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/optus-mbb-og/changelog/e1f284c8-3041-4ae0-ab63-b76726884600.json" ], "in_scope": [ { "name": "Optus android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=au.com.optus.selfservice&hl=en_AU&gl=US", "group": "In Scope - Optus " }, { "name": "https://webmail.optusnet.com.au/", "asset_type": "website", "location": "https://webmail.optusnet.com.au/", "group": "In Scope - Optus " }, { "name": "Optus iOS App", "asset_type": "ios", "location": "https://apps.apple.com/au/app/my-optus/id503716230", "group": "In Scope - Optus " }, { "name": "*.optus.com.au", "asset_type": "website", "location": null, "group": "In Scope - Optus " }, { "name": "FM - EFRAMS", "asset_type": "website", "location": "https://www.outsourcing.optus.net.au/eFRAMS3/", "group": "In Scope - Optus " }, { "name": "FM2 – EFRAMS", "asset_type": "website", "location": "https://www.outsourcing2.optus.net.au/eFRAMS3/", "group": "In Scope - Optus " }, { "name": "OB PORTAL", "asset_type": "website", "location": "https://www.optus.com.au/osp-ecare", "group": "In Scope - Optus " }, { "name": "https://optus.my.site.com/MyHub/s/", "asset_type": "website", "location": "https://optus.my.site.com/MyHub/s/", "group": "In Scope - Optus " }, { "name": "Prepaid Activation", "asset_type": "website", "location": "https://www.optus.com.au/prepaid/activate", "group": "In Scope - Optus " }, { "name": "https://gateway.optus.com.au/api/ai-search/search/v1", "asset_type": "api", "location": null, "group": "Optus - AI Search " }, { "name": "vpn01.syd.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "172.24.250.128", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.65.253", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "Naasapi.optus.com.au", "asset_type": "api", "location": null, "group": "In scope - Infrastructure " }, { "name": "ras1.optus.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "ns1.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "ns2.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "dns0.optus.net.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "dns1.optus.net.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "ddosportal.optus.com.au", "asset_type": "network", "location": "https://ddosportal.optus.com.au", "group": "In scope - Infrastructure " }, { "name": "172.26.39.9", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "172.26.2.133", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.28.90.133", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.28.90.134", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.28.90.148", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.28.90.164", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.28.90.196", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "https://ogws.optusnet.com.au/", "asset_type": "website", "location": "https://ogws.optusnet.com.au/", "group": "In scope - Infrastructure " }, { "name": "https://oes.optusnet.com.au/", "asset_type": "website", "location": "https://oes.optusnet.com.au/", "group": "In scope - Infrastructure " }, { "name": "speedtest-sydney.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-newcastle.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-blacktown.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-melbourne.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-geelong.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-hobart.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-perth.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-broome.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-rockingham.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-eastburwood.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-brisbane.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-goldcoast.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "speedtest-townsville.optusnet.com.au", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "202.139.138.208/28", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.127.0/24", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.128.128/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.129.0/24", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.16.75.0/24", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.98.0/26", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.98.144/28", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.98.253/32", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.98.254/32", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.125.32/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.128.0/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.128.64/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.128.160/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.13.128.192/26", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.16.76.0/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.16.76.32/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.16.76.64/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.16.76.96/27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.16.76.30", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.16.78.30", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.205.252", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.205.253", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.205.254", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.205.244", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.205.245", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.235.18", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.33", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.132.28", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.13", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.14", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.132.82", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.132.101", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.15", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.152", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.152.243", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.32", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.60", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.35", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.43", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.89", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.93.8", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.61", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.36", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.44", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.90", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.93.9", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.51", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.67", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.52", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.148", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.68", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.132.27", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.161", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.91", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.163", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.128", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.149", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.150", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.5", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.21", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.6", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.22", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.3", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.19", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.4", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.20", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.104", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.94", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.107", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.185", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.132", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.108", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.124", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.116", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.100", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.140", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.92", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.133", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.109", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.125", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.101", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.141", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.93", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.151", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.244", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.96", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.152.202", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.97", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.133.115", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.132.223", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.93.5", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.93.6", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.152.120", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.152.114", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.29.152.97", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "211.31.132.98", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.231.44", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.231.36", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.231.45", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.231.37", "asset_type": "network", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.74", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.75", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.76", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.77", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.78", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.79", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.80", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.81", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.82", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.7", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.8", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.9", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.13", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.14", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.15", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.16", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.17", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "203.17.138.18", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "61.88.222.56", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "61.88.222.57", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "61.88.222.58", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "61.88.222.59", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.172", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.180", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.188", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " }, { "name": "198.142.152.196", "asset_type": "ip_address", "location": null, "group": "In scope - Infrastructure " } ], "out_of_scope": [ { "name": "https://www.optus.com.au/portal/*", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "personal.optus.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "yes4good.optus.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.optus.com.au/web/ocaportal.portal", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "103.213.120.0/24", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "103.213.121.0/24", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "ibs.optus.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "ibs2.optus.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.nsw.optusnet.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.vic.optusnet.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.wa.optusnet.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.sa.optusnet.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.qld.optusnet.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.nt.optusnet.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.act.optusnet.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "*.tas.optusnet.com.au", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "samsung-pp.optussport.tv", "asset_type": "website", "location": "https://samsung-pp.optussport.tv/", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "chromecast-pp.optussport.tv", "asset_type": "website", "location": "https://chromecast-pp.optussport.tv", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "api-cdn.optussport.info/api/", "asset_type": "api", "location": "https://api-cdn.optussport.info/api/*", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "static.sport-pp.optus.com.au/api/", "asset_type": "api", "location": "https://static.sport-pp.optus.com.au/api/*", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "stats-pp.akamai.optussport.tv", "asset_type": "api", "location": "https://stats-pp.akamai.optussport.tv", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "stats.optussport.info", "asset_type": "api", "location": "https://stats.optussport.info", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "cms-uat.optussport.tv", "asset_type": "website", "location": "https://cms-uat.optussport.tv", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "cms-qa.optussport.tv", "asset_type": "website", "location": "https://cms-qa.optussport.tv", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "static.cms-uat.optussport.tv", "asset_type": "website", "location": "https://static.cms-uat.optussport.tv", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "static.cms-qa.optussport.tv", "asset_type": "website", "location": "https://static.cms-qa.optussport.tv", "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "Any other Optus Sport asset", "asset_type": "other", "location": null, "group": "Out of Scope - Optus Sport Pre Production" }, { "name": "1.44.64.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "1.44.80.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "1.44.112.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "1.44.144.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "1.44.192.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.0.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.32.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.48.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.64.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.80.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.96.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.128.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.144.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.160.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "59.154.176.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "119.225.0.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "119.225.16.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "119.225.32.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "119.225.48.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "124.19.0.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "124.19.16.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "124.19.32.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "124.19.48.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "124.19.96.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "124.19.112.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "125.63.128.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "125.63.144.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "125.63.160.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "125.63.176.0/20", "asset_type": "ip_address", "location": null, "group": "Out of Scope IP's" }, { "name": "sport.optus.com.au", "asset_type": "website", "location": "https://sport.optus.com.au/", "group": "Out of Scope - Optus Sport Production" }, { "name": "chromecast.optussport.tv", "asset_type": "website", "location": "https://samsung.optussport.tv", "group": "Out of Scope - Optus Sport Production" }, { "name": "samsung.optussport.tv", "asset_type": "website", "location": "https://samsung.optussport.tv", "group": "Out of Scope - Optus Sport Production" }, { "name": "api-cdn.optussport.tv", "asset_type": "api", "location": "https://api-cdn.optussport.tv/api/*", "group": "Out of Scope - Optus Sport Production" }, { "name": "static.sport.optus.com.au", "asset_type": "api", "location": "https://static.sport.optus.com.au/api/*", "group": "Out of Scope - Optus Sport Production" }, { "name": "stats.sport.optus.com.au", "asset_type": "api", "location": "https://stats.sport.optus.com.au", "group": "Out of Scope - Optus Sport Production" }, { "name": "stats.akamai.optussport.tv", "asset_type": "api", "location": "https://stats.akamai.optussport.tv", "group": "Out of Scope - Optus Sport Production" }, { "name": "cms.optussport.tv", "asset_type": "website", "location": "https://cms.optussport.tv", "group": "Out of Scope - Optus Sport Production" }, { "name": "static.cms.optussport.tv", "asset_type": "website", "location": "https://static.cms.optussport.tv", "group": "Out of Scope - Optus Sport Production" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-a9b77aadf6364449", "name": "Opus Guard Marketplace Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/opus-guard-market", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:54Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/opus-guard-market/changelog/51f20d7d-3c7d-4eee-b8fb-16d25d3dbe7e.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1233769/content-retention-manager-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233769/content-retention-manager-for-confluence?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1234057/content-retention-manager-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1234057/content-retention-manager-for-jira?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1237739?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237739?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1237740?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237740?tab=overview&hosting=cloud", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-331f87409b14080b", "name": "Orderly Network Public Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/orderlynetwork-mbb-og2", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $9,000", "reward_min": "$200", "reward_max": "$9,000", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:55Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/orderlynetwork-mbb-og2/changelog/26b379db-8dce-4ac4-9792-2861ed518825.json" ], "in_scope": [ { "name": "████████████████████████", "asset_type": "website", "location": null, "group": "█████████████" }, { "name": "████████████████████████", "asset_type": "api", "location": null, "group": "█████████████" }, { "name": "████████████████████████████", "asset_type": "api", "location": null, "group": "█████████████" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-0f2855e69aa69153", "name": "Orderly Network: Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/orderlynetwork-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $9,000", "reward_min": "$200", "reward_max": "$9,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:56Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/orderlynetwork-mbb-og/changelog/4248ff0c-264f-4a90-910a-2d3d5d5bcb33.json" ], "in_scope": [ { "name": "████████████████████████████", "asset_type": "api", "location": null, "group": "██████████████" }, { "name": "████████████████████████", "asset_type": "website", "location": null, "group": "██████████████" }, { "name": "████████████████████████", "asset_type": "api", "location": null, "group": "██████████████" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-d59899b7c4f774ee", "name": "Origin Energy", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/originenergy-og1", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $2,500", "reward_min": "$50", "reward_max": "$2,500", "scope_rank": 4, "access_status": "open", "industry": "Utilities", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:57Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/originenergy-og1/changelog/0596f021-4ec5-453c-8ab9-08340895d163.json" ], "in_scope": [ { "name": "https://www.originenergy.com.au/", "asset_type": "website", "location": "https://www.originenergy.com.au/", "group": "In Scope - Origin" }, { "name": "*.origindigital-pac.com.au", "asset_type": "website", "location": null, "group": "In Scope - Origin" }, { "name": "*.odcdn.com.au", "asset_type": "website", "location": null, "group": "In Scope - Origin" }, { "name": "dataportal.originenergy.com.au", "asset_type": "website", "location": "https://dataportal.originenergy.com.au", "group": "In Scope - Origin" }, { "name": "*.support.originenergy.com.au", "asset_type": "website", "location": null, "group": "In Scope - Origin" }, { "name": "*.api.originenergy.com.au", "asset_type": "api", "location": null, "group": "In Scope - Origin" }, { "name": "*.download.originenergy.com.au", "asset_type": "website", "location": null, "group": "In Scope - Origin" }, { "name": "https://api.rx.originenergy.com.au/v1/lpg/graphql", "asset_type": "api", "location": "https://api.rx.originenergy.com.au/v1/lpg/graphql", "group": "API - Origin" }, { "name": "https://www.winconnect.com.au/moving-out/", "asset_type": "website", "location": "https://www.winconnect.com.au/moving-out/", "group": "Winconnect" }, { "name": "https://www.winconnect.com.au/get-connected/", "asset_type": "website", "location": "https://www.winconnect.com.au/get-connected/", "group": "Winconnect" }, { "name": "https://customerportal.winconnect.com.au/login", "asset_type": "website", "location": "https://customerportal.winconnect.com.au/login", "group": "Winconnect" }, { "name": "portal.myconnect.com.au", "asset_type": "website", "location": null, "group": "MyConnect" }, { "name": "myconnect.com.au", "asset_type": "website", "location": null, "group": "MyConnect" }, { "name": "portal.myconnect.com.au/new-connection", "asset_type": "website", "location": null, "group": "MyConnect" }, { "name": "hub.myconnect.com.au", "asset_type": "website", "location": null, "group": "MyConnect" }, { "name": "ssu.staging.myconnect.com.au", "asset_type": "website", "location": "https://ssu.staging.myconnect.com.au/get-connected", "group": "MyConnect" }, { "name": "portal.anz.kinergysolutions.com", "asset_type": "website", "location": "https://portal.anz.kinergysolutions.com", "group": "Kinergy" }, { "name": "portal-api.anz.kinergysolutions.com", "asset_type": "api", "location": "https://portal-api.anz.kinergysolutions.com", "group": "Kinergy" }, { "name": "portal.originzero.com.au", "asset_type": "website", "location": "https://portal.originzero.com.au", "group": "Origin Zero" }, { "name": "api-portal.originzero.com.au", "asset_type": "api", "location": "https://api-portal.originzero.com.au", "group": "Origin Zero" }, { "name": "sign.originzero.com.au", "asset_type": "website", "location": "https://sign.originzero.com.au", "group": "Origin Zero" }, { "name": "businessportal.origin.com.au", "asset_type": "website", "location": "https://businessportal.origin.com.au", "group": "MyBusiness" }, { "name": "api-businessportal.origin.com.au", "asset_type": "api", "location": "https://api-businessportal.origin.com.au", "group": "MyBusiness" } ], "out_of_scope": [ { "name": "https://www.originenergy.com.au/moving/", "asset_type": "website", "location": "https://www.originenergy.com.au/moving/", "group": "Out of Scope" }, { "name": "https://auth.api.originenergy.com.au/**", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://origin-energy.formstack.com/**", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://ssu.myconnect.com.au/", "asset_type": "website", "location": "https://ssu.myconnect.com.au/**", "group": "Out of Scope" }, { "name": "Renew Eclipse", "asset_type": "website", "location": "https://reneweclipse.originenergy.com.au/*", "group": "Out of Scope" }, { "name": "GraphQL Schema", "asset_type": "other", "location": "https://api.rx.originenergy.com.au/v1/gateway/schema/graphql", "group": "Out of Scope" }, { "name": "https://www.compareandconnect.com.au/", "asset_type": "website", "location": null, "group": "1Bill" }, { "name": "https://agent.compareandconnect.com.au/", "asset_type": "website", "location": null, "group": "1Bill" }, { "name": "https://fastconnect.co.nz", "asset_type": "website", "location": null, "group": "1Bill" }, { "name": "https://Yourporter.com.au", "asset_type": "website", "location": null, "group": "1Bill" }, { "name": "https://raywhitehomenow.com/", "asset_type": "website", "location": null, "group": "1Bill" }, { "name": "solarquotes.com.au/leads", "asset_type": "website", "location": "https://www.solarquotes.com.au/leads/", "group": "SolarQuotes" }, { "name": "solarquotes.com.au/suppliers", "asset_type": "website", "location": "https://www.solarquotes.com.au/suppliers/", "group": "SolarQuotes" }, { "name": "solarquotes.com.au/wp-admin", "asset_type": "website", "location": "https://www.solarquotes.com.au/wp-admin/", "group": "SolarQuotes" }, { "name": "manufacturers.solarquotes.com.au", "asset_type": "website", "location": "https://manufacturers.solarquotes.com.au/", "group": "SolarQuotes" }, { "name": "solarquotes.com.au/quote/start", "asset_type": "website", "location": "https://www.solarquotes.com.au/quote/start/", "group": "SolarQuotes" }, { "name": "solarquotes.com.au/quotesv2", "asset_type": "website", "location": "https://www.solarquotes.com.au/quotesv2/", "group": "SolarQuotes" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-756e4fbd08de38da", "name": "OSL Managed Public Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/osl-mbb-og1", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $1,500", "reward_min": "Points", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:58Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/osl-mbb-og1/changelog/fcc595ef-dd4c-4cef-ae4d-875b75364d2f.json" ], "in_scope": [ { "name": "www.osl.com/hk-en", "asset_type": "website", "location": "https://www.osl.com/hk-en", "group": "In scope" }, { "name": "www.osl.com/en", "asset_type": "website", "location": "https://www.osl.com/en", "group": "In scope" }, { "name": "OSL Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.oslmobile.global", "group": "In scope" }, { "name": "OSL iOS app", "asset_type": "ios", "location": "https://apps.apple.com/es/app/osl-buy-bitcoin-crypto/id6743699672", "group": "In scope" } ], "out_of_scope": [ { "name": "https://www.osl.com/id-id", "asset_type": "website", "location": null, "group": "Out of the Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-f2a920ecc6c44f7f", "name": "OST Consulting SRL Marketplace Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/ost-consulting-market", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:59Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/ost-consulting-market/changelog/829f9481-6525-4107-b1c4-586691d1e28e.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1230344/issue-templates-for-jira-cloud?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230344/issue-templates-for-jira-cloud?hosting=cloud", "group": "In Scope Target " }, { "name": "https://atlassian.ost-consulting.be", "asset_type": "api", "location": "https://atlassian.ost-consulting.be", "group": "In Scope Target " }, { "name": "https://marketplace.atlassian.com/apps/1233398/easy-clone-for-jira-cloud-free?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233398/easy-clone-for-jira-cloud-free?hosting=cloud&tab=overview", "group": "In Scope Target " }, { "name": "https://marketplace.atlassian.com/apps/1235901/html-macro-pro-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235901/html-macro-pro-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Target " } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-8f1a9b3c0c0b42d6", "name": "Pantheon", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/pantheon", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $500", "reward_min": "Points", "reward_max": "$500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:00Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/pantheon/changelog/5cf4f3ff-0610-4e20-87ae-b124f3d63dc8.json" ], "in_scope": [ { "name": "https://dashboard.pantheon.io", "asset_type": "other", "location": "https://dashboard.pantheon.io", "group": "In scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-fa258de553288fb4", "name": "Pexels", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/pexels", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $6,000", "reward_min": "$100", "reward_max": "$6,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:01Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/pexels/changelog/3873b40e-2e15-4d7e-9134-6655143961ce.json" ], "in_scope": [ { "name": "*.pexels.com", "asset_type": "website", "location": "https://www.pexels.com/", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-b4834546e3a7fbe4", "name": "Pinterest", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/pinterest", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $25,000", "reward_min": "$200", "reward_max": "$25,000", "scope_rank": 4, "access_status": "open", "industry": "Media", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:02Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/pinterest/changelog/404acb1a-eb4d-4fd9-9c00-ebbfce65d845.json" ], "in_scope": [ { "name": "api.pinterest.com", "asset_type": "api", "location": "https://api.pinterest.com", "group": "in scope" }, { "name": "*.pinterest.com Web Apps", "asset_type": "website", "location": null, "group": "in scope" }, { "name": "Pinterest iOS Mobile Application", "asset_type": "ios", "location": "https://apps.apple.com/us/app/pinterest/id429047995", "group": "in scope" }, { "name": "Pinterest Android Mobile Application", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.pinterest&hl=en_US&gl=US", "group": "in scope" }, { "name": "Pinterest Lite Android Mobile Application", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.pinterest.twa&hl=en_US&gl=US", "group": "in scope" }, { "name": "Chrome extension (download at: chrome.google.com/webstore/detail/pinterest-save-button/gpdjojdkbbmdfjfahjcgigfpmkopogic?hl=en)", "asset_type": "other", "location": "https://chrome.google.com/webstore/detail/pinterest-save-button/gpdjojdkbbmdfjfahjcgigfpmkopogic?hl=en", "group": "in scope" }, { "name": "Edge extension (download at: https://microsoftedge.microsoft.com/addons/detail/pinterest-save-button/bkgoflemacdadndiohhdnphcmdhacabg)", "asset_type": "other", "location": "https://microsoftedge.microsoft.com/addons/detail/pinterest-save-button/bkgoflemacdadndiohhdnphcmdhacabg", "group": "in scope" }, { "name": "Firefox extension (download at: https://addons.mozilla.org/firefox/addon/pinterest/)", "asset_type": "other", "location": "https://addons.mozilla.org/en-US/firefox/addon/pinterest/", "group": "in scope" }, { "name": "Safari extension (download at: https://apps.apple.com/us/app/save-to-pinterest/id6473649042)", "asset_type": "other", "location": "https://apps.apple.com/us/app/save-to-pinterest/id6473649042", "group": "in scope" }, { "name": "Open source projects(non-forked) listed at github.com/pinterest/", "asset_type": "other", "location": "https://github.com/pinterest/", "group": "in scope" }, { "name": "https://www.shffls.com", "asset_type": "website", "location": "https://www.shffls.com", "group": "in scope" }, { "name": "Shuffles App for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.pinterest.shuffles", "group": "in scope" }, { "name": "Shuffles App for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/shuffles-by-pinterest/id1573869498", "group": "in scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-571e7853e571876f", "name": "Pixabay", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/pixabay", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $6,000", "reward_min": "$100", "reward_max": "$6,000", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:03Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/pixabay/changelog/398d040b-fc5d-403a-87b4-bf0a523f7ed0.json" ], "in_scope": [ { "name": "*.pixabay.com/", "asset_type": "website", "location": "https://pixabay.com/", "group": "In Scope targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-ffe80e0a39b98503", "name": "PlanetHoster Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/planethosterinc", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $3,000", "reward_min": "$200", "reward_max": "$3,000", "scope_rank": 1, "access_status": "open", "industry": "Cloud", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:04Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/planethosterinc/changelog/135dcfde-cc84-4d0a-a183-c5e4938a8067.json" ], "in_scope": [ { "name": "my.planethoster.com", "asset_type": "website", "location": "https://my.planethoster.com", "group": "In Scope " }, { "name": "api.planethoster.net", "asset_type": "api", "location": "https://api.planethoster.net", "group": "In Scope " }, { "name": "world.planethoster.net", "asset_type": "website", "location": "https://world.planethoster.net", "group": "In Scope " }, { "name": "https://mg.n0c.com/", "asset_type": "website", "location": "https://mg.n0c.com/", "group": "In Scope " }, { "name": "www.planethoster.com", "asset_type": "website", "location": "https://www.planethoster.com", "group": "In Scope " } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-26955c64dcfb76a4", "name": "Plusgrade Loyalty Public Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/plusgrade-mbb-public", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $5,000", "reward_min": "$150", "reward_max": "$5,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:05Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/plusgrade-mbb-public/changelog/2392574e-a42e-4703-bde5-d1ba5d23b325.json" ], "in_scope": [ { "name": "*.points.com", "asset_type": "website", "location": null, "group": "Loyalty" }, { "name": "Additional Loyalty scope included under resources tab", "asset_type": "website", "location": null, "group": "Loyalty" } ], "out_of_scope": [ { "name": "Partner Website & Applications", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "Anything not explicitly listed as in-scope", "asset_type": "website", "location": null, "group": "Out-Of-Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-0670535f899adf47", "name": "PNI Media - Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/pnimedia-bb", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $4,500", "reward_min": "$150", "reward_max": "$4,500", "scope_rank": 3, "access_status": "open", "industry": "eCommerce", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 26, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:06Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/pnimedia-bb/changelog/0a2ca749-6631-4d52-8a1c-7f34bff46915.json" ], "in_scope": [ { "name": "████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "███████████████████████████" }, { "name": "██████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████████████" }, { "name": "█████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "██████████████████████████████████████████" }, { "name": "████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "██████████████████████████████████████████" }, { "name": "████████████████████████████████████████", "asset_type": "website", "location": null, "group": "██████████████████████████████████████████" }, { "name": "██████████████████████████████████████", "asset_type": "website", "location": null, "group": "██████████████████████████████████████████" }, { "name": "█████████████████████████████████████████", "asset_type": "website", "location": null, "group": "██████████████████████████████████████████" }, { "name": "███████████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "██████████████████████████████████████████" }, { "name": "█████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "███████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "█████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "███████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "█████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "█████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "██████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "██████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "███████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "██████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "███████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "██████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "███████████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "█████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "███████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "█████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "███████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" }, { "name": "██████████████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████████████████" } ], "out_of_scope": [ { "name": "████████████████████████████████", "asset_type": "other", "location": null, "group": "████████████" }, { "name": "██████████████████████████████", "asset_type": "other", "location": null, "group": "████████████" }, { "name": "████████████████████████", "asset_type": "other", "location": null, "group": "████████████" }, { "name": "█████████████████████", "asset_type": "other", "location": null, "group": "████████████" }, { "name": "████████████████████████████", "asset_type": "other", "location": null, "group": "████████████" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "26 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-b7f50402edbce8ef", "name": "Presago Marketplace Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/presago", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:08Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/presago/changelog/fda5ca3a-889e-46f4-bac5-21f2529290d0.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1226883/google-sheets-for-confluence-workspace-connector?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226883/google-sheets-for-confluence-workspace-connector?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1224380/microsoft-power-bi-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224380/microsoft-power-bi-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1224584/google-forms-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224584/google-forms-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1224583/microsoft-forms-for-confluence-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224583/microsoft-forms-for-confluence-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1226884/google-docs-for-confluence-workspace-connector?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226884/google-docs-for-confluence-workspace-connector?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1226885/google-slides-workspace-connector-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226885/google-slides-workspace-connector-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1224419/microsoft-stream-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224419/microsoft-stream-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1231249/microsoft-power-apps-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231249/microsoft-power-apps-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1231250/microsoft-power-apps-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231250/microsoft-power-apps-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1236956/power-bi-for-jira-embed-and-share-reports?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236956/power-bi-for-jira-embed-and-share-reports?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-ef2aa16121ee462d", "name": "Programmer Hat Marketplace Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/programmer-hat-market", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:09Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/programmer-hat-market/changelog/61d8c683-ec50-414d-8832-016aac1046be.json" ], "in_scope": [ { "name": "Create Ticket Template, Issue Template, Easy Templates - https://marketplace.atlassian.com/apps/1233451/create-ticket-template-issue-template-easy-templates?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233451/create-ticket-template-issue-template-easy-templates?hosting=cloud", "group": "In Scope Targets" }, { "name": "Export Backlog to CSV, Excel - https://marketplace.atlassian.com/apps/1233695/export-backlog-to-csv-excel?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233695/export-backlog-to-csv-excel?hosting=cloud", "group": "In Scope Targets" }, { "name": "Rich Text Editor for Jira - https://marketplace.atlassian.com/apps/1233647/rich-text-editor-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233647/rich-text-editor-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "Email This Issue for Jira - https://marketplace.atlassian.com/apps/1233583/email-this-issue-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233583/email-this-issue-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "Mail Handler for Jira, Service Desk, Service Management - https://marketplace.atlassian.com/apps/1233836/mail-handler-for-jira-service-desk-service-management?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233836/mail-handler-for-jira-service-desk-service-management?hosting=cloud", "group": "In Scope Targets" }, { "name": "Basecamp Integration for Jira - https://marketplace.atlassian.com/apps/1234316/basecamp-integration-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1234316/basecamp-integration-for-jira?hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-5e0fbed3286fbb2c", "name": "ProjectBalm", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/projectbalm", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:10Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/projectbalm/changelog/a9af7b0b-4ddd-4c19-9f43-2d14b78f1a0a.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1213146/risk-register?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1213146/risk-register?hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-248af3b08a95d4f4", "name": "Prosus", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/prosus-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,250", "reward_min": "$100", "reward_max": "$1,250", "scope_rank": 3, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:11Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/prosus-og/changelog/8d1c0bc5-48f5-484a-861a-b54be1b4598c.json" ], "in_scope": [ { "name": "dealflow.prosus.com", "asset_type": "website", "location": "https://dealflow.prosus.com", "group": "Prosus Domains" }, { "name": "dealflowapi.prosus.com", "asset_type": "api", "location": "https://dealflowapi.prosus.com", "group": "Prosus Domains" }, { "name": "analytics-admin.prosus.com", "asset_type": "website", "location": "https://analytics-admin.prosus.com", "group": "Prosus Domains" }, { "name": "analytics.prosus.com", "asset_type": "website", "location": "http://analytics.prosus.com", "group": "Prosus Domains" }, { "name": "data.prosus.com", "asset_type": "website", "location": "https://data.prosus.com/", "group": "Prosus Domains" }, { "name": "hr.prosus.com", "asset_type": "website", "location": "https://hr.prosus.com/", "group": "Prosus Domains" }, { "name": "tracker.naspers.com", "asset_type": "website", "location": "https://tracker.naspers.com/", "group": "Naspers Domains" }, { "name": "cfc.naspers.com", "asset_type": "website", "location": "https://cfc.naspers.com/", "group": "Naspers Domains" }, { "name": "peopleview.naspers.com", "asset_type": "website", "location": "https://peopleview.naspers.com", "group": "Naspers Domains" }, { "name": "nav.naspers.com", "asset_type": "website", "location": "http://nav.naspers.com/", "group": "Naspers Domains" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-e956d44cbd9826a3", "name": "QuintoAndar Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/quintoandar", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $1,000", "reward_min": "Points", "reward_max": "$1,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:12Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/quintoandar/changelog/766c37c3-6b66-4f52-bb75-89bfd519f6d3.json" ], "in_scope": [ { "name": "https://www.quintoandar.com.br/*", "asset_type": "website", "location": "https://www.quintoandar.com.br/*", "group": "In Scope" }, { "name": "https://user.quintoandar.com.br/admin/*", "asset_type": "website", "location": "https://www.user.quintoandar.com.br/admin/*", "group": "In Scope" }, { "name": "https://financeiro.quintoandar.com.br/*", "asset_type": "website", "location": "https://www.financeiro.quintoandar.com.br/*", "group": "In Scope" }, { "name": "https://apigw.prod.quintoandar.com.br/pixar-api/*", "asset_type": "api", "location": "https://apigw.prod.quintoandar.com.br/pixar-api/*", "group": "In Scope" }, { "name": "https://finance.quintoandar.com.br/*", "asset_type": "website", "location": "https://finance.quintoandar.com.br/*", "group": "In Scope" }, { "name": "https://trato-feito-api.quintoandar.com.br/*", "asset_type": "api", "location": "https://trato-feito-api.quintoandar.com.br/*", "group": "In Scope" }, { "name": "https://apigw.prod.quintoandar.com.br/checkout-api/*", "asset_type": "api", "location": "https://apigw.prod.quintoandar.com.br/checkout-api/*", "group": "In Scope" }, { "name": "https://apigw.prod.quintoandar.com.br/sales-flow-api/*", "asset_type": "api", "location": "https://apigw.prod.quintoandar.com.br/sales-flow-api/*", "group": "In Scope" }, { "name": "https://apigw.prod.quintoandar.com.br/nazare-api/*", "asset_type": "api", "location": "https://apigw.prod.quintoandar.com.br/nazare-api/*", "group": "In Scope" }, { "name": "https://apigw.prod.quintoandar.com.br/rental-guarantee-api/*", "asset_type": "api", "location": "https://apigw.prod.quintoandar.com.br/rental-guarantee-api/*", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-28a43e77dc485833", "name": "Quirk Consulting Marketplace Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/quirk-consulting", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:13Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/quirk-consulting/changelog/0051f903-833b-4f5c-a354-a6f88bf2fb26.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1221796/dependency-mapper-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221796/dependency-mapper-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1229966/scrum-master-assistant-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229966/scrum-master-assistant-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-befd6a6f039a6806", "name": "Quizlet", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/quizlet", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,000", "reward_min": "$150", "reward_max": "$2,000", "scope_rank": 2, "access_status": "open", "industry": "Education", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:14Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/quizlet/changelog/52d56575-2cb1-4d86-8988-d5d30b7000c2.json" ], "in_scope": [ { "name": "https://*.quizlet.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "Quizlet iOS App", "asset_type": "ios", "location": "https://itunes.apple.com/us/app/quizlet-flashcards/id546473125", "group": "In Scope" }, { "name": "Quizlet Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.quizlet.quizletandroid", "group": "In Scope" }, { "name": "3.0 API", "asset_type": "api", "location": null, "group": "In Scope" } ], "out_of_scope": [ { "name": "api.quizlet.com/2.0", "asset_type": "api", "location": null, "group": "Out of Scope" }, { "name": "help.quizlet.com (zendesk)", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "get.quizlet.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-1ca7d5337bfefdfb", "name": "RadBee Ltd.", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/radbee", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Corporate Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:15Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/radbee/changelog/9a7d47a2-6599-4795-b0f7-80bebe8a2967.json" ], "in_scope": [ { "name": "Speedy PDF Sign-Offs For Jira Cloud - https://marketplace.atlassian.com/apps/1222932/speedy-pdf-sign-offs-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222932/speedy-pdf-sign-offs-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Jira Snapshots for Confluence - https://marketplace.atlassian.com/apps/1225123/jira-snapshots-time-stamped-baselines-into-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225123/jira-snapshots-time-stamped-baselines-into-confluence?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "Access Agent for Jira Snapshots for Confluence - https://marketplace.atlassian.com/apps/1229545/access-agent-for-jira-snapshots-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229545/access-agent-for-jira-snapshots-for-confluence?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "Snapshots Traceability Extensions for Jira Snapshots - https://marketplace.atlassian.com/apps/1228815?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228815?tab=overview&hosting=cloud", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-b6ffae63f48d49b9", "name": "Railsware", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/railsware", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:16Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/railsware/changelog/118e6d78-31e6-4983-80a8-35de51176f44.json" ], "in_scope": [ { "name": "Smart Checklist for Jira. Enterprise - https://marketplace.atlassian.com/apps/1216451/smart-checklist-for-jira-enterprise?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216451/smart-checklist-for-jira-enterprise?hosting=cloud", "group": "In Scope" }, { "name": "Smart Checklist for Jira Free - https://marketplace.atlassian.com/apps/1215277/smart-checklist-for-jira-free?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215277/smart-checklist-for-jira-free?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Smart Templates: Issue Templates for Jira - https://marketplace.atlassian.com/apps/1231143/smart-templates-issue-templates-for-jira?hosting=cloud&tab", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231143/smart-templates-issue-templates-for-jira?hosting=cloud&tab", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1233681/smart-ai-release-notes-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233681/smart-ai-release-notes-for-jira?tab=overview&hosting=cloud", "group": "In Scope" } ], "out_of_scope": [ { "name": "https://jirachecklist.com/", "asset_type": "website", "location": "https://jirachecklist.com/", "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-a32ac2750258b402", "name": "Raley Apps", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/raleyapps", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:17Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/raleyapps/changelog/662a52fe-3d60-4c10-a6a3-24b24a264360.json" ], "in_scope": [ { "name": "Raley Email Notifications for Jira / JSM - https://marketplace.atlassian.com/apps/1214045/raley-email-notifications-for-jira-jsm?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214045/raley-email-notifications-for-jira-jsm?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1223409/raley-purchase-orders?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223409/raley-purchase-orders?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-9977a9c172a632fe", "name": "Rapyd", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/rapyd", "bounty_classification": "verified_policy", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $7,500", "reward_min": "$100", "reward_max": "$7,500", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "rapyd-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:21Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/rapyd/changelog/4fd154ee-8a7d-4d42-bab8-2ff1e017c1b2.json" ], "in_scope": [ { "name": "api.rapyd.net", "asset_type": "api", "location": null, "group": "Tier 3 In scope Premium", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "dashboard.rapyd.net", "asset_type": "website", "location": "https://dashboard.rapyd.net/", "group": "Tier 2 In scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "verify.rapyd.net", "asset_type": "website", "location": null, "group": "Tier 2 In scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "checkout.rapyd.net", "asset_type": "other", "location": null, "group": "Tier 2 In scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.rapyd.net", "asset_type": "website", "location": null, "group": "Tier 1 In scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.korta.is", "asset_type": "website", "location": null, "group": "Tier 1 In scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "jointhemoment.net", "asset_type": "website", "location": "https://jointhemoment.net/", "group": "Tier 1 In scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.rapyd.com", "asset_type": "other", "location": null, "group": "Tier 1 In scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.rapyd.org", "asset_type": "other", "location": null, "group": "Tier 1 In scope", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.kortathjonustan.is", "asset_type": "website", "location": null, "group": "Tier 1 In scope", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "community.rapyd.net", "asset_type": "other", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "support.rapyd.net", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "docs.rapyd.net", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "sandbox.rapyd.net", "asset_type": "other", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "3rd party services", "asset_type": "other", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "ghost.rapyd.net", "asset_type": "other", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.neatcommerce.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.neattest.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.neat.com.hk", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.neat.hk", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.neat.wtf", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] } ], "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ], "review_flags": [] }, { "id": "bugcrowd-c78fbe6afa8d0916", "name": "REA Group | realestate.com.au, realcommercial.com.au, property.com.au", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/rea-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $4,500", "reward_min": "$50", "reward_max": "$4,500", "scope_rank": 4, "access_status": "open", "industry": "Real Estate", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:18Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/rea-mbb-og/changelog/d9a84c1d-2911-4875-abbb-696accf7c084.json" ], "in_scope": [ { "name": "rea-group.com", "asset_type": "website", "location": null, "group": "REA Group - Corporate Website" }, { "name": "reastatic.net", "asset_type": "website", "location": null, "group": "REA Group - Corporate Website" }, { "name": "*.api.id.realestate.com.au", "asset_type": "api", "location": null, "group": "REA Group - www.realestate.com.au" }, { "name": "*.id.realestate.com.au", "asset_type": "website", "location": null, "group": "REA Group - www.realestate.com.au" }, { "name": "*.accounts.realestate.com.au", "asset_type": "website", "location": null, "group": "REA Group - www.realestate.com.au" }, { "name": "realestate.com.au Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=au.com.realestate.app", "group": "REA Group - www.realestate.com.au" }, { "name": "realestate.com.au iOS App", "asset_type": "ios", "location": "https://apps.apple.com/au/app/realestate-com-au-property/id404667893", "group": "REA Group - www.realestate.com.au" }, { "name": "*.realestate.com.au", "asset_type": "website", "location": null, "group": "REA Group - www.realestate.com.au" }, { "name": "*.realcommercial.com.au", "asset_type": "website", "location": "https://www.realcommercial.com.au/", "group": "REA Group - Real Commercial (RCA)" }, { "name": "next.flatmates.com.au", "asset_type": "website", "location": "https://next.flatmates.com.au", "group": "REA Group - next.flatmates.com.au (Staging)" }, { "name": "api-next.flatmates.com.au", "asset_type": "api", "location": "https://api-next.flatmates.com.au", "group": "REA Group - next.flatmates.com.au (Staging)" }, { "name": "www.property.com.au", "asset_type": "website", "location": "https://property.com.au", "group": "REA Group - Property.com.au (PCA)" }, { "name": "*.mortgagechoice.com.au", "asset_type": "website", "location": null, "group": "REA Group - mortgagechoice.com.au" }, { "name": "*.demo.bp.mortgagechoice.com.au", "asset_type": "website", "location": null, "group": "REA Group - mortgagechoice.com.au" }, { "name": "*.smartline.com.au", "asset_type": "website", "location": null, "group": "REA Group - mortgagechoice.com.au" }, { "name": "*.mclead.com.au", "asset_type": "api", "location": null, "group": "REA Group - mortgagechoice.com.au" }, { "name": "www.developersites.com.au/testing-2505-lms/", "asset_type": "website", "location": "https://www.developersites.com.au/testing-2505-lms/", "group": "REA Group - developersites.com.au" }, { "name": "www.developersites.com.au/testing-2505-houston/", "asset_type": "website", "location": "https://www.developersites.com.au/testing-2505-houston/", "group": "REA Group - developersites.com.au" }, { "name": "scripts.developersites.com.au", "asset_type": "website", "location": null, "group": "REA Group - developersites.com.au" }, { "name": "ftp.developersites.com.au", "asset_type": "network", "location": "sftp://ftp.developersites.com.au:45875", "group": "REA Group - developersites.com.au" }, { "name": "agent-contact.realestate.com.au/lead-capture-page/campaign-id/8e50c3d0-0d2b-44d1-9df6-f4e02b9a690e", "asset_type": "api", "location": "https://agent-contact.realestate.com.au/lead-capture-page/campaign-id/8e50c3d0-0d2b-44d1-9df6-f4e02b9a690e", "group": "REA Group - developersites.com.au" }, { "name": "https://*.report.uat.proptrack.com", "asset_type": "website", "location": "https://*.report.uat.proptrack.com", "group": "REA Group - Proptrack.com.au" }, { "name": "access-sit.uat.proptrack.com", "asset_type": "website", "location": "https://access-sit.uat.proptrack.com", "group": "REA Group - Proptrack.com.au" }, { "name": "desktop-sit.uat.proptrack.com", "asset_type": "website", "location": "https://desktop-sit.uat.proptrack.com", "group": "REA Group - Proptrack.com.au" }, { "name": "explore-sit.uat.proptrack.com", "asset_type": "website", "location": "https://explore-sit.uat.proptrack.com", "group": "REA Group - Proptrack.com.au" }, { "name": "one-sit.uat.proptrack.com", "asset_type": "website", "location": "https://one-sit.uat.proptrack.com/", "group": "REA Group - Proptrack.com.au" }, { "name": "https://portfolio-manager-sit.uat.proptrack.com/", "asset_type": "website", "location": "https://portfolio-manager-sit.uat.proptrack.com/", "group": "REA Group - Proptrack.com.au" }, { "name": "https://valuations-sit.uat.proptrack.com", "asset_type": "website", "location": "https://valuations-sit.uat.proptrack.com", "group": "REA Group - Proptrack.com.au" }, { "name": "www.proptrack.com", "asset_type": "website", "location": "https://www.proptrack.com", "group": "REA Group - Proptrack.com.au" }, { "name": "www.proptrack.com.au", "asset_type": "website", "location": "https://www.proptrack.com.au", "group": "REA Group - Proptrack.com.au" } ], "out_of_scope": [ { "name": "*.email.rea-group.com", "asset_type": "website", "location": null, "group": "Out of Scope - www.rea-group.com" }, { "name": "autodiscover.rea-group.com", "asset_type": "website", "location": null, "group": "Out of Scope - www.rea-group.com" }, { "name": "garage.rea-group.com", "asset_type": "website", "location": null, "group": "Out of Scope - www.rea-group.com" }, { "name": "help.enterprise.rea-group.com", "asset_type": "website", "location": null, "group": "Out of Scope - www.rea-group.com" }, { "name": "help.rea-group.com", "asset_type": "website", "location": null, "group": "Out of Scope - www.rea-group.com" }, { "name": "university.rea-group.com", "asset_type": "website", "location": null, "group": "Out of Scope - www.rea-group.com" }, { "name": "analytics[.e2e].realestate.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "*.realestate.com.au/homeloans", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "homeloans.realestate.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "realestate.com.au/advice", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "realestate.com.au/insights", "asset_type": "website", "location": "https://www.realestate.com.au/insights/", "group": "Out of Scope - www.realestate.com.au" }, { "name": "realestate.com.au/lifestyle", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "realestate.com.au/news", "asset_type": "website", "location": "https://www.realestate.com.au/advice/", "group": "Out of Scope - www.realestate.com.au" }, { "name": "realestate.com.au/podcasts", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "sasinator.realestate.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "smetrics.realestate.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "video.realestate.com.au", "asset_type": "website", "location": "https://video.realestate.com.au/", "group": "Out of Scope - www.realestate.com.au" }, { "name": "help.realestate.com.au", "asset_type": "website", "location": "https://help.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "*.propertypanel.realestate.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "realtair-sell.realestate.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "realtair-buy.realestate.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "*.realtair.realestate.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - www.realestate.com.au" }, { "name": "adslot.realestate.com.au", "asset_type": "website", "location": "https://adslot.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "everest.realestate.com.au", "asset_type": "website", "location": "https://everest.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "images.media-comms.realestate.com.au", "asset_type": "website", "location": "http://images.media-comms.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "images.mediateam.realestate.com.au", "asset_type": "website", "location": "https://images.mediateam.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "metrics.realestate.com.au", "asset_type": "website", "location": "https://metrics.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "stg-api.realtair.gateway.ignite.realestate.com.au", "asset_type": "website", "location": "https://stg-api.realtair.gateway.ignite.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "support.realestate.com.au", "asset_type": "website", "location": "https://support.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "stg-pitch.realtair.gateway.ignite.realestate.com.au", "asset_type": "website", "location": "https://stg-pitch.realtair.gateway.ignite.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "tags.realestate.com.au", "asset_type": "website", "location": "https://tags.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "api.leads.developersites.devlob-staging.realestate.com.au", "asset_type": "website", "location": "https://api.leads.developersites.devlob-staging.realestate.com.au", "group": "Out of Scope - www.realestate.com.au" }, { "name": "*.agent.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "*.email.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "abmail.campaign.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "autodiscover.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "metrics.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "propertypanelcontent.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "realcommercial.com.au/building/enquiry", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "realcommercial.com.au/contact-agency-commercial/*", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "realcommercial.com.au/listing-ui/enquiry", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "realcommercial.com.au/mobile/enquiries/*/*", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "research.surveys.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "smetrics.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "support.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "propertypanel.realcommercial.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Real Commercial (RCA)" }, { "name": "autodiscover.property.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Property.com.au (PCA)" }, { "name": "email.property.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Property.com.au (PCA)" }, { "name": "help.property.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Property.com.au (PCA)" }, { "name": "info.property.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Property.com.au (PCA)" }, { "name": "*.realtair.com", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.campaignagent.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.simpology.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.athena.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.housing.com", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.proptiger.com", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.makaan.com", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.easiloan.com", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.realtor.com", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.spacely.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Other REA brands" }, { "name": "*.flatmates.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Flatmates (Staging)" }, { "name": "www.flatmates.com.au", "asset_type": "website", "location": "https://www.flatmates.com.au", "group": "Out of Scope - Flatmates (Staging)" }, { "name": "api.flatmates.com.au", "asset_type": "api", "location": "https://api.flatmates.com.au", "group": "Out of Scope - Flatmates (Staging)" }, { "name": "flatmates-experience-api.flatmates.com.au", "asset_type": "api", "location": "https://flatmates-experience-api.flatmates.com.au", "group": "Out of Scope - Flatmates (Staging)" }, { "name": "help.flatmates.com.au", "asset_type": "website", "location": "https://help.flatmates.com.au", "group": "Out of Scope - Flatmates (Staging)" }, { "name": "email.flatmates.com.au", "asset_type": "network", "location": null, "group": "Out of Scope - Flatmates (Staging)" }, { "name": "sasinator.flatmates.com.au", "asset_type": "website", "location": "https://sasinator.flatmates.com.au", "group": "Out of Scope - Flatmates (Staging)" }, { "name": "*.lendingtoolkit.mortgagechoice.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "*.apps.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "*.bp.mortgagechoice.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "*.bpm.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "*myhub*.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "*.primeuat.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "*.prime.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "awverify.*.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "zendesk*.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "links-*.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "web-*.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "autodiscover.mortgagechoice.net.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "bh5po56arjfv.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "broker.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "calendar.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "cpt.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "dashboard.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "docs.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "documents.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "ecomply.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "elink.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "enterpriseenrollment.mortgagechoice.net.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "enterpriseregistration.mortgagechoice.net.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "fil.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "go.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "groups.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "hbvuanp6xgfw.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "home.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "info.lp.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "learn.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "lyncdiscover.mortgagechoice.net.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "mail.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "mcmoneytrack.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "msoid.mortgagechoice.net.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "one.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "project-*.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "questions.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "servicefo.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "servicemorfo.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "services.mortgagechoice.com.au/Services/NextGenIntegrator/*", "asset_type": "website", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "sip.mortgagechoice.net.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "sites.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "slxtest.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "sta.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "trackinsight.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "video.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "wave.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "zac80040032.mortgagechoice.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "em1997.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "em398464.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "em8918.mortgagechoice.com.au", "asset_type": "other", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "cloudhq.mortgagechoice.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "cloudhqforms.mortgagechoice.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Mortgage Choice" }, { "name": "*.leads.developersites.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - Developer Sites" }, { "name": "www.developersites.com.au/*", "asset_type": "website", "location": null, "group": "Out of Scope - Developer Sites" }, { "name": "*.proptrack.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - proptrack.com.au" }, { "name": "*.proptrack.com", "asset_type": "website", "location": null, "group": "Out of Scope - proptrack.com.au" }, { "name": "website.proptrack.com.au", "asset_type": "website", "location": null, "group": "Out of Scope - proptrack.com.au" }, { "name": "developer.proptrack.com.au", "asset_type": "api", "location": "https://developer.proptrack.com.au", "group": "Out of Scope - proptrack.com.au" }, { "name": "www.proptrack.com.au/contact-us/*", "asset_type": "website", "location": "https://www.proptrack.com.au/contact-us/*", "group": "Out of Scope - proptrack.com.au" }, { "name": "widgets-api-sit.uat.proptrack.com", "asset_type": "website", "location": "https://widgets-api-sit.uat.proptrack.com", "group": "Out of Scope - proptrack.com.au" }, { "name": "avm-sit.uat.proptrack.com", "asset_type": "website", "location": "https://avm-sit.uat.proptrack.com", "group": "Out of Scope - proptrack.com.au" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-ac7779f0b4aa65b9", "name": "Rec Room Video Games", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/recroom-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,500", "reward_min": "$150", "reward_max": "$2,500", "scope_rank": 4, "access_status": "open", "industry": "Games", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 3, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:19Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/recroom-og/changelog/ea1fbbf5-344d-40a4-8f56-38f1000928c6.json" ], "in_scope": [ { "name": "██████████████████████████", "asset_type": "other", "location": null, "group": "████████████████" }, { "name": "█████████████████████████████████████████████", "asset_type": "other", "location": null, "group": "████████████████" }, { "name": "███████████████████████", "asset_type": "other", "location": null, "group": "████████████████" }, { "name": "███████████████", "asset_type": "other", "location": null, "group": "████████████████" }, { "name": "███", "asset_type": "ios", "location": null, "group": "████████████████" }, { "name": "███████", "asset_type": "android", "location": null, "group": "████████████████" }, { "name": "█████████████", "asset_type": "other", "location": null, "group": "████████████████" }, { "name": "████", "asset_type": "other", "location": null, "group": "████████████████" }, { "name": "████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "███████████████████", "asset_type": "api", "location": null, "group": "████████████████" }, { "name": "████████████████████", "asset_type": "api", "location": null, "group": "████████████████" }, { "name": "██████████████████████████", "asset_type": "api", "location": null, "group": "████████████████" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "3 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-707dcd792086376b", "name": "Recorded Future Public Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/recorded-future-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $5,000", "reward_min": "$250", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:20Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/recorded-future-mbb-og/changelog/403c49b2-0f28-44d6-a1f8-8d70c45158b8.json" ], "in_scope": [ { "name": "www.recordedfuture.com", "asset_type": "website", "location": "https://www.recordedfuture.com", "group": "In Scope Targets" }, { "name": "https://tria.ge", "asset_type": "website", "location": "https://tria.ge", "group": "In Scope Targets" }, { "name": "id.recordedfuture.com", "asset_type": "website", "location": "https://id.recordedfuture.com", "group": "In Scope Targets" }, { "name": "hatching.io", "asset_type": "website", "location": "https://hatching.io", "group": "In Scope Targets" }, { "name": "geminiadvisory.io", "asset_type": "website", "location": "https://geminiadvisory.io", "group": "In Scope Targets" }, { "name": "app.recordedfuture.com", "asset_type": "website", "location": "https://app.recordedfuture.com", "group": "In Scope Targets" }, { "name": "api.recordedfuture.com", "asset_type": "api", "location": "https://api.recordedfuture.com", "group": "In Scope Targets" }, { "name": "Recorded Future iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/recorded-future/id1435597894", "group": "In Scope Targets" }, { "name": "Recorded Future Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.recordedfuture.mobile&hl=en_US", "group": "In Scope Targets" }, { "name": "securitytrails.com", "asset_type": "website", "location": "https://securitytrails.com", "group": "In Scope Targets" }, { "name": "Riskrecon", "asset_type": "website", "location": "https://www.riskrecon.com", "group": "In Scope Targets" }, { "name": "Riskrecon Vendor portal US", "asset_type": "website", "location": "https://vendor.riskrecon.com", "group": "In Scope Targets" }, { "name": "Riskrecon Vendor portal EU", "asset_type": "website", "location": "https://vendor.riskrecon.eu", "group": "In Scope Targets" }, { "name": "Riskrecon API us", "asset_type": "api", "location": "https://api.riskrecon.com", "group": "In Scope Targets" }, { "name": "Riskrecon API EU", "asset_type": "api", "location": "https://api.riskrecon.eu", "group": "In Scope Targets" }, { "name": "Riskrecon IDP US", "asset_type": "api", "location": "https://auth.riskrecon.com", "group": "In Scope Targets" }, { "name": "Riskrecon IDP EU", "asset_type": "api", "location": "https://auth.riskrecon.eu", "group": "In Scope Targets" }, { "name": "Riskrecon Portal US", "asset_type": "website", "location": "https://portal.riskrecon.com", "group": "In Scope Targets" }, { "name": "Riskrecon Portal EU", "asset_type": "website", "location": "https://portal.riskrecon.eu", "group": "In Scope Targets" }, { "name": "Recorded Future MCP", "asset_type": "api", "location": "https://mcp.recordedfuture.com", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-7a1b4fb31a5ba552", "name": "Redmoon", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/redmoon", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Electronics", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:21Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/redmoon/changelog/b324d66b-aa06-497b-ae39-5ea7c4442c27.json" ], "in_scope": [ { "name": "Custom Fields for Jira Cloud - https://marketplace.atlassian.com/apps/1213649/custom-fields-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1213649/custom-fields-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Sub Task Manager for Jira - Cloud Hosted - https://marketplace.atlassian.com/apps/1214056/sub-task-manager-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214056/sub-task-manager-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Watch It for Jira Cloud - https://marketplace.atlassian.com/apps/1213851/watch-it-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1213851/watch-it-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Comment History for Jira Cloud - https://marketplace.atlassian.com/apps/1211639/comment-history-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211639/comment-history-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Document Vault for Jira Cloud - https://marketplace.atlassian.com/apps/1211880/document-vault-secure-attachments-in-jira?tab=installation&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211880/document-vault-secure-attachments-in-jira?tab=installation&hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-18ad6bd5f24792d6", "name": "Refined", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/refined2", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $2,500", "reward_min": "$100", "reward_max": "$2,500", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:22Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/refined2/changelog/ab2104d7-819d-4aef-b5d5-f3a9a1c96ec6.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1216056/refined-toolkit-for-confluence-cloud?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1216056/refined-toolkit-for-confluence-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "refined.site/admin", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "refinedsites.refinedwiki.com", "asset_type": "website", "location": "https://refinedsites.refinedwiki.com", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1221322/refined-for-confluence-cloud?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221322/refined-for-confluence-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1218481/refined-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218481/refined-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "bugbounty-refined-test-.refined.site", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1236998/refined-ui-toolkit-for-confluence-page-builder-navigation?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236998/refined-ui-toolkit-for-confluence-page-builder-navigation?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1211136/refined-macro-toolkit-content-formatting-macros?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211136/refined-macro-toolkit-content-formatting-macros?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-56a051843b1d3e79", "name": "Release Management (by Y2 ENGR)", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/releasemanagement", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:23Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/releasemanagement/changelog/e522db25-0877-4e81-9956-16c7b4d3816a.json" ], "in_scope": [ { "name": "Release Management & Roadmap -Jira Cloud - https://marketplace.atlassian.com/apps/1221946/release-management-roadmap-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221946/release-management-roadmap-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Gadgets for Release Management & Roadmap - Cloud - https://marketplace.atlassian.com/apps/1223487/gadgets-for-release-management-roadmap?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223487/gadgets-for-release-management-roadmap?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Gadgets for Release Management & Roadmap - DC - https://marketplace.atlassian.com/apps/1223487/gadgets-for-release-management-roadmap?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223487/gadgets-for-release-management-roadmap?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "Gadgets for Release Management & Road - Server - https://marketplace.atlassian.com/apps/1223487/gadgets-for-release-management-roadmap?hosting=server&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223487/gadgets-for-release-management-roadmap?hosting=server&tab=overview", "group": "In Scope" }, { "name": "Advanced Agile Boards - Cloud - https://marketplace.atlassian.com/apps/1223877/advanced-agile-boards?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223877/advanced-agile-boards?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1222474/work-status-time-tracking-calendar-for-jira?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222474/work-status-time-tracking-calendar-for-jira?tab=overview&hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1228657/easy-peasy-roadmap-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228657/easy-peasy-roadmap-for-jira?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-1d80f55318d6b971", "name": "Requirement Yogi (Bug bounty)", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/requirement-yogi", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:24Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/requirement-yogi/changelog/1a2d4655-56f5-4c58-a543-cd511c1ddb7c.json" ], "in_scope": [ { "name": "Requirement Yogi for Jira Cloud - https://marketplace.atlassian.com/apps/1214094/requirement-yogi-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214094/requirement-yogi-for-jira?hosting=cloud", "group": "In Scope" }, { "name": "Standalone app (HTML assets)", "asset_type": "website", "location": "https://app.requirementyogi.com", "group": "In Scope" }, { "name": "REST API", "asset_type": "api", "location": "https://api.requirementyogi.com", "group": "In Scope" }, { "name": "Keycloak", "asset_type": "website", "location": "https://auth.requirementyogi.com", "group": "In Scope" }, { "name": "Confluence app back-end", "asset_type": "website", "location": "https://confluence.requirementyogi.com", "group": "In Scope" }, { "name": "Jira app back-end", "asset_type": "website", "location": "https://jira.requirementyogi.com", "group": "In Scope" }, { "name": "Requirement Yogi for Confluence Cloud - https://marketplace.atlassian.com/apps/1212523/requirements-yogi?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1212523/requirements-yogi?hosting=cloud", "group": "In Scope" }, { "name": "Old back-end for Confluence app", "asset_type": "website", "location": "https://ww1.requirementyogi.cloud", "group": "In Scope" }, { "name": "Old back-end for Jira app", "asset_type": "website", "location": "https://ww2.requirementyogi.cloud", "group": "In Scope" } ], "out_of_scope": [ { "name": "Documentation (Out of scope)", "asset_type": "website", "location": "https://docs.requirementyogi.com", "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-9358ab34ac09914a", "name": "Resolution", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/resolutionde", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Cloud", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:25Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/resolutionde/changelog/88fe01e3-527e-4da5-adf9-89d62898d9b0.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1218305/out-of-office-assistant-for-jira-cloud?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218305/out-of-office-assistant-for-jira-cloud?hosting=cloud", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1219932/language-translation-jira-service-desk?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219932/language-translation-jira-service-desk?hosting=cloud", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1212130/saml-single-sign-on-sso-jira-saml-sso?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212130/saml-single-sign-on-sso-jira-saml-sso?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1212130/saml-single-sign-on-sso-jira-saml-sso?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212130/saml-single-sign-on-sso-jira-saml-sso?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1212129/saml-single-sign-on-sso-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212129/saml-single-sign-on-sso-confluence?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1212129/saml-single-sign-on-sso-confluence?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1212129/saml-single-sign-on-sso-confluence?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1217045/saml-single-sign-on-sso-bitbucket?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217045/saml-single-sign-on-sso-bitbucket?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1217045/saml-single-sign-on-sso-bitbucket?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217045/saml-single-sign-on-sso-bitbucket?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1217672/saml-single-sign-on-sso-bamboo?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217672/saml-single-sign-on-sso-bamboo?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221586/api-token-authentication-jira?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221586/api-token-authentication-jira?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221586/api-token-authentication-jira?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221586/api-token-authentication-jira?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221608/api-token-authentication-confluence?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221608/api-token-authentication-confluence?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221608/api-token-authentication-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221608/api-token-authentication-confluence?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1211109/user-deactivator-jira?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211109/user-deactivator-jira?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1211109/user-deactivator-jira?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211109/user-deactivator-jira?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221601/user-deactivator-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221601/user-deactivator-confluence?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221601/user-deactivator-confluence?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221601/user-deactivator-confluence?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1218164/redirects-and-vanity-urls-for-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218164/redirects-and-vanity-urls-for-confluence?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1218164/redirects-and-vanity-urls-for-confluence?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1218164/redirects-and-vanity-urls-for-confluence?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221625/http-header-authentication-for-jira?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221625/http-header-authentication-for-jira?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221625/http-header-authentication-for-jira?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221625/http-header-authentication-for-jira?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221627/http-header-auth-for-confluence?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221627/http-header-auth-for-confluence?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221627/http-header-auth-for-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221627/http-header-auth-for-confluence?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1219399/users-sync-groups-sync-jira?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219399/users-sync-groups-sync-jira?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1219399/users-sync-groups-sync-jira?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219399/users-sync-groups-sync-jira?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1219400/users-sync-groups-sync-confluence?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219400/users-sync-groups-sync-confluence?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1219400/users-sync-groups-sync-confluence?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219400/users-sync-groups-sync-confluence?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1219401/users-sync-groups-sync-bitbucket?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219401/users-sync-groups-sync-bitbucket?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1219401/users-sync-groups-sync-bitbucket?hosting=datacenter&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219401/users-sync-groups-sync-bitbucket?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221738/users-sync-groups-sync-bamboo?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221738/users-sync-groups-sync-bamboo?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221629/user-deactivator-for-bitbucket?hosting=server&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1221629/user-deactivator-for-bitbucket?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1224142/monday-com-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224142/monday-com-for-confluence?hosting=cloud&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1224678/monday-com-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224678/monday-com-for-jira?hosting=cloud&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1225346/hubspot-crm-for-confluence-hubspot-integration?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1225346/hubspot-crm-for-confluence-hubspot-integration?hosting=cloud&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1224457/aws-load-balancer-authentication-cognito-compatible-jira?hosting=server", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224457/aws-load-balancer-authentication-cognito-compatible-jira?hosting=server", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1224459/aws-alb-and-amazon-cognito-authentication-for-confluence?hosting=server", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224459/aws-alb-and-amazon-cognito-authentication-for-confluence?hosting=server", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1224117/api-token-authentication-for-bitbucket?hosting=server&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224117/api-token-authentication-for-bitbucket?hosting=server&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1224117/api-token-authentication-for-bitbucket?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224117/api-token-authentication-for-bitbucket?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221629/license-user-deactivator-for-bitbucket?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221629/license-user-deactivator-for-bitbucket?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1226752/google-translation-automation-for-jira-issue-language?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226752/google-translation-automation-for-jira-issue-language?hosting=cloud&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1224459/aws-sso-alb-amazon-cognito-authentication-for-confluence?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224459/aws-sso-alb-amazon-cognito-authentication-for-confluence?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1224457/aws-sso-alb-amazon-cognito-authentication-for-jira?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224457/aws-sso-alb-amazon-cognito-authentication-for-jira?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1221738/user-sync-users-provisioning-sync-groups-sync-bamboo?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221738/user-sync-users-provisioning-sync-groups-sync-bamboo?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1217672/saml-single-sign-on-saml-sso-bamboo?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217672/saml-single-sign-on-saml-sso-bamboo?hosting=datacenter&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1228240/hubspot-jira-crm-issue-link-integration-collaboration?hosting=cloud&tab=reviews", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228240/hubspot-jira-crm-issue-link-integration-collaboration?hosting=cloud&tab=reviews", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1231965/structure-your-jira-scrum-nasa-not-another-standup-app?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231965/structure-your-jira-scrum-nasa-not-another-standup-app?hosting=cloud&tab=overview", "group": "Apps" }, { "name": "https://marketplace.atlassian.com/apps/1211109/user-management-and-license-optimizer-for-jira-confluence?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1211109/user-management-and-license-optimizer-for-jira-confluence?hosting=cloud&tab=overview", "group": "Apps" } ], "out_of_scope": [ { "name": "https://id.atlassian.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://marketplace.atlassian.com/*", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "https://*.resolution.de", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "Any app URLs that contain \"staging\", \"stg\", \"dev\" or \"ngrok\"", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-62af323b0682b642", "name": "Revyz - Marketplace Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/revyz", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:26Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/revyz/changelog/fbba3e8c-4288-465c-ad89-ef4b4a0d9fa9.json" ], "in_scope": [ { "name": "Revyz Assets Data Manager for Jira- https://marketplace.atlassian.com/apps/1232736/revyz-assets-data-manager-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1232736/revyz-assets-data-manager-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Revyz Configuration Manager- https://marketplace.atlassian.com/apps/1231935/revyz-configuration-manager-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231935/revyz-configuration-manager-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Revyz Data Manager for Confluence- https://marketplace.atlassian.com/apps/1233056/revyz-data-manager-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1233056/revyz-data-manager-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Revyz Backup Restore- https://marketplace.atlassian.com/apps/1228694/revyz-backup-restore?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228694/revyz-backup-restore?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-e825660652a9e90b", "name": "RV Softwares Marketplace Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/rv-softwares", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:27Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/rv-softwares/changelog/9e63f52e-431e-4b61-9474-e1eb5cad2cac.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1223200/agile-tools-epic-tree-links-tree-time-in-status-worklogs?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223200/agile-tools-epic-tree-links-tree-time-in-status-worklogs?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1226187/time-in-status-reports?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226187/time-in-status-reports?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1230243/worklogs-time-tracking-timesheets?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230243/worklogs-time-tracking-timesheets?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1228019/issue-hierarchy-structure?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228019/issue-hierarchy-structure?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Agile Tools - https://marketplace.atlassian.com/apps/1223200/agile-tools-epic-tree-links-tree-time-in-status-worklogs?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223200/agile-tools-epic-tree-links-tree-time-in-status-worklogs?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Time in Status Reports - https://marketplace.atlassian.com/apps/1226187/time-in-status-reports?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226187/time-in-status-reports?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Worklogs Time Tracking and Timesheets - https://marketplace.atlassian.com/apps/1230243/worklogs-time-tracking-timesheets?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1230243/worklogs-time-tracking-timesheets?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "Issue Hierarchy Structure -https://marketplace.atlassian.com/apps/1228019/issue-hierarchy-structure?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228019/issue-hierarchy-structure?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-c8b3be65a8ce7ce4", "name": "SaaSJet", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/saasjet", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:28Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/saasjet/changelog/be05e638-e07d-4601-84cc-47c2b7facc60.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1219732/time-in-status-for-jira-cloud?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219732/time-in-status-for-jira-cloud?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1219732/time-in-status?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219732/time-in-status?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1220385/issue-history?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220385/issue-history?hosting=cloud", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1220385/issue-history-for-jira?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220385/issue-history-for-jira?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1227085/forms-checklists-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227085/forms-checklists-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1220741/sla-time-and-report-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220741/sla-time-and-report-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1221462/time-between-statuses?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221462/time-between-statuses?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1228109/recurring-checklists-and-report?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228109/recurring-checklists-and-report?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1229405/cost-tracker-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229405/cost-tracker-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1231078/issue-creator-for-jira-cloud-capture-screen-annotate?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1231078/issue-creator-for-jira-cloud-capture-screen-annotate?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-d5232977eebb9998", "name": "Safety Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/openai-safety", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $7,500", "reward_min": "$250", "reward_max": "$7,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:29Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/openai-safety/changelog/3dc49551-ddac-4a19-8cb7-6a0f44ff144e.json" ], "in_scope": [ { "name": "Agentic Tools", "asset_type": "other", "location": null, "group": "Agentic Tools Including MCP" }, { "name": "*.openai.com", "asset_type": "other", "location": null, "group": "OpenAI Proprietary Information" }, { "name": "openai.com", "asset_type": "website", "location": "https://openai.com/", "group": "Account and Platform Integrity" }, { "name": "Other", "asset_type": "other", "location": null, "group": "Other Novel Abuse" } ], "out_of_scope": [ { "name": "OpenAI models", "asset_type": "other", "location": null, "group": "Content Issues" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-f3cff1e0d12e7858", "name": "SAP Invitational Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/sap-private-invite", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $20,000", "reward_min": "$250", "reward_max": "$20,000", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:31Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/sap-private-invite/changelog/0ac488c0-d1d5-42c0-8983-62b0eedd33ca.json" ], "in_scope": [ { "name": "SAP SuccessFactors Employee Central", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP SuccessFactors Recruiting Marketing", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP S/4HANA Cloud Public Edition", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP S/4HANA Cloud Private Edition", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Integrated Business Planning for Supply Chain", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Cloud ALM", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Customer Data Cloud portfolio from Gigya", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Customer Data Platform", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP S/4HANA migration cockpit", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Risk and Assurance Management", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Continuous Integration and Delivery", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Order Management foundation", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Business Network for Logistics", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Decentralized Identity Verification", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Order and Delivery Scheduling", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Business Network for Asset Collaboration", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Watch List Screening", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP BusinessObjects Business Intelligence platform", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP WalkMe", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Signavio Process Intelligence", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Signavio Process Management", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP AI Core", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP BusinessOne", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "Gardener", "asset_type": "website", "location": null, "group": "Our products" }, { "name": "SAP Concur", "asset_type": "website", "location": null, "group": "Our products" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-bed722d3874ee39a", "name": "Savignano Software Solutions Marketplace Bug Bounty Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/savignano", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:32Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/savignano/changelog/28aae822-add2-441e-9966-9c379c97117d.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1218251/s-notify-email-encryption-for-jira?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218251/s-notify-email-encryption-for-jira?hosting=datacenter", "group": "In-Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1218509/s-notify-email-encryption-for-confluence?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1218509/s-notify-email-encryption-for-confluence?hosting=datacenter", "group": "In-Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1226720/s-notify-email-encryption-for-bitbucket?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226720/s-notify-email-encryption-for-bitbucket?hosting=datacenter", "group": "In-Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-7440fb39ee67de1a", "name": "SecureDrop", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/freedomofpress", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $2,500", "reward_min": "$100", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:33Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/freedomofpress/changelog/8cda910a-43f2-4767-8a42-e494490cf43a.json" ], "in_scope": [ { "name": "https://github.com/freedomofpress/securedrop", "asset_type": "other", "location": "https://github.com/freedomofpress/securedrop", "group": "In Scope Targets" }, { "name": "https://github.com/freedomofpress/securedrop-workstation", "asset_type": "other", "location": "https://github.com/freedomofpress/securedrop-workstation", "group": "In Scope Targets" }, { "name": "https://github.com/freedomofpress/securedrop-client", "asset_type": "other", "location": "https://github.com/freedomofpress/securedrop-client", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-eb13449fb7aa9493", "name": "SecureFlag Marketplace Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/secureflag-mbb-market", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:34Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/secureflag-mbb-market/changelog/9e559ff0-888f-4ad2-a37b-eddce655ce6c.json" ], "in_scope": [ { "name": "SecureFlag Knowledge Base - https://marketplace.atlassian.com/apps/1226453/secureflag-knowledge-base?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226453/secureflag-knowledge-base?tab=overview&hosting=cloud", "group": "In Scope Targets" }, { "name": "SecureFlag ThreatCanvas - https://marketplace.atlassian.com/apps/1232491?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1232491?tab=overview&hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-fa190530d12ab00d", "name": "SEEK", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/seek", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $10,000", "reward_min": "$50", "reward_max": "$10,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:35Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/seek/changelog/c6255a1b-4e66-4536-bb13-cc725c374079.json" ], "in_scope": [ { "name": "*.seek.com", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.employer.seek.com", "asset_type": "website", "location": "https://*.employer.seek.com", "group": "In Scope Targets" }, { "name": "*.seekpass.co", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.jobsdb.com", "asset_type": "website", "location": "https://*.jobsdb.com", "group": "In Scope Targets" }, { "name": "*.jobstreet.com", "asset_type": "website", "location": "https://*.jobstreet.com", "group": "In Scope Targets" }, { "name": "https://seekcdn.com", "asset_type": "other", "location": "https://seekcdn.com", "group": "In Scope Targets" }, { "name": "*.myseek.xyz", "asset_type": "website", "location": "https://*.myseek.xyz", "group": "In Scope Targets" }, { "name": "*.outfra.xyz", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "*.skinfra.xyz", "asset_type": "website", "location": null, "group": "In Scope Targets" }, { "name": "graphql.seek.com", "asset_type": "api", "location": "https://graphql.seek.com", "group": "API" }, { "name": "auth.seek.com", "asset_type": "api", "location": "https://auth.seek.com", "group": "API" }, { "name": "*.jobapi.net", "asset_type": "api", "location": null, "group": "API" }, { "name": "*.sol-data.com", "asset_type": "api", "location": null, "group": "API" }, { "name": "*.aips-internal.com", "asset_type": "website", "location": null, "group": "API" }, { "name": "SEEK mobile app for iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/seek-jobs-job-search/id520400855", "group": "Mobile Targets" }, { "name": "SEEK mobile app for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=au.com.seek&hl=en_AU&gl=US", "group": "Mobile Targets" }, { "name": "SEEK Pass Mobile App for iOS", "asset_type": "ios", "location": "https://apps.apple.com/au/app/certsy/id1617796159", "group": "Mobile Targets" }, { "name": "SEEK Pass Mobile App for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.certsy.app", "group": "Mobile Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-fa369eff5afec47f", "name": "Seek.com", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/seek-com", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$25 - $6,000", "reward_min": "$25", "reward_max": "$6,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 9, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:36Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/seek-com/changelog/c2e4716d-4e31-47ea-8617-5cbe2e818657.json" ], "in_scope": [ { "name": "███████████████████", "asset_type": "website", "location": null, "group": "█████████████████████" }, { "name": "████████████", "asset_type": "website", "location": null, "group": "█████████████████████" }, { "name": "███████████████", "asset_type": "website", "location": null, "group": "█████████████████████" }, { "name": "██████████████████", "asset_type": "website", "location": null, "group": "█████████████████████" }, { "name": "█████████████████", "asset_type": "website", "location": null, "group": "█████████████████████" }, { "name": "██████████████", "asset_type": "website", "location": null, "group": "█████████████████████" }, { "name": "████████████████████████████", "asset_type": "website", "location": null, "group": "██████████████████" }, { "name": "███████████████████████████", "asset_type": "website", "location": null, "group": "██████████████████" }, { "name": "█████████████████████", "asset_type": "website", "location": null, "group": "██████████████████" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "9 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-1c78c73cebd5a0eb", "name": "Shinetech Software Inc Marketplace Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/shinetech-software-market", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:37Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/shinetech-software-market/changelog/f14c154e-3396-4b2b-b1fb-2c8bd79f3a5c.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1221271/easy-heading-macro-floating-table-of-contents?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221271/easy-heading-macro-floating-table-of-contents?hosting=datacenter", "group": "In Scope Target" }, { "name": "https://marketplace.atlassian.com/apps/1221271/easy-heading-macro-floating-table-of-contents?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221271/easy-heading-macro-floating-table-of-contents?hosting=cloud&tab=overview", "group": "In Scope Target" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-b453878121ec1606", "name": "SimpliSafe Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/simplisafe", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $6,000", "reward_min": "$175", "reward_max": "$6,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:38Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/simplisafe/changelog/3d443036-c530-47c2-8139-5649a834eb7b.json" ], "in_scope": [ { "name": "bb1.simplisafe.com", "asset_type": "api", "location": "https://bb1.simplisafe.com", "group": "SimpliSafe Home Security Platform - Backend" }, { "name": "bb2.simplisafe.com", "asset_type": "api", "location": "https://bb2.simplisafe.com", "group": "SimpliSafe Home Security Platform - Backend" }, { "name": "cb.simplisafe.com", "asset_type": "api", "location": "https://cb.simplisafe.com", "group": "SimpliSafe Home Security Platform - Backend" }, { "name": "api.simplisafe.com (HSP Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Home Security Platform - Backend" }, { "name": "api.services.simplisafe.com (HSP Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Home Security Platform - Backend" }, { "name": "*.prd.cam.simplisafe.com (HSP Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Home Security Platform - Backend" }, { "name": "*.prd.platform.simplisafe.com (HSP Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Home Security Platform - Backend" }, { "name": "*.prd.services.simplisafe.com (HSP Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Home Security Platform - Backend" }, { "name": "SimpliSafe Customer Webapp - US", "asset_type": "website", "location": "https://webapp.simplisafe.com", "group": "SimpliSafe Customer App" }, { "name": "SimpliSafe Customer Webapp - UK", "asset_type": "website", "location": "https://webapp.simplisafe.co.uk", "group": "SimpliSafe Customer App" }, { "name": "SimpliSafe Customer iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/simplisafe-home-security-app/id555798051", "group": "SimpliSafe Customer App" }, { "name": "SimpliSafe Customer Android App", "asset_type": "android", "location": "https://play.google.com/store/search?q=simplisafe&c=apps", "group": "SimpliSafe Customer App" }, { "name": "mfa.simplisafe.com", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "*.prd.aser.simplisafe.com", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "*.prd.webapps.simplisafe.com", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "api.simplisafe.com (App Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "api.services.simplisafe.com (App Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "*.prd.services.simplisafe.com (App Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "*.prd.platform.simplisafe.com (App Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "media.simplisafe.com", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "*.prd.cam.simplisafe.com (App Endpoints)", "asset_type": "api", "location": null, "group": "SimpliSafe Customer App" }, { "name": "SimpliSafe Website - US", "asset_type": "website", "location": "https://simplisafe.com", "group": "SimpliSafe Ecommerce Platform" }, { "name": "SimpliSafe Website - UK", "asset_type": "website", "location": "https://simplisafe.co.uk", "group": "SimpliSafe Ecommerce Platform" }, { "name": "api.prd.commerce.simplisafe.com", "asset_type": "api", "location": null, "group": "SimpliSafe Ecommerce Platform" } ], "out_of_scope": [ { "name": "auth.simplisafe.com", "asset_type": "api", "location": null, "group": "Out of Scope Targets" }, { "name": "careers.simplisafe.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "clicks.simplisafe.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "library.simplisafe.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "livechat.simplisafe.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "press.simplisafe.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "support.simplisafe.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-ed73386dabe2aacd", "name": "Skroutz Public Managed Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/skroutz", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $5,000", "reward_min": "$100", "reward_max": "$5,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:39Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/skroutz/changelog/136f05a0-10c7-428a-b65f-d9dfc27b662b.json" ], "in_scope": [ { "name": "https://www.skroutz.gr", "asset_type": "website", "location": "https://www.skroutz.gr", "group": "Skroutz Public Application" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-2f3f1cb837e30fea", "name": "Sky DACH Vulnerability Disclosure Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/sky-plc-mbb-og2", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $1,000", "reward_min": "Points", "reward_max": "$1,000", "scope_rank": 1, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:40Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/sky-plc-mbb-og2/changelog/e795d126-59ee-4388-aa73-2206dcfceeb1.json" ], "in_scope": [ { "name": "All internet facing Sky DACH assets", "asset_type": "website", "location": null, "group": "In scope" } ], "out_of_scope": [ { "name": "*skybroadband.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skybet.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skynewsarabia.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skynews.com.au", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "All internet facing Sky UK/ROI assets", "asset_type": "website", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "All internet facing Sky Italy assets", "asset_type": "website", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-73b5a8a6c9dc06e9", "name": "Sky Italy Vulnerability Disclosure Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/sky-plc-mbb-og1", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $1,000", "reward_min": "Points", "reward_max": "$1,000", "scope_rank": 1, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:41Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/sky-plc-mbb-og1/changelog/6c4b1bbe-0f75-49e9-b4fe-cd26411d1722.json" ], "in_scope": [ { "name": "All internet facing Sky Italy assets", "asset_type": "website", "location": null, "group": "In scope" } ], "out_of_scope": [ { "name": "*skybroadband.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skybet.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skynewsarabia.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skynews.com.au", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*safetytraining.sky.it", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "All internet facing Sky UK/ROI assets", "asset_type": "website", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "All internet facing Sky DACH assets", "asset_type": "website", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-75c6578ce8fdb5b5", "name": "Sky UK/ROI Vulnerability Disclosure Program", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/sky-plc-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $1,000", "reward_min": "Points", "reward_max": "$1,000", "scope_rank": 1, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:42Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/sky-plc-mbb-og/changelog/029706df-805a-47ca-9a55-2da93b25b6ba.json" ], "in_scope": [ { "name": "All internet facing Sky UK/ROI assets", "asset_type": "website", "location": null, "group": "In scope" } ], "out_of_scope": [ { "name": "*skybroadband.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skybet.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skynewsarabia.com", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "*skynews.com.au", "asset_type": "other", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "All internet facing Sky DACH assets", "asset_type": "website", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" }, { "name": "All internet facing Sky Italy assets", "asset_type": "website", "location": null, "group": "Subscriber IP Ranges/Hostnames (Out Of Scope)" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-2a496c7014675793", "name": "Skyscanner", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/skyscanner", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $8,000", "reward_min": "$100", "reward_max": "$8,000", "scope_rank": 4, "access_status": "open", "industry": "Consumer Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:43Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/skyscanner/changelog/2c1e110f-7462-40b2-9539-13e36cd1dd1d.json" ], "in_scope": [ { "name": "Skyscanner iOS App", "asset_type": "ios", "location": null, "group": "In scope targets" }, { "name": "Skyscanner Android App", "asset_type": "android", "location": null, "group": "In scope targets" }, { "name": "gateway.skyscanner.net/*", "asset_type": "api", "location": null, "group": "In scope targets" }, { "name": "skyscanner.net/hotels/book/*", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "skyscanner.net/*", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "partnerportal.skyscanner.net/*", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "*.skyscanner.net", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "Skyscanner Android app", "asset_type": "android", "location": null, "group": "AI Bias Testing" }, { "name": "Skyscanner iOS app", "asset_type": "ios", "location": null, "group": "AI Bias Testing" }, { "name": "AWS Infrastructure", "asset_type": "other", "location": null, "group": "AWS Infrastructure" } ], "out_of_scope": [ { "name": "Corporate Email (*@skyscanner.net)", "asset_type": "other", "location": null, "group": "Out of scope" }, { "name": "help.skyscanner.net", "asset_type": "website", "location": "https://help.skyscanner.net", "group": "Out of scope" }, { "name": "carhirehelp.skyscanner.net", "asset_type": "website", "location": "https://carhirehelp.skyscanner.net", "group": "Out of scope" }, { "name": "hotelshelp.skyscanner.net", "asset_type": "website", "location": "https://hotelshelp.skyscanner.net", "group": "Out of scope" }, { "name": "support.business.skyscanner.net", "asset_type": "website", "location": "https://support.business.skyscanner.net", "group": "Out of scope" }, { "name": "www.partners.skyscanner.net", "asset_type": "website", "location": "https://www.partners.skyscanner.net", "group": "Out of scope" }, { "name": "creators.skyscanner.net", "asset_type": "website", "location": "https://creators.skyscanner.net", "group": "Out of scope" }, { "name": "preferences.skyscanner.net", "asset_type": "website", "location": "https://preferences.skyscanner.net", "group": "Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-a935fa9b8ffc5a50", "name": "Snapbytes Marketplace Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/snapbytes-market", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:44Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/snapbytes-market/changelog/5f4fafbc-42c3-423e-a1ee-0969d092994a.json" ], "in_scope": [ { "name": "SnapMetrics - https://marketplace.atlassian.com/apps/1237433/snapmetrics-real-time-analytics?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237433/snapmetrics-real-time-analytics?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-dc34e7961be1e0ca", "name": "SnapNames Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/snapnames", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $2,000", "reward_min": "Points", "reward_max": "$2,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:45Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/snapnames/changelog/edd9ae05-5b64-40ed-b7fc-ec8bd70979ea.json" ], "in_scope": [ { "name": "https://snapnames.com/", "asset_type": "website", "location": "https://snapnames.com/", "group": "In Scope" }, { "name": "https://www.namejet.com/", "asset_type": "website", "location": "https://www.namejet.com/", "group": "In Scope" } ], "out_of_scope": [ { "name": "*.snapnames.com", "asset_type": "website", "location": "https://www.*.snapnames.com", "group": "Out Of Scope" }, { "name": "*.namejet.com", "asset_type": "website", "location": "https://www.namejet.com", "group": "Out Of Scope" }, { "name": "*.buydomains.com", "asset_type": "website", "location": null, "group": "Out Of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-fa4a054bd1c67263", "name": "SolDevelo", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/soldevelo", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:46Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/soldevelo/changelog/5959ccd9-0c09-48bd-814f-89ece74ed8e3.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1219004/worklogs-time-tracking-and-reports?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219004/worklogs-time-tracking-and-reports?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1220026/multiple-checklists-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1220026/multiple-checklists-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1222083/qality-test-management-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1222083/qality-test-management-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1223344/qality-plus-test-management-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1223344/qality-plus-test-management-for-jira?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1219196/team-performance-reports-and-insights?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1219196/team-performance-reports-and-insights?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1229442/team-planner-resource-planning-for-jira?hosting=cloud&tab=overview", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1229442/team-planner-resource-planning-for-jira?hosting=cloud&tab=overview", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1235478/time-assistant-time-tracking-and-workload-dashboard?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1235478/time-assistant-time-tracking-and-workload-dashboard?hosting=cloud", "group": "In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1235478/time-assistant-time-tracking-and-workload-dashboard?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235478/time-assistant-time-tracking-and-workload-dashboard?hosting=cloud&tab=overview", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-eb62f872e2df2201", "name": "Sophos", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/sophos", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $80,000", "reward_min": "$100", "reward_max": "$80,000", "scope_rank": 4, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:47Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/sophos/changelog/15ecb6b8-00f6-4b9e-a854-911e5c976a6e.json" ], "in_scope": [ { "name": "Intercept X Endpoint (Windows) - Zero-click RCE", "asset_type": "other", "location": "https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial ", "group": "Intercept X Endpoint (Windows) Special Target" }, { "name": "Sophos Central (Production) - Special Target", "asset_type": "website", "location": "https://central.sophos.com/", "group": "Sophos Central Special Target" }, { "name": "Sophos Firewall (XG/XGS, SFOS) - Pre-auth RCE", "asset_type": "iot", "location": null, "group": "Sophos Firewall Special Target" }, { "name": "Sophos Central (Production)", "asset_type": "website", "location": "https://central.sophos.com", "group": "Premium Bounty Eligible Targets" }, { "name": "Sophos Firewall (XG/XGS, SFOS)", "asset_type": "iot", "location": "https://www.sophos.com/en-us/products/next-gen-firewall", "group": "Premium Bounty Eligible Targets" }, { "name": "Intercept X Endpoint (Windows)", "asset_type": "other", "location": "https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial", "group": "Premium Bounty Eligible Targets" }, { "name": "Intercept X Endpoint (MacOS)", "asset_type": "other", "location": "https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial", "group": "Premium Bounty Eligible Targets" }, { "name": "Intercept X Endpoint (Linux)", "asset_type": "other", "location": "https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial", "group": "Premium Bounty Eligible Targets" }, { "name": "Intercept X Mobile (iOS)", "asset_type": "ios", "location": "https://www.sophos.com/en-us/products/mobile-control/free-trial", "group": "Premium Bounty Eligible Targets" }, { "name": "Intercept X Mobile (Android)", "asset_type": "android", "location": "https://www.sophos.com/en-us/products/mobile-control/free-trial", "group": "Premium Bounty Eligible Targets" }, { "name": "Sophos NDR Appliances (NDR, Investigation Console)", "asset_type": "iot", "location": "https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/ThreatAnalysisCenter/Integrations/Sophos/NDR/index.html", "group": "Premium Bounty Eligible Targets" }, { "name": "Other Sophos Appliances (RED, Switch, Access Points, ...)", "asset_type": "iot", "location": "https://www.sophos.com/en-us/products", "group": "Premium Bounty Eligible Targets" }, { "name": "Sophos-owned IT infrastructure (*.sophos.com)", "asset_type": "network", "location": "https://www.sophos.com/", "group": "Premium Bounty Eligible Targets" }, { "name": "SOPHOS/Secureworks : Taegis", "asset_type": "other", "location": null, "group": "Premium Bounty Eligible Targets" }, { "name": "SOPHOS/Secureworks : Redcloak", "asset_type": "other", "location": null, "group": "Premium Bounty Eligible Targets" }, { "name": "3rd party services hosted at *.sophos.com", "asset_type": "website", "location": null, "group": "Bounty Eligible Targets" }, { "name": "Sophos IT Infrastructure (all other Sophos domains)", "asset_type": "other", "location": null, "group": "Bounty Eligible Targets" }, { "name": "Any Other Sophos Product or Service", "asset_type": "other", "location": null, "group": "Bounty Eligible Targets" } ], "out_of_scope": [ { "name": "community.sophos.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "Any Cyberoam Product or Service", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "sophos.atlassian.net (Public service desk)", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "SPF/DKIM/DMARC issues", "asset_type": "other", "location": null, "group": "Out of Scope Targets" }, { "name": "Sophos Firewall (Early Access Program (EAP) versions)", "asset_type": "iot", "location": null, "group": "Out of Scope Targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-6e1a96cd94993d4f", "name": "Soteri Marketplace Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/soteri", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$500 - $4,500", "reward_min": "$500", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:49Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/soteri/changelog/0dff46a7-7de9-42b0-998e-6818732b52c5.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1224167/security-for-confluence-enhanced-secret-scanner-by-soteri?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224167/security-for-confluence-enhanced-secret-scanner-by-soteri?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1224167/security-for-confluence-enhanced-secret-scanner-by-soteri?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224167/security-for-confluence-enhanced-secret-scanner-by-soteri?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1229376/security-for-jira-enhanced-secret-scanner-by-soteri?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229376/security-for-jira-enhanced-secret-scanner-by-soteri?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1229376/security-for-jira-enhanced-secret-scanner-by-soteri?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229376/security-for-jira-enhanced-secret-scanner-by-soteri?hosting=datacenter&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/1221399/security-for-bitbucket-enhanced-secret-scanner-by-soteri?hosting=datacenter&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221399/security-for-bitbucket-enhanced-secret-scanner-by-soteri?hosting=datacenter&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-9d9f8f6730052dfa", "name": "SoundCloud", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/soundcloud", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $4,500", "reward_min": "$200", "reward_max": "$4,500", "scope_rank": 4, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:50Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/soundcloud/changelog/1450ec8b-3581-4da6-9025-960d20d7b4c9.json" ], "in_scope": [ { "name": "SoundCloud Android app", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.soundcloud.android&hl=en&gl=US", "group": "In-scope targets" }, { "name": "soundcloud.com", "asset_type": "website", "location": "https://soundcloud.com", "group": "In-scope targets" }, { "name": "*.soundcloud.org", "asset_type": "website", "location": null, "group": "In-scope targets" }, { "name": "*.s-cloud.net", "asset_type": "website", "location": null, "group": "In-scope targets" }, { "name": "SoundCloud iOS app", "asset_type": "ios", "location": "https://apps.apple.com/us/app/soundcloud-music-audio/id336353151", "group": "In-scope targets" }, { "name": "*.soundcloud.com", "asset_type": "api", "location": "https://connect.soundcloud.com", "group": "In-scope targets" }, { "name": "*.services.repostnetwork.com", "asset_type": "api", "location": null, "group": "In-scope targets" }, { "name": "api-*.soundcloud.com", "asset_type": "api", "location": null, "group": "In-scope targets" }, { "name": "artists.soundcloud.com", "asset_type": "website", "location": "http://artists.soundcloud.com/", "group": "In-scope targets" }, { "name": "soundcloud.org", "asset_type": "website", "location": "https://soundcloud.org", "group": "In-scope targets" } ], "out_of_scope": [ { "name": "blog.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "status.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "help.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "community.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "copyright.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "advertising.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "soundcloudmail.com", "asset_type": "other", "location": "https://soundcloudmail.com", "group": "Out-Of-Scope" }, { "name": "press.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "scdrops.soundcloud.com", "asset_type": "website", "location": "https://scdrops.soundcloud.com", "group": "Out-Of-Scope" }, { "name": "promote.soundcloud.com", "asset_type": "website", "location": "https://promote.soundcloud.com", "group": "Out-Of-Scope" }, { "name": "contest.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "playback.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "jobs.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "playerone.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "support.soundcloud.org", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "secdomaintest.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" }, { "name": "firston.soundcloud.com", "asset_type": "website", "location": null, "group": "Out-Of-Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-93db9847dd214c6d", "name": "SpaceX/Starlink", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/spacex", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $100,000", "reward_min": "Points", "reward_max": "$100,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Self-managed", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:51Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/spacex/changelog/74048ca1-6181-43d8-a863-8238914c8ba1.json" ], "in_scope": [ { "name": "SpaceX and Starlink assets (target information and rewards detailed above on the brief)", "asset_type": "website", "location": null, "group": "In Scope targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-5dbe680990001fd6", "name": "Square", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/square", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $18,000", "reward_min": "Points", "reward_max": "$18,000", "scope_rank": 3, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 1, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:52Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/square/changelog/dcb212c3-8370-492c-803f-81a364c230df.json" ], "in_scope": [ { "name": "████████████", "asset_type": "website", "location": null, "group": "██████" }, { "name": "██████████████", "asset_type": "website", "location": null, "group": "██████" }, { "name": "█████████████", "asset_type": "website", "location": null, "group": "██████" }, { "name": "███████████████████████████████████████████████████", "asset_type": "android", "location": null, "group": "██████" }, { "name": "███████████████████████████████████████████████", "asset_type": "ios", "location": null, "group": "██████" }, { "name": "███████████████", "asset_type": "hardware", "location": null, "group": "██████" }, { "name": "██████████", "asset_type": "website", "location": null, "group": "██████" } ], "out_of_scope": [ { "name": "██████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████████████████████████████████████████████", "asset_type": "other", "location": null, "group": "████████████" }, { "name": "███████████████████████", "asset_type": "other", "location": null, "group": "████████████" }, { "name": "███████████████████████████████████████", "asset_type": "android", "location": null, "group": "████████████" }, { "name": "███████████████████████████████████", "asset_type": "ios", "location": null, "group": "████████████" }, { "name": "█████████████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "1 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-88b7710849a7e851", "name": "STAGIL Marketplace Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/stagil", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:53Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/stagil/changelog/204802ae-a1e0-4d0b-919a-41308ac3ba3e.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1215311/stagil-assets-advanced-links-data-model-matrix-structure?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1215311/stagil-assets-advanced-links-data-model-matrix-structure?tab=overview&hosting=cloud", "group": "In Scope Target" }, { "name": "https://marketplace.atlassian.com/apps/1219099/stagil-tables-todo-checklists-reports-statistics?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1219099/stagil-tables-todo-checklists-reports-statistics?hosting=cloud&tab=overview", "group": "In Scope Target" }, { "name": "https://marketplace.atlassian.com/apps/1211243/timetracker-time-tracking-timesheet-reporting-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211243/timetracker-time-tracking-timesheet-reporting-for-jira?hosting=cloud&tab=overview", "group": "In Scope Target" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-e84d27dd9e44e18b", "name": "Statuspage", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/statuspage", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,000", "reward_min": "$100", "reward_max": "$4,000", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:54Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/statuspage/changelog/67774d34-82ea-4d04-bfdf-89141a724bbb.json" ], "in_scope": [ { "name": "manage.statuspage.io", "asset_type": "website", "location": "https://manage.statuspage.io", "group": "In Scope" }, { "name": "*.statuspage.io", "asset_type": "website", "location": null, "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-d4b607788ef63337", "name": "Stiltsoft", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/stiltsoft", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $3,000", "reward_min": "$100", "reward_max": "$3,000", "scope_rank": 3, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:55Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/stiltsoft/changelog/a463c8f2-1492-4087-8d68-ecf85e3d05ae.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/27447/table-filter-and-charts-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/27447/table-filter-and-charts-for-confluence?hosting=cloud", "group": "High-Priority | In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1210934/awesome-graphs-for-bitbucket?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1210934/awesome-graphs-for-bitbucket?hosting=cloud", "group": "High-Priority | In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1210934/awesome-graphs-for-bitbucket?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1210934/awesome-graphs-for-bitbucket?hosting=datacenter", "group": "High-Priority | In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/27447/table-filter-and-charts-for-confluence?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/27447/table-filter-and-charts-for-confluence?hosting=datacenter", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1212507/smart-attachments-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1212507/smart-attachments-for-jira?hosting=cloud", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1222084/spreadsheet-issue-field-editor?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222084/spreadsheet-issue-field-editor?hosting=cloud", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1210766/teamcity-integration-for-jira?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1210766/teamcity-integration-for-jira?hosting=cloud", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1222102/webhook-manager-for-confluence-cloud?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222102/webhook-manager-for-confluence-cloud?hosting=cloud", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1237512/latex-math-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237512/latex-math-for-confluence?hosting=cloud", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1237729/checklist-for-jira-cloud-smart-todo-lists?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237729/checklist-for-jira-cloud-smart-todo-lists?hosting=cloud", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1214971/handy-macros-for-confluence-status-dropdown-formatting?hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214971/handy-macros-for-confluence-status-dropdown-formatting?hosting=datacenter", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1214971/handy-macros-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214971/handy-macros-for-confluence?hosting=cloud", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1214110/courses-and-quizzes-lms-for-confluence?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1214110/courses-and-quizzes-lms-for-confluence?hosting=cloud", "group": "Other - In Scope Targets" }, { "name": "https://marketplace.atlassian.com/apps/1899492230/live-tables-from-csv-json-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1899492230/live-tables-from-csv-json-for-confluence?hosting=cloud&tab=overview", "group": "Other - In Scope Targets" } ], "out_of_scope": [ { "name": "*.atlassian.com", "asset_type": "website", "location": "https://*.atlassian.com", "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-340c854715d1afd4", "name": "StonikByte", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/stonikbyte", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:56Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/stonikbyte/changelog/4be6048f-9d65-4761-9655-7915ec388dac.json" ], "in_scope": [ { "name": "Documents for Jira - Cloud - https://marketplace.atlassian.com/apps/1211062/documents-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211062/documents-for-jira?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Great Gadgets for Confluence Cloud | https://marketplace.atlassian.com/apps/1226592/great-gadgets-for-confluence-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226592/great-gadgets-for-confluence-cloud?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Project Team for Jira Cloud | https://marketplace.atlassian.com/apps/1217117/project-team-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217117/project-team-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Great Gadgets for Jira Cloud - https://marketplace.atlassian.com/apps/1216564/great-gadgets-for-jira-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1216564/great-gadgets-for-jira-cloud?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Velocity & Throughput Charts for Agile, Scrum, Kanban - https://marketplace.atlassian.com/apps/607387265/velocity-throughput-charts-for-agile-scrum-kanban?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/607387265/velocity-throughput-charts-for-agile-scrum-kanban?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "DevOps Gadgets for Jira (Insights from GitHub & BB) - https://marketplace.atlassian.com/apps/1237211/devops-gadgets-for-jira-insights-from-github-bb?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1237211/devops-gadgets-for-jira-insights-from-github-bb?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/2077076462/wip-run-wip-aging-charts-for-scrum-kanban-scaled-agile?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/2077076462/wip-run-wip-aging-charts-for-scrum-kanban-scaled-agile?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "https://marketplace.atlassian.com/apps/375826955/burndown-burnup-charts-with-forecast-for-agile-teams?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/375826955/burndown-burnup-charts-with-forecast-for-agile-teams?hosting=cloud&tab=overview", "group": "In Scope" }, { "name": "Cumulative Flow Diagram - https://marketplace.atlassian.com/apps/1752044660/cumulative-flow-diagram-cfd-charts-for-agile-scrum-kanban?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1752044660/cumulative-flow-diagram-cfd-charts-for-agile-scrum-kanban?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [ { "name": "Non- Atlassian Marketplace Apps", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-3491c9c46dc0dab2", "name": "Sykora IT Marketplace Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/sykora-it-market", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:57Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/sykora-it-market/changelog/d31a8730-219e-4e4f-9d66-1c60c8755390.json" ], "in_scope": [ { "name": "Azure Sync for Jira Assets - https://marketplace.atlassian.com/apps/1234296/azure-sync-for-jira-assets?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1234296/azure-sync-for-jira-assets?hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-9052f631389a67cb", "name": "T-Mobile", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/t-mobile", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $133,700", "reward_min": "Points", "reward_max": "$133,700", "scope_rank": 4, "access_status": "open", "industry": "Telecommunications", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:58Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/t-mobile/changelog/7978066a-0855-409b-9333-cfb95766b31e.json" ], "in_scope": [ { "name": "Self-Register Account on T-Mobile Microsoft Entra ID", "asset_type": "other", "location": null, "group": "Special Target" }, { "name": "Cellular Network Auth Bypass via Web App/T-Life (404-200-7239)", "asset_type": "network", "location": null, "group": "Special Target" }, { "name": "T&P Servers (Temporarily Out of Scope)", "asset_type": "network", "location": null, "group": "Special Target" }, { "name": "t-mobile.com", "asset_type": "website", "location": "https://t-mobile.com", "group": "Core Assets" }, { "name": "account.t-mobile.com", "asset_type": "website", "location": "https://account.t-mobile.com", "group": "Core Assets" }, { "name": "*.api.t-mobile.com", "asset_type": "api", "location": "https://api.t-mobile.com", "group": "Core Assets" }, { "name": "metrobyt-mobile.com", "asset_type": "website", "location": "https://metrobyt-mobile.com", "group": "Core Assets" }, { "name": "sprint.com", "asset_type": "website", "location": "https://sprint.com", "group": "Core Assets" }, { "name": "tfb.t-mobile.com", "asset_type": "website", "location": "https://tfb.t-mobile.com", "group": "Core Assets" }, { "name": "devedge.t-mobile.com", "asset_type": "website", "location": "https://devedge.t-mobile.com", "group": "Core Assets" }, { "name": "tess.service-now.com", "asset_type": "website", "location": "https://tess.service-now.com", "group": "Core Assets" }, { "name": "DIGITS - Web, Desktop, Mobile", "asset_type": "website", "location": "https://digits.t-mobile.com", "group": "Core Assets" }, { "name": "account.business.t-mobile.com", "asset_type": "website", "location": "https://account.business.t-mobile.com", "group": "Core Assets" }, { "name": "*.t-mobile.com", "asset_type": "website", "location": "https://t-mobile.com", "group": "Supplemental Assets" }, { "name": "*.metrobyt-mobile.com", "asset_type": "website", "location": "https://metrobyt-mobile.com", "group": "Supplemental Assets" }, { "name": "*.sprint.com", "asset_type": "website", "location": "https://sprint.com", "group": "Supplemental Assets" }, { "name": "api.vistarmedia.com", "asset_type": "website", "location": "https://api.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "packages.cortexpowered.com", "asset_type": "website", "location": "https://packages.cortexpowered.com", "group": "Supplemental Assets" }, { "name": "api.vistarmedia.eu", "asset_type": "website", "location": "https://api.vistarmedia.eu", "group": "Supplemental Assets" }, { "name": "production-dynam-creative.vistarmedia.com", "asset_type": "website", "location": "https://production-dynam-creative.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "storybook.vistarmedia.com", "asset_type": "website", "location": "https://storybook.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "creatives.vistarmedia.com", "asset_type": "website", "location": "https://creatives.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "sflower.cortexpowered.com", "asset_type": "website", "location": "https://sflower.cortexpowered.com", "group": "Supplemental Assets" }, { "name": "production-delivery-metrics-svc.vistarmedia.com", "asset_type": "website", "location": "https://production-delivery-metrics-svc.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "maps.vistarmedia.com", "asset_type": "website", "location": "https://maps.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "transcodes-cdn.vistarmedia.com", "asset_type": "website", "location": "https://transcodes-cdn.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "assets-cdn.vistarmedia.com", "asset_type": "website", "location": "https://assets-cdn.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "docker-staging.adstruc.com", "asset_type": "website", "location": "https://docker-staging.adstruc.com", "group": "Supplemental Assets" }, { "name": "staging-trafficking.vistarmedia.com", "asset_type": "website", "location": "https://staging-trafficking.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "job-svc-b.vistarmedia.com", "asset_type": "website", "location": "https://job-svc-b.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "docsite.vistarmedia.com", "asset_type": "website", "location": "https://docsite.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "sfleet.cortexpowered.com", "asset_type": "website", "location": "https://sfleet.cortexpowered.com", "group": "Supplemental Assets" }, { "name": "audience-builder.vistarmedia.com", "asset_type": "website", "location": "https://audience-builder.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "staging-login.vistarmedia.com", "asset_type": "website", "location": "https://staging-login.vistarmedia.com", "group": "Supplemental Assets" }, { "name": "clients.adstruc.com", "asset_type": "website", "location": "https://clients.adstruc.com", "group": "Supplemental Assets" }, { "name": "demo.adstruc.com", "asset_type": "website", "location": "https://demo.adstruc.com", "group": "Supplemental Assets" }, { "name": "*.uscc.net", "asset_type": "website", "location": "https://*.uscc.net", "group": "Supplemental Assets" }, { "name": "*.uscc.com", "asset_type": "website", "location": "https://*.uscc.com", "group": "Supplemental Assets" }, { "name": "*.uscellular.com", "asset_type": "website", "location": "https://*.uscellular.com", "group": "Supplemental Assets" }, { "name": "dashboard-101.moengage.com", "asset_type": "website", "location": "https://dashboard-101.moengage.com", "group": "Supplemental Assets" }, { "name": "assurancewireless.com", "asset_type": "website", "location": "https://www.assurancewireless.com", "group": "Supplemental Assets" }, { "name": "*.assurancewireless.com", "asset_type": "website", "location": "https://*.assurancewireless.com", "group": "Supplemental Assets" }, { "name": "assets.platform.blis.com", "asset_type": "website", "location": "https://assets.platform.blis.com", "group": "Supplemental Assets" }, { "name": "assets.development.amazon-tacticalplanner.com", "asset_type": "website", "location": "https://assets.development.amazon-tacticalplanner.com", "group": "Supplemental Assets" }, { "name": "assets.platform.development.blis.com", "asset_type": "website", "location": "https://assets.platform.development.blis.com", "group": "Supplemental Assets" }, { "name": "assets.platform.rc.blis.com", "asset_type": "website", "location": "https://assets.platform.rc.blis.com", "group": "Supplemental Assets" }, { "name": "audiencelogos.blis.com", "asset_type": "website", "location": "https://audiencelogos.blis.com", "group": "Supplemental Assets" }, { "name": "blis.com", "asset_type": "website", "location": "https://blis.com", "group": "Supplemental Assets" }, { "name": "creative.infinity.blismedia.com", "asset_type": "website", "location": "https://creative.infinity.blismedia.com", "group": "Supplemental Assets" }, { "name": "development.wmaudience.com", "asset_type": "website", "location": "https://development.wmaudience.com", "group": "Supplemental Assets" }, { "name": "imply-pivot.blis.com", "asset_type": "website", "location": "https://imply-pivot.blis.com", "group": "Supplemental Assets" }, { "name": "imply-pivot.test.blis.com", "asset_type": "website", "location": "https://imply-pivot.test.blis.com", "group": "Supplemental Assets" }, { "name": "imply.blis.com", "asset_type": "website", "location": "https://imply.blis.com", "group": "Supplemental Assets" }, { "name": "imply.internal.platform.blis.com", "asset_type": "website", "location": "https://imply.internal.platform.blis.com", "group": "Supplemental Assets" }, { "name": "imply.platform.blis.com", "asset_type": "website", "location": "https://imply.platform.blis.com", "group": "Supplemental Assets" }, { "name": "imply.platform.development.blis.com", "asset_type": "website", "location": "https://imply.platform.development.blis.com", "group": "Supplemental Assets" }, { "name": "imply.platform.rc.blis.com", "asset_type": "website", "location": "https://imply.platform.rc.blis.com", "group": "Supplemental Assets" }, { "name": "imply.test.blis.com", "asset_type": "website", "location": "https://imply.test.blis.com", "group": "Supplemental Assets" }, { "name": "imply.wmaudience.com", "asset_type": "website", "location": "https://imply.wmaudience.com", "group": "Supplemental Assets" }, { "name": "internal.platform.blis.com", "asset_type": "website", "location": "https://internal.platform.blis.com", "group": "Supplemental Assets" }, { "name": "jenkins-github.gcp.blis.com", "asset_type": "website", "location": "https://jenkins-github.gcp.blis.com", "group": "Supplemental Assets" }, { "name": "platform.blis.com", "asset_type": "website", "location": "https://platform.blis.com", "group": "Supplemental Assets" }, { "name": "platform.blismedia.com", "asset_type": "website", "location": "https://platform.blismedia.com", "group": "Supplemental Assets" }, { "name": "platform.development.blis.com", "asset_type": "website", "location": "https://platform.development.blis.com", "group": "Supplemental Assets" }, { "name": "platform.development2.blis.com", "asset_type": "website", "location": "https://platform.development2.blis.com", "group": "Supplemental Assets" }, { "name": "platform.rc.blis.com", "asset_type": "website", "location": "https://platform.rc.blis.com", "group": "Supplemental Assets" }, { "name": "privacy.blismedia.com", "asset_type": "website", "location": "https://privacy.blismedia.com", "group": "Supplemental Assets" }, { "name": "rc.wmaudience.com", "asset_type": "website", "location": "https://rc.wmaudience.com", "group": "Supplemental Assets" }, { "name": "signature.blis.com", "asset_type": "website", "location": "https://signature.blis.com", "group": "Supplemental Assets" }, { "name": "sitepixel.blis.com", "asset_type": "website", "location": "https://sitepixel.blis.com", "group": "Supplemental Assets" }, { "name": "sitepixel.dev.blis.com", "asset_type": "website", "location": "https://sitepixel.dev.blis.com", "group": "Supplemental Assets" }, { "name": "wiki.atom-lens.com", "asset_type": "website", "location": "https://wiki.atom-lens.com", "group": "Supplemental Assets" }, { "name": "wmaudience.com", "asset_type": "website", "location": "https://wmaudience.com", "group": "Supplemental Assets" }, { "name": "Subdomain Takeover", "asset_type": "other", "location": null, "group": "Static Bug-Class Rewards" }, { "name": "T-Life - iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/t-life/id1111876388", "group": "Mobile Targets" }, { "name": "T-Life - Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.tmobile.tuesdays&hl=en_US&gl=US", "group": "Mobile Targets" } ], "out_of_scope": [ { "name": "/self-service-*", "asset_type": "website", "location": null, "group": "Restricted Targets" }, { "name": "http://10.72.218.66/flag.txt", "asset_type": "network", "location": null, "group": "Restricted Targets" }, { "name": "http://10.62.252.214/flag.txt", "asset_type": "network", "location": null, "group": "Restricted Targets" }, { "name": "*.sprint.net", "asset_type": "website", "location": null, "group": "Restricted Targets" }, { "name": "*.mobile.uscc.net", "asset_type": "website", "location": null, "group": "Restricted Targets" }, { "name": "*.mobile.uscc.com", "asset_type": "website", "location": null, "group": "Restricted Targets" }, { "name": "*.moengage.com", "asset_type": "website", "location": "https://*.moengage.com", "group": "Restricted Targets" }, { "name": "appointments.uscellular.com", "asset_type": "website", "location": "https://appointments.uscellular.com", "group": "Restricted Targets" }, { "name": "Any domain, property, product, protocol, or service of the app/hardware/software version not explicitly listed in the In-Scope section is out of scope; submissions are welcome but not guaranteed for the bounty/bonus.", "asset_type": "other", "location": null, "group": "Categorical Exclusions" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-216b27245e80c7f3", "name": "Tamedia", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/tamedia", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,500", "reward_min": "$150", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Entertainment", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:59Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/tamedia/changelog/fe08c7af-8157-4dd9-a9e9-35f7df17507c.json" ], "in_scope": [ { "name": "https://www.tagesanzeiger.ch", "asset_type": "website", "location": "https://www.tagesanzeiger.ch", "group": "Paid-Media Frontends " }, { "name": "API calls going to disco-api from https://www.tagesanzeiger.ch", "asset_type": "api", "location": null, "group": "Paid-Media Frontends " } ], "out_of_scope": [ { "name": "https://abo.inscopedomain.ch", "asset_type": "website", "location": "https://abo.inscopedomain.ch", "group": "Out of scope targets" }, { "name": "https://login.inscopedomain.ch/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://auth.inscopedomain.ch/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://tgt.inscopedomain.ch/", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://shop.inscopedomain.ch/", "asset_type": "website", "location": null, "group": "Out of scope targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-e9282a84c7c8bfb5", "name": "Tesla", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/tesla", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $100,000", "reward_min": "$100", "reward_max": "$100,000", "scope_rank": 4, "access_status": "open", "industry": "Automotive", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:01Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/tesla/changelog/fd49b343-a058-4718-9b7b-dbb3199dc555.json" ], "in_scope": [ { "name": "*.tesla.cn", "asset_type": "website", "location": null, "group": "Non-vehicle vulnerabilities" }, { "name": "*.tesla.services", "asset_type": "website", "location": null, "group": "Non-vehicle vulnerabilities" }, { "name": "Official Tesla iOS apps", "asset_type": "ios", "location": "https://apps.apple.com/us/app/tesla/id582007913", "group": "Non-vehicle vulnerabilities" }, { "name": "*.tesla.com", "asset_type": "website", "location": null, "group": "Non-vehicle vulnerabilities" }, { "name": "*.teslamotors.com", "asset_type": "website", "location": null, "group": "Non-vehicle vulnerabilities" }, { "name": "Any host verified to be owned by Tesla Motors Inc. (domains/IP space/etc.)", "asset_type": "website", "location": null, "group": "Non-vehicle vulnerabilities" }, { "name": "*.solarcity.com", "asset_type": "website", "location": null, "group": "Non-vehicle vulnerabilities" }, { "name": "*.teslainsuranceservices.com", "asset_type": "website", "location": null, "group": "Non-vehicle vulnerabilities" }, { "name": "Official Tesla Android apps", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.teslamotors.tesla&hl=en_US&gl=US", "group": "Non-vehicle vulnerabilities" }, { "name": "Tesla Energy hardware you own", "asset_type": "hardware", "location": null, "group": "Non-vehicle vulnerabilities" }, { "name": "Tesla vehicle hardware that you own", "asset_type": "hardware", "location": null, "group": "Vehicle Targets" } ], "out_of_scope": [ { "name": "employeefeedback.tesla.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "energysupport.tesla.com (you can report vulnerabilities to bugbounty.zoho.com)", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "engage.tesla.com", "asset_type": "website", "location": "https://engage.tesla.com/", "group": "OUT OF SCOPE" }, { "name": "*.engage.tesla.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "feedback.tesla.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "feedback.teslamotors.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "ir.tesla.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "ir.teslamotors.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "mkto.teslamotors.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "shop.eu.teslamotors.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "service.tesla.com/docs/*", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "service.tesla.cn/docs/*", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "Any domains from acquisitions, such as maxwell.com", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" }, { "name": "Any other third-party websites hosted by non-Tesla entities", "asset_type": "website", "location": null, "group": "OUT OF SCOPE" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-bc44de486a361c0f", "name": "The Hut Group: Public Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/hutgroup-public", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $2,500", "reward_min": "$100", "reward_max": "$2,500", "scope_rank": 3, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:02Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/hutgroup-public/changelog/c321ca42-ab54-4b40-8f62-939fa6cc82dc.json" ], "in_scope": [ { "name": "https://*.cultbeauty.co.uk/", "asset_type": "website", "location": "https://www.cultbeauty.co.uk/", "group": "Ingenuity E-Commerce" }, { "name": "https://*.lookfantastic.com/", "asset_type": "website", "location": "https://www.lookfantastic.com/", "group": "Ingenuity E-Commerce" }, { "name": "https://*.myprotein.com/", "asset_type": "website", "location": "https://www.myprotein.com/", "group": "Ingenuity E-Commerce" }, { "name": "https://*.myvitamins.com/", "asset_type": "website", "location": "https://www.myvitamins.com/", "group": "Ingenuity E-Commerce" }, { "name": "https://*.arrowfilms.com", "asset_type": "website", "location": "https://www.arrowfilms.com", "group": "Ingenuity E-Commerce" }, { "name": "https://*.mankind.co.uk/", "asset_type": "website", "location": "https://www.mankind.co.uk/", "group": "Ingenuity E-Commerce" }, { "name": "https://*.illamasqua.com/", "asset_type": "website", "location": "https://www.illamasqua.com/", "group": "Ingenuity E-Commerce" }, { "name": "https://www.matalan.co.uk", "asset_type": "website", "location": "https://www.matalan.co.uk", "group": "Ingenuity E-Commerce" }, { "name": "https://*.enjoyselfish.com", "asset_type": "website", "location": "https://www.enjoyselfish.com", "group": "Ingenuity E-Commerce" } ], "out_of_scope": [ { "name": "https://www.myprotein.com.tr/", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-0f5512b619865d49", "name": "The Plugin People", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/plugin-people", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:03Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/plugin-people/changelog/eb788c78-44ad-4db0-84ed-d3696d765324.json" ], "in_scope": [ { "name": "[Cloud] Enterprise Mail Handler (JEMHC) for Jira Cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/4832/enterprise-mail-handler-for-jira-jemh?hosting=cloud&tab=overview", "group": "[Cloud] Enterprise Mail Handler (JEMHC) for Jira Cloud" }, { "name": "[DC] Enterprise Mail Handler (JEMH) for Jira", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/4832/enterprise-mail-handler-for-jira-cloud-jemhc-and-dc?hosting=datacenter&tab=overview", "group": "[DC] Enterprise Mail Handler (JEMH) for Jira DataCenter" }, { "name": "[Cloud] Custom Space User Management (CSUM) for Confluence Cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/133/custom-space-user-management-csum-for-dc-and-cloud?hosting=cloud&tab=overview", "group": "[Cloud] Custom Space User Management (CSUM) for Confluence Cloud" }, { "name": "[DC] Custom Space User Management (CSUM)", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/133/custom-space-user-management-csum-for-dc-and-cloud?hosting=datacenter&tab=overview", "group": "[DC] Custom Space User Management (CSUM) for Confluence DataCenter" }, { "name": "[DC] Latex for Confluence", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/207/latex-and-mathjax?hosting=datacenter&tab=overview", "group": "[DC] Latex for Confluence DataCenter" }, { "name": "[DC] Switch User (SU) for Jira", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/5043/switch-user-su-for-jira?hosting=datacenter&tab=overview", "group": "[DC] Switch User (SU) for Jira DataCenter" }, { "name": "[DC] Switch User (SU) for Confluence", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/9475/switch-user-su-for-confluence?hosting=datacenter&tab=overview", "group": "[DC] Switch User (SU) for Confluence DataCenter" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-be6f5e6db3043f04", "name": "The Trade Desk", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/thetradedesk-mbb", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $5,000", "reward_min": "$175", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:04Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/thetradedesk-mbb/changelog/a5e48d28-ece7-463c-b333-e6b613af0298.json" ], "in_scope": [ { "name": "open.sincera.io", "asset_type": "website", "location": "https://open.sincera.io", "group": "Special Target" }, { "name": "desk.thetradedesk.com", "asset_type": "website", "location": "https://desk.thetradedesk.com", "group": "Tier 1 Targets" }, { "name": "api.thetradedesk.com", "asset_type": "api", "location": "https://api.thetradedesk.com", "group": "Tier 1 Targets" }, { "name": "auth.thetradedesk.com", "asset_type": "website", "location": "https://auth.thetradedesk.com", "group": "Tier 1 Targets" }, { "name": "partner.thetradedesk.com", "asset_type": "website", "location": "https://partner.thetradedesk.com", "group": "Tier 1 Targets" }, { "name": "www.thetradedesk.com", "asset_type": "website", "location": "https://www.thetradedesk.com", "group": "Tier 1 Targets" }, { "name": "ops-sso.adsrvr.org", "asset_type": "website", "location": "https://ops-sso.adsrvr.org/", "group": "Tier 1 Targets" }, { "name": "myopenpass.com", "asset_type": "website", "location": "https://myopenpass.com", "group": "Tier 1 Targets" }, { "name": "auth.myopenpass.com", "asset_type": "api", "location": "https://auth.myopenpass.com", "group": "Tier 1 Targets" }, { "name": "partner.myopenpass.com", "asset_type": "website", "location": "https://partner.myopenpass.com", "group": "Tier 1 Targets" }, { "name": "atlantis-ext.myopenpass.com", "asset_type": "api", "location": "https://atlantis-ext.myopenpass.com", "group": "Tier 1 Targets" }, { "name": "*.prod.uidapi.com", "asset_type": "api", "location": "https://prod.uidapi.com", "group": "Tier 1 Targets" }, { "name": "prod.euid.eu", "asset_type": "api", "location": "https://prod.euid.eu", "group": "Tier 1 Targets" }, { "name": "core-prod.uidapi.com", "asset_type": "api", "location": "https://core-prod.uidapi.com", "group": "Tier 1 Targets" }, { "name": "optout-prod.uidapi.com", "asset_type": "api", "location": "https://optout-prod.uidapi.com", "group": "Tier 1 Targets" }, { "name": "optout.prod.euid.eu", "asset_type": "api", "location": "https://optout.prod.euid.eu", "group": "Tier 1 Targets" }, { "name": "transparentadvertising.com", "asset_type": "website", "location": "https://transparentadvertising.com", "group": "Tier 1 Targets" }, { "name": "transparentadvertising.eu", "asset_type": "website", "location": "https://transparentadvertising.eu", "group": "Tier 1 Targets" }, { "name": "portal.unifiedid.com", "asset_type": "website", "location": "https://portal.unifiedid.com", "group": "Tier 1 Targets" }, { "name": "*.thetradedesk.com", "asset_type": "website", "location": null, "group": "Tier 2 Targets" }, { "name": "*.adsrvr.org", "asset_type": "website", "location": null, "group": "Tier 2 Targets" }, { "name": "www.thecurrent.com", "asset_type": "website", "location": "https://www.thecurrent.com", "group": "Tier 2 Targets" }, { "name": "cdn.myopenpass.com", "asset_type": "api", "location": "https://cdn.myopenpass.com", "group": "Tier 2 Targets" }, { "name": "cstg-integ.uidapi.com", "asset_type": "website", "location": "https://cstg-integ.uidapi.com", "group": "Tier 2 Targets" }, { "name": "esp-jssdk-integ.uidapi.com", "asset_type": "website", "location": "https://esp-jssdk-integ.uidapi.com", "group": "Tier 2 Targets" }, { "name": "esp-srvonly-integ.uidapi.com", "asset_type": "website", "location": "https://esp-srvonly-integ.uidapi.com", "group": "Tier 2 Targets" }, { "name": "example-jssdk-integ.uidapi.com", "asset_type": "website", "location": "https://example-jssdk-integ.uidapi.com", "group": "Tier 2 Targets" }, { "name": "example-srvonly-integ.uidapi.com", "asset_type": "website", "location": "https://example-srvonly-integ.uidapi.com", "group": "Tier 2 Targets" }, { "name": "secure-signals-jssdk-integ.uidapi.com", "asset_type": "website", "location": "https://secure-signals-jssdk-integ.uidapi.com", "group": "Tier 2 Targets" }, { "name": "secure-signals-srvonly-integ.uidapi.com", "asset_type": "website", "location": "https://secure-signals-srvonly-integ.uidapi.com", "group": "Tier 2 Targets" }, { "name": "secure-signals-client-side-integ.uidapi.com", "asset_type": "website", "location": "https://secure-signals-client-side-integ.uidapi.com/", "group": "Tier 2 Targets" }, { "name": "secure-signals-react-integ.uidapi.com", "asset_type": "website", "location": "https://secure-signals-react-integ.uidapi.com", "group": "Tier 2 Targets" }, { "name": "www.adsrvr.org", "asset_type": "website", "location": "https://www.adsrvr.org", "group": "Tier 3 Targets" }, { "name": "myopenpassdemo.com", "asset_type": "website", "location": "https://myopenpassdemo.com/", "group": "Tier 3 Targets" }, { "name": "careers.thetradedesk.com", "asset_type": "website", "location": "https://careers.thetradedesk.com", "group": "Tier 3 Targets" }, { "name": "venturatvos.com", "asset_type": "website", "location": "https://www.venturatvos.com", "group": "Tier 3 Targets" }, { "name": "opensincera.com", "asset_type": "website", "location": "https://www.opensincera.com", "group": "Tier 3 Targets" }, { "name": "edgeacademy.thetradedesk.com", "asset_type": "website", "location": "https://edgeacademy.thetradedesk.com", "group": "Tier 3 Targets" } ], "out_of_scope": [ { "name": "investors.thetradedesk.com", "asset_type": "website", "location": "https://investors.thetradedesk.com", "group": "Out of Scope" }, { "name": "ask.thetradedesk.com", "asset_type": "website", "location": "https://ask.thetradedesk.com", "group": "Out of Scope" }, { "name": "www.thetradedeskedgeacademy.com", "asset_type": "website", "location": "https://www.thetradedeskedgeacademy.com", "group": "Out of Scope" }, { "name": "openpass.thetradedesk.com", "asset_type": "website", "location": "https://openpass.thetradedesk.com", "group": "Out of Scope" }, { "name": "unifiedid.com", "asset_type": "website", "location": "https://unifiedid.com", "group": "Out of Scope" }, { "name": "euid.eu", "asset_type": "website", "location": "https://euid.eu", "group": "Out of Scope" }, { "name": "argocd.*.uidapi.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "All client websites that have integrated with OpenPass", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "stationery.thetradedesk.com", "asset_type": "website", "location": "https://stationery.thetradedesk.com", "group": "Out of Scope" }, { "name": "bynder.thetradedesk.com", "asset_type": "website", "location": "https://bynder.thetradedesk.com", "group": "Out of Scope" }, { "name": "Applications that resolve to *.skilljarapp.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "Applications that resolve to *.smartling.com (ex: id.thetradedesk.com)", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "Applications that resolve to *.quilvem.com (ex: update.adsrvr.org)", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "Applications that resolve to *.okta.com (ex: openpath-login.thetradedesk.com)", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "Anything not explicitly listed as Tier 1, Tier 2, or Tier 3", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-d377eb320facc933", "name": "TheFork Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/thefork-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $3,500", "reward_min": "$50", "reward_max": "$3,500", "scope_rank": 4, "access_status": "open", "industry": "Hospitality", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:05Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/thefork-mbb-og/changelog/03044428-9524-46e6-8fb4-7b16a7a9032f.json" ], "in_scope": [ { "name": "manager.thefork.com", "asset_type": "website", "location": "https://manager.thefork.com", "group": "B2B" }, { "name": "TheFork Manager iOS App", "asset_type": "ios", "location": "https://apps.apple.com/app/thefork-manager-neo/id1295795281", "group": "B2B" }, { "name": "TheFork Manager Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.lafourchette.tfm3", "group": "B2B" }, { "name": "widget.thefork.com", "asset_type": "website", "location": "https://widget.thefork.com", "group": "B2B" }, { "name": "api.thefork.io", "asset_type": "api", "location": "https://api.thefork.io", "group": "B2B" }, { "name": "secure.thefork.com", "asset_type": "website", "location": "https://secure.thefork.com", "group": "B2B" }, { "name": "payment.lafourchette.com", "asset_type": "website", "location": "https://payment.lafourchette.com", "group": "B2B" }, { "name": "TheFork Manager Blog", "asset_type": "website", "location": "https://www.theforkmanager.com", "group": "B2B Low reward" }, { "name": "https://www.thefork.com", "asset_type": "website", "location": null, "group": "B2C" }, { "name": "TheFork iOS App", "asset_type": "ios", "location": "https://apps.apple.com/app/thefork-restaurants-bookings/id424850908", "group": "B2C" }, { "name": "TheFork Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.lafourchette.lafourchette", "group": "B2C" }, { "name": "https://api.thefork.com", "asset_type": "api", "location": "https://api.thefork.com", "group": "B2C" }, { "name": "https://api-ws.thefork.com", "asset_type": "api", "location": "https://api-ws.thefork.com", "group": "B2C" }, { "name": "https://m.thefork.com", "asset_type": "website", "location": "https://m.thefork.com", "group": "B2C" }, { "name": "https://blog.thefork.com/", "asset_type": "website", "location": "https://blog.thefork.com/", "group": "B2C" }, { "name": "*.tools.thefork.tech", "asset_type": "website", "location": "https://*.tools.thefork.tech", "group": "B2C Low reward" }, { "name": "www.restaurant-information.com", "asset_type": "website", "location": "https://www.restaurant-information.com", "group": "B2C Low reward" } ], "out_of_scope": [ { "name": "*.myfourchette.com", "asset_type": "api", "location": null, "group": "B2B Out of scope" }, { "name": "www.myfourchette.com", "asset_type": "website", "location": null, "group": "B2B Out of scope" }, { "name": "website.theforkmanager.com", "asset_type": "website", "location": null, "group": "B2B Out of scope" }, { "name": "*.lafourchette.rest", "asset_type": "website", "location": null, "group": "B2B Out of scope" }, { "name": "login.theforkmanager.com", "asset_type": "website", "location": null, "group": "B2B Out of scope" }, { "name": "developer.thefork.io", "asset_type": "other", "location": null, "group": "B2B Out of scope" }, { "name": "https://*.eltenedor.*", "asset_type": "website", "location": null, "group": "B2C Out of scope" }, { "name": "https://www.thefork.*", "asset_type": "website", "location": null, "group": "B2C Out of scope" }, { "name": "module.thefork.com", "asset_type": "website", "location": null, "group": "B2C Out of scope" }, { "name": "https://www.lafourchette.com", "asset_type": "website", "location": null, "group": "B2C Out of scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-91c855cfe9a79c85", "name": "TIDAL", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/tidal-bugbounty", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $5,000", "reward_min": "$100", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 2, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:06Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/tidal-bugbounty/changelog/93be9e4d-159a-4ea9-a2b9-c77f1efd62f7.json" ], "in_scope": [ { "name": "███████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "███████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "█████████████", "asset_type": "api", "location": null, "group": "████████████████" }, { "name": "████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "████████████████████", "asset_type": "ios", "location": null, "group": "████████████████" }, { "name": "████████████████████████", "asset_type": "android", "location": null, "group": "████████████████" }, { "name": "████████████████████", "asset_type": "other", "location": null, "group": "████████████████" }, { "name": "████████████████████████████████████████████████████████████████████████", "asset_type": "other", "location": null, "group": "████████████████" } ], "out_of_scope": [ { "name": "███████████████████", "asset_type": "other", "location": null, "group": "████████████████████" }, { "name": "███████████████", "asset_type": "other", "location": null, "group": "████████████████████" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "2 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-2224351fa688572d", "name": "ToolsPlus", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/toolsplus", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:07Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/toolsplus/changelog/2517f0c1-3ae0-4fb2-9f26-f910d8197176.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1217371/intercom-for-jira?hosting=cloud", "asset_type": "other", "location": "https://marketplace.atlassian.com/apps/1217371/intercom-for-jira?hosting=cloud", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-541d2903477c1432", "name": "Trello", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/trello", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$250 - $12,000", "reward_min": "$250", "reward_max": "$12,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:08Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/trello/changelog/799c3f25-0d05-4448-bef5-3585bd979103.json" ], "in_scope": [ { "name": "trello.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "api.trello.com", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "*.trello.services", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "Trello Desktop Client", "asset_type": "other", "location": null, "group": "In Scope" }, { "name": "Trello Mobile App for Android", "asset_type": "android", "location": null, "group": "In Scope" }, { "name": "Trello Mobile App for iOS", "asset_type": "ios", "location": null, "group": "In Scope" }, { "name": "Butler for Trello", "asset_type": "website", "location": "https://butlerfortrello.com/", "group": "In Scope" }, { "name": "Calendar Power-Up", "asset_type": "website", "location": "https://trello.com/power-ups/55a5d917446f517774210011/calendar-power-up", "group": "In Scope" }, { "name": "Card Aging Power-Up", "asset_type": "website", "location": "https://trello.com/power-ups/55a5d917446f517774210012/card-aging", "group": "In Scope" }, { "name": "List Limits Power-Up", "asset_type": "website", "location": "https://trello.com/power-ups/5c2462c384ab8949b1724a20/list-limits", "group": "In Scope" }, { "name": "Voting Power-Up", "asset_type": "website", "location": "https://trello.com/power-ups/55a5d917446f517774210013/voting", "group": "In Scope" }, { "name": "Microsoft Teams Integration", "asset_type": "website", "location": "https://trello.com/power-ups/6052d130068a8c0de7b022b4", "group": "In Scope" }, { "name": "Trello Third Party Powerups", "asset_type": "website", "location": null, "group": "Trello Third Party Powerups" } ], "out_of_scope": [ { "name": "First party (made-by-trello) power-ups other than those inscope are excluded from this program but can be reported to http://bugcrowd.com/atlassianapps", "asset_type": "website", "location": "http://bugcrowd.com/atlassianapps", "group": "Out of Scope" }, { "name": "e.trello.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "help.trello.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "trello-attachments.s3.amazonaws.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-de65e70dca5aed5d", "name": "Tripadvisor", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/tripadvisor-bb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $5,000", "reward_min": "$50", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:09Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/tripadvisor-bb-og/changelog/cfe0ee72-f35a-498c-aefc-997075164376.json" ], "in_scope": [ { "name": "api.production.cde.tamg.cloud", "asset_type": "api", "location": "https://api.production.cde.tamg.cloud", "group": "Tier 1 Targets" }, { "name": "partnerapi.tapayments.com", "asset_type": "api", "location": "https://partnerapi.tapayments.com", "group": "Tier 1 Targets" }, { "name": "partnerapi1.tapayments.com", "asset_type": "api", "location": "https://partnerapi1.tapayments.com", "group": "Tier 1 Targets" }, { "name": "partnerapi2.tapayments.com", "asset_type": "api", "location": "https://partnerapi2.tapayments.com", "group": "Tier 1 Targets" }, { "name": "walletproxy.tapayments.com", "asset_type": "api", "location": "https://walletproxy.tapayments.com", "group": "Tier 1 Targets" }, { "name": "walletproxy1.tapayments.com", "asset_type": "api", "location": "https://walletproxy1.tapayments.com", "group": "Tier 1 Targets" }, { "name": "walletproxy2.tapayments.com", "asset_type": "api", "location": "https://walletproxy2.tapayments.com", "group": "Tier 1 Targets" }, { "name": "www.tripadvisor.com", "asset_type": "website", "location": "https://www.tripadvisor.com", "group": "Tier 2 Targets" }, { "name": "Localized versions of www.tripadvisor.com available from the site's header or footer", "asset_type": "website", "location": null, "group": "Tier 2 Targets" }, { "name": "api.tripadvisor.com", "asset_type": "api", "location": "https://api.tripadvisor.com", "group": "Tier 2 Targets" }, { "name": "service.platform.tripadvisor.com", "asset_type": "api", "location": "https://service.platform.tripadvisor.com", "group": "Tier 2 Targets" }, { "name": "gwapi.tripadvisor.com", "asset_type": "api", "location": "https://gwapi.tripadvisor.com", "group": "Tier 2 Targets" }, { "name": "gwapi1.tripadvisor.com", "asset_type": "api", "location": "https://gwapi1.tripadvisor.com", "group": "Tier 2 Targets" }, { "name": "gwapi2.tripadvisor.com", "asset_type": "api", "location": "https://gwapi2.tripadvisor.com", "group": "Tier 2 Targets" }, { "name": "Any publicly accessible Tripadvisor web asset or host (domains, ip space, etc) - except for assets listed as Out-of-Scope below.", "asset_type": "website", "location": null, "group": "Tier 3 Targets" }, { "name": "Tripadvisor Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.tripadvisor.tripadvisor&hl=en", "group": "Tripadvisor Mobile" }, { "name": "Tripadvisor iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/tripadvisor-plan-book-trips/id284876795", "group": "Tripadvisor Mobile" }, { "name": "rentals.tripadvisor.com", "asset_type": "website", "location": "https://rentals.tripadvisor.com", "group": "Vacation Rentals" }, { "name": "*.vacationhomerentals.com", "asset_type": "website", "location": "https://*.vacationhomerentals.com", "group": "Vacation Rentals" }, { "name": "*.holidaylettings.com", "asset_type": "website", "location": "https://*.holidaylettings.com", "group": "Vacation Rentals" }, { "name": "*.flipkey.com", "asset_type": "website", "location": "https://*.flipkey.com", "group": "Vacation Rentals" }, { "name": "*.niumba.com", "asset_type": "website", "location": "https://*.niumba.com", "group": "Vacation Rentals" }, { "name": "*.housetrip.com", "asset_type": "website", "location": "https://*.housetrip.com", "group": "Vacation Rentals" }, { "name": "Tripadvisor Owner APP (https://itunes.apple.com/us/app/vacation-rentals-owner-app-by-tripadvisor/id1045663228?mt=8)", "asset_type": "ios", "location": "https://itunes.apple.com/us/app/vacation-rentals-owner-app-by-tripadvisor/id1045663228?mt=8", "group": "Vacation Rentals" }, { "name": "marlo.ext.tripadvisor.com", "asset_type": "website", "location": "http://marlo.ext.tripadvisor.com", "group": "Vacation Rentals" }, { "name": "*.bokundemo.com", "asset_type": "website", "location": "https://*.bokundemo.com", "group": "Bokun" }, { "name": "*.bokuntest.com", "asset_type": "website", "location": "https://*.bokuntest.com", "group": "Bokun" } ], "out_of_scope": [ { "name": "*.bokun.eu", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.bokun.website", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.bokun.tools", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.bokun.team", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "ir.tripadvisor.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.tripadviser.at", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.tripadvisor.cn", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.tripadvisor.*/Trips", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.tripadvisor.*/Mobile*", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.tripadvisor.*/engineering", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.tripadvisor.*/WidgetEmbed-*", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "spotlight-dev.tripadvisor.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "spotlight.tripadvisor.*", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "careers.tripadvisor.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.tripadvisoradexpress.*", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.tripadvisorwifi.*", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.bokun.io", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.bokun.is", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.bokun.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.bokun.app", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "taplus.*", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "tripadvisor-plus.*", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "tripadvisorplus.*", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.experiences.zone", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "travelermail.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets" }, { "name": "*.bokunmobile.website", "asset_type": "website", "location": null, "group": "Out of Scope Targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-4e9845a67170dae3", "name": "TRM Labs Public Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/trm-labs-public-mbb", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $1,000", "reward_min": "Points", "reward_max": "$1,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:10Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/trm-labs-public-mbb/changelog/91eebd30-272a-4444-9479-381ea5e8b2ba.json" ], "in_scope": [ { "name": "chainabuse-staging.com", "asset_type": "website", "location": null, "group": "Chainabuse" }, { "name": "api.chainabuse-staging.com", "asset_type": "api", "location": null, "group": "Chainabuse" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-a02702a2a9a9b7db", "name": "Tyler Technologies Data & Insights – Tyler Data Platform, powered by Socrata", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/tyler-tech-data-insights", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,500", "reward_min": "$150", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:11Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/tyler-tech-data-insights/changelog/3cb4c110-060e-46e4-a7f0-bb26ea3507c1.json" ], "in_scope": [ { "name": "https://opendata-demo.test-socrata.com", "asset_type": "other", "location": "https://opendata-demo.test-socrata.com", "group": "In Scope " }, { "name": "https://opendata.test-socrata.com", "asset_type": "other", "location": "https://opendata.test-socrata.com", "group": "In Scope " } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-df387b7ac7e56286", "name": "Ultra Mobile Mobile Apps Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/ultramobile-mobile-apps", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:12Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/ultramobile-mobile-apps/changelog/549b0737-78c8-470e-82b3-e340512a83ab.json" ], "in_scope": [ { "name": "Mint Mobile Android Phone App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.uvnv.mintsim", "group": "Primary Targets" }, { "name": "Mint Mobile IOS Phone App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/mint-mobile/id1295303441", "group": "Primary Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-4045a6f8f10c2659", "name": "Ultra Mobile Public Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/ultramobile-public", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Telecommunications", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:13Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/ultramobile-public/changelog/fb23e336-d029-4fde-961b-16ed461e201f.json" ], "in_scope": [ { "name": "https://www.mintmobile.com", "asset_type": "website", "location": "https://mintmobile.com", "group": "In Scope Targets" }, { "name": "https://www.ultramobile.com", "asset_type": "website", "location": "https://ultramobile.com", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-a27aebab67a5e8c6", "name": "Ultra Mobile Public ECOMM 2025 Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/ultramobile-ecomm", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$175 - $4,500", "reward_min": "$175", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Telecommunications", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:14Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/ultramobile-ecomm/changelog/9bfef0e4-38e5-45cc-83c4-e48916c426dd.json" ], "in_scope": [ { "name": "http://my.mintmobile.com/", "asset_type": "website", "location": "http://my.mintmobile.com/", "group": "In Scope Targets" }, { "name": "http://my.ultramobile.com", "asset_type": "website", "location": "http://my.ultramobile.com", "group": "In Scope Targets" }, { "name": "https://my.mintmobile.com", "asset_type": "website", "location": "https://my.mintmobile.com", "group": "In Scope Targets" }, { "name": "https://my.ultramobile.com", "asset_type": "website", "location": "https://my.ultramobile.com", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-7185bb5d539d66ab", "name": "Ultra Mobile Retailer Portal Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/ultramobile-retailer-portal", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $3,500", "reward_min": "$100", "reward_max": "$3,500", "scope_rank": 1, "access_status": "open", "industry": "Telecommunications", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:15Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/ultramobile-retailer-portal/changelog/8b94e17f-eb94-48bb-9fdf-41bad293bc76.json" ], "in_scope": [ { "name": "Web Retailer Portal", "asset_type": "website", "location": "https://web-retailer-portal.ultramobile.com", "group": "Ultra Mobile's Retailer Portal" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-25180725f22e69f4", "name": "Under Armour Corporate", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/underarmour-corp", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$125 - $2,500", "reward_min": "$125", "reward_max": "$2,500", "scope_rank": 3, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:17Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/underarmour-corp/changelog/26ab911f-3858-4f16-9def-7f2d0691c8da.json" ], "in_scope": [ { "name": "apphouse.underarmour.com", "asset_type": "website", "location": "https://apphouse.underarmour.com/", "group": "Group 1" }, { "name": "ourhouse.underarmour.com", "asset_type": "other", "location": "http://ourhouse.underarmour.com/", "group": "Group 1" }, { "name": "transfer.underarmour.com", "asset_type": "website", "location": "https://transfer.underarmour.com/", "group": "Group 1" }, { "name": "vpe-us.underarmour.com", "asset_type": "website", "location": "https://vpe-us.underarmour.com/", "group": "Group 1" }, { "name": "snc.underarmour.com", "asset_type": "website", "location": "https://snc.underarmour.com/", "group": "Group 2" }, { "name": "snctest-s.underarmour.com", "asset_type": "website", "location": "https://snctest-s.underarmour.com/", "group": "Group 2" }, { "name": "snctest-c.underarmour.com", "asset_type": "website", "location": "https://snctest-c.underarmour.com/", "group": "Group 2" }, { "name": "supplier.underarmour.com", "asset_type": "website", "location": "https://supplier.underarmour.com/", "group": "Group 2" }, { "name": "vtxapp9p.underarmour.com", "asset_type": "website", "location": "https://vtxapp9p.underarmour.com/", "group": "Group 3" }, { "name": "vtxapp9q.underarmour.com", "asset_type": "website", "location": "https://vtxapp9q.underarmour.com/", "group": "Group 3" }, { "name": "vtxapp9d.underarmour.com", "asset_type": "website", "location": "https://vtxapp9d.underarmour.com/", "group": "Group 3" }, { "name": "vtxappd.underarmour.com", "asset_type": "website", "location": "https://vtxappd.underarmour.com/", "group": "Group 3" }, { "name": "204.29.196.0/23", "asset_type": "other", "location": null, "group": "Group 4" }, { "name": "3.223.149.182", "asset_type": "other", "location": null, "group": "Group 4" }, { "name": "34.237.130.2", "asset_type": "other", "location": null, "group": "Group 4" }, { "name": "52.220.158.49", "asset_type": "other", "location": null, "group": "Group 4" }, { "name": "52.76.174.107", "asset_type": "other", "location": null, "group": "Group 4" }, { "name": "52.67.69.35", "asset_type": "other", "location": null, "group": "Group 4" }, { "name": "52.44.176.187", "asset_type": "website", "location": null, "group": "Group 5" }, { "name": "52.86.17.52", "asset_type": "other", "location": null, "group": "Group 5" }, { "name": "54.83.32.16", "asset_type": "other", "location": null, "group": "Group 5" }, { "name": "3.133.230.28", "asset_type": "other", "location": null, "group": "Group 6" }, { "name": "3.19.172.158", "asset_type": "other", "location": null, "group": "Group 6" } ], "out_of_scope": [ { "name": "investor.underarmour.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "careers.underarmour.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "www.underarmour.", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.underarmour.com/en-us/affiliate-home", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.uabiz.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "productsafety.underarmour.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "uabusiness.force.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.underarmour.jobs", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "blog.underarmour.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.uateamcatalogs.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.uaretail.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "uaallaccess.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.plankindustries.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-2772e7c4de62ebf1", "name": "Under Armour Product Security", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/underarmour", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$125 - $2,500", "reward_min": "$125", "reward_max": "$2,500", "scope_rank": 4, "access_status": "open", "industry": "Retail", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:18Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/underarmour/changelog/dc419cd1-6ab0-4cbe-9877-a3cc794f72f3.json" ], "in_scope": [ { "name": "www.underarmour.com", "asset_type": "website", "location": "https://www.underarmour.com", "group": "Paid Targets " }, { "name": "www.underarmour.co.uk", "asset_type": "website", "location": "https://www.underarmour.co.uk", "group": "Paid Targets " }, { "name": "UA Shop iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/under-armour/id1092704571", "group": "Paid Targets " }, { "name": "UA Shop Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.ua.shop&hl=en", "group": "Paid Targets " }, { "name": "https://api.shop.ua.com/graphql", "asset_type": "api", "location": "https://api.shop.ua.com/graphql", "group": "Paid Targets " }, { "name": "https://www.underarmournext.co.uk/", "asset_type": "website", "location": "https://www.underarmournext.co.uk/", "group": "Paid Targets " }, { "name": "https://underarmournext.com/", "asset_type": "website", "location": "https://underarmournext.com/", "group": "Paid Targets " }, { "name": "*.api.ua.com", "asset_type": "other", "location": "https://*.api.ua.com/", "group": "Paid Targets " }, { "name": "https://consumer-sustainability.underarmour.com/en", "asset_type": "website", "location": "https://consumer-sustainability.underarmour.com/en", "group": "Paid Targets " }, { "name": "vpe-us.underarmour.com", "asset_type": "website", "location": "https://vpe-us.underarmour.com/", "group": "Paid Targets " }, { "name": "*.underarmour.cn", "asset_type": "website", "location": "https://www.underarmour.cn", "group": "Paid Targets " }, { "name": "www.underarmour.com.sg", "asset_type": "website", "location": "http://www.underarmour.com.sg", "group": "Paid Targets " }, { "name": "underarmour.co.kr", "asset_type": "website", "location": "https://underarmour.co.kr", "group": "Paid Targets " }, { "name": "https://armourhouse.underarmour.com", "asset_type": "website", "location": "https://armourhouse.underarmour.com", "group": "Paid Targets " } ], "out_of_scope": [ { "name": "www.underarmour.com/en-us/affiliate-home", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.uabiz.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "investor.underarmour.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "productsafety.underarmour.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "uabusiness.force.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.underarmour.jobs", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "blog.underarmour.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.uateamcatalogs.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.uaretail.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "www.plankindustries.com", "asset_type": "website", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-a4eca08bfce2bc74", "name": "Unisys Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/unisys-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $4,500", "reward_min": "$50", "reward_max": "$4,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:19Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/unisys-mbb-og/changelog/a633b6d5-78fd-4c45-bd45-7f2466803723.json" ], "in_scope": [ { "name": "*.unisys.com", "asset_type": "website", "location": "http://unisys.com/", "group": "In Scope" }, { "name": "*.unifysquare.com", "asset_type": "website", "location": "http://unifysquare.com/", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-da4fb2e1c94e1e9f", "name": "Unity Technologies", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/unity", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $3,000", "reward_min": "$100", "reward_max": "$3,000", "scope_rank": 2, "access_status": "open", "industry": "Technology", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:21Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/unity/changelog/959f01e3-eae4-46a9-8ef0-14bab9dd686e.json" ], "in_scope": [ { "name": "id.unity.com", "asset_type": "website", "location": "https://id.unity.com", "group": "In Scope targets" }, { "name": "api.unity.com", "asset_type": "api", "location": "https://api.unity.com", "group": "In Scope targets" }, { "name": "cloud.unity.com", "asset_type": "website", "location": "https://cloud.unity.com", "group": "In Scope targets" }, { "name": "store.unity.com", "asset_type": "website", "location": "https://store.unity.com", "group": "In Scope targets" }, { "name": "pay.unity.com", "asset_type": "website", "location": "https://pay.unity.com", "group": "In Scope targets" }, { "name": "player-login.unity.com", "asset_type": "other", "location": null, "group": "In Scope targets" }, { "name": "Latest Supported LTS Versions of the Unity Editor - Unity 6.x.x Standard LTS, Unity 2022.3.x / 2021.3.x xLTS (enterprise license)", "asset_type": "other", "location": "https://unity3d.com/get-unity/download/archive", "group": "In Scope targets" }, { "name": "services.unity.com", "asset_type": "api", "location": "https://services.unity.com", "group": "In Scope targets" }, { "name": "Latest Version of the Unity Hub", "asset_type": "other", "location": "https://unity.com/download", "group": "In Scope targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-05e98d3d885c454c", "name": "Upwork", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/upwork", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$120 - $5,000", "reward_min": "$120", "reward_max": "$5,000", "scope_rank": 4, "access_status": "open", "industry": "Corporate Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:22Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/upwork/changelog/15e0c0da-a79e-40b3-8835-2feee7ec99be.json" ], "in_scope": [ { "name": "www.upwork.com", "asset_type": "website", "location": "https://www.upwork.com", "group": "In scope" }, { "name": "Upwork - Android Application", "asset_type": "android", "location": null, "group": "In scope" }, { "name": "Upwork - iOS Application", "asset_type": "ios", "location": null, "group": "In scope" }, { "name": "Upwork Dash Messenger Desktop Version (www.upwork.com/downloads)", "asset_type": "hardware", "location": null, "group": "In scope" }, { "name": "www.upwork.com/api", "asset_type": "api", "location": null, "group": "In scope" }, { "name": "Direct Contracts", "asset_type": "website", "location": null, "group": "In scope" }, { "name": "api.upwork.com/graphql", "asset_type": "api", "location": null, "group": "In scope" }, { "name": "Upwork - Marketplace Portal", "asset_type": "website", "location": null, "group": "Non-Circumvention Controls Targets" }, { "name": "Upwork - Messages", "asset_type": "website", "location": null, "group": "Non-Circumvention Controls Targets" }, { "name": "Upwork - Mobile Application IOS", "asset_type": "ios", "location": null, "group": "Non-Circumvention Controls Targets" }, { "name": "Upwork - Mobile Application Android", "asset_type": "android", "location": null, "group": "Non-Circumvention Controls Targets" }, { "name": "Upwork - api.upwork.com/graphql", "asset_type": "api", "location": null, "group": "Non-Circumvention Controls Targets" } ], "out_of_scope": [ { "name": "Social media hijacking", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "Any subdomain/domain/property not listed in the 'in scope' section, is out of scope.", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "Any Third-party Services", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "support.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "community.stage.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "community.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "stage.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "e.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "status.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "signature.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "careers.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "tip.upwork.com", "asset_type": "website", "location": null, "group": "Out of Scope" }, { "name": "tip.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" }, { "name": "pardot.upwork.com", "asset_type": "other", "location": null, "group": "Out of Scope" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-e770bd62950ed3a8", "name": "USAA", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/usaa", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $6,000", "reward_min": "$100", "reward_max": "$6,000", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:23Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/usaa/changelog/6e2b5e03-644a-4127-9a22-24d539aa9622.json" ], "in_scope": [ { "name": "api.usaa.com", "asset_type": "api", "location": "https://api.usaa.com/", "group": "API In-Scope Targets" }, { "name": "api-a.usaa.com", "asset_type": "api", "location": "https://api-a.usaa.com", "group": "API In-Scope Targets" }, { "name": "b2bapi-a.usaa.com", "asset_type": "api", "location": "https://b2bapi-a.usaa.com", "group": "API In-Scope Targets" }, { "name": "b2bapi.usaa.com", "asset_type": "api", "location": "https://b2bapi.usaa.com", "group": "API In-Scope Targets" }, { "name": "b2blsapi-a.usaa.com", "asset_type": "api", "location": "https://b2blsapi-a.usaa.com", "group": "API In-Scope Targets" }, { "name": "b2blsapi.usaa.com", "asset_type": "api", "location": "https://b2blsapi.usaa.com", "group": "API In-Scope Targets" }, { "name": "vlapi.usaa.com", "asset_type": "api", "location": "https://vlapi.usaa.com", "group": "API In-Scope Targets" }, { "name": "mapi.usaa.com", "asset_type": "api", "location": "https://mapi.usaa.com/", "group": "API In-Scope Targets" }, { "name": "mapi-a.usaa.com", "asset_type": "api", "location": "https://mapi-a.usaa.com", "group": "API In-Scope Targets" }, { "name": "wsmbr.usaa.com", "asset_type": "api", "location": "https://wsmbr.usaa.com/", "group": "API In-Scope Targets" }, { "name": "ws.usaa.com", "asset_type": "api", "location": "https://ws.usaa.com", "group": "API In-Scope Targets" }, { "name": "usaa.com", "asset_type": "website", "location": "https://www.usaa.com", "group": "High Priority Targets " }, { "name": "mobile.usaa.com", "asset_type": "website", "location": "https://mobile.usaa.com", "group": "High Priority Targets " }, { "name": "partners.usaa.com", "asset_type": "other", "location": "https://partners.usaa.com", "group": "High Priority Targets " }, { "name": "USAA Mobile Application for Android", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.usaa.mobile.android.usaa&hl=en", "group": "High Priority Targets " }, { "name": "USAA Mobile Application for iOS", "asset_type": "ios", "location": "https://apps.apple.com/us/app/usaa-mobile/id312325565", "group": "High Priority Targets " }, { "name": "aemdam.usaa360.com", "asset_type": "website", "location": "https://aemdam.usaa360.com/", "group": "In Scope Targets" }, { "name": "authn.usaa.com", "asset_type": "website", "location": "https://authn.usaa.com/", "group": "In Scope Targets" }, { "name": "content.usaa.com", "asset_type": "website", "location": "https://content.usaa.com", "group": "In Scope Targets" }, { "name": "d1.utv.usaa.com", "asset_type": "website", "location": "https://d1.utv.usaa.com", "group": "In Scope Targets" }, { "name": "d2.utv.usaa.com", "asset_type": "website", "location": "https://d2.utv.usaa.com", "group": "In Scope Targets" }, { "name": "externalconnect.usaa.com", "asset_type": "website", "location": "https://externalconnect.usaa.com/", "group": "In Scope Targets" }, { "name": "guest.usaa.com", "asset_type": "website", "location": "https://guest.usaa.com/", "group": "In Scope Targets" }, { "name": "l.usaa.com", "asset_type": "other", "location": "https://l.usaa.com/", "group": "In Scope Targets" }, { "name": "liveassist.usaa.com", "asset_type": "other", "location": "https://liveassist.usaa.com/", "group": "In Scope Targets" }, { "name": "liveassist11.usaa.com", "asset_type": "other", "location": "https://liveassist11.usaa.com/", "group": "In Scope Targets" }, { "name": "liveassist12.usaa.com", "asset_type": "other", "location": "https://liveassist12.usaa.com/", "group": "In Scope Targets" }, { "name": "liveassist21.usaa.com", "asset_type": "other", "location": "https://liveassist21.usaa.com/", "group": "In Scope Targets" }, { "name": "liveassist22.usaa.com", "asset_type": "other", "location": "https://liveassist22.usaa.com/", "group": "In Scope Targets" }, { "name": "liveassist23.usaa.com", "asset_type": "website", "location": "https://liveassist23.usaa.com", "group": "In Scope Targets" }, { "name": "liveassist24.usaa.com", "asset_type": "website", "location": "https://liveassist24.usaa.com", "group": "In Scope Targets" }, { "name": "mguest.usaa.com", "asset_type": "website", "location": "https://mguest.usaa.com/", "group": "In Scope Targets" }, { "name": "mobileapps.usaa.com", "asset_type": "other", "location": "https://mobileapps.usaa.com/", "group": "In Scope Targets" }, { "name": "mstatic.usaa.com", "asset_type": "website", "location": "https://mstatic.usaa.com", "group": "In Scope Targets" }, { "name": "mydesktop.usaa.com", "asset_type": "website", "location": "https://mydesktop.usaa.com", "group": "In Scope Targets" }, { "name": "myvpn.usaa.com", "asset_type": "website", "location": "https://myvpn.usaa.com", "group": "In Scope Targets" }, { "name": "nice.wfmusaa.com", "asset_type": "website", "location": "https://nice.wfmusaa.com", "group": "In Scope Targets" }, { "name": "nvoice.usaa.com", "asset_type": "other", "location": "https://nvoice.usaa.com/", "group": "In Scope Targets" }, { "name": "s.usaa.com", "asset_type": "other", "location": "https://s.usaa.com/", "group": "In Scope Targets" }, { "name": "s1.utv.usaa.com", "asset_type": "website", "location": "https://s1.utv.usaa.com", "group": "In Scope Targets" }, { "name": "s2.utv.usaa.com", "asset_type": "website", "location": "https://s2.utv.usaa.com", "group": "In Scope Targets" }, { "name": "securemail.usaa.com", "asset_type": "website", "location": "https://securemail.usaa.com", "group": "In Scope Targets" }, { "name": "static.usaa.com", "asset_type": "website", "location": "https://static.usaa.com", "group": "In Scope Targets" }, { "name": "usaainsurance.com", "asset_type": "website", "location": "https://www.usaainsurance.com/", "group": "In Scope Targets" }, { "name": "utv.usaa.com", "asset_type": "website", "location": "https://utv.usaa.com", "group": "In Scope Targets" }, { "name": "v.utv.usaa.com", "asset_type": "website", "location": "https://v.utv.usaa.com", "group": "In Scope Targets" }, { "name": "vendorss.usaa.com", "asset_type": "website", "location": "https://vendorss.usaa.com", "group": "In Scope Targets" }, { "name": "vlagg.usaa.com", "asset_type": "website", "location": "https://vlagg.usaa.com", "group": "In Scope Targets" }, { "name": "webmail.usaa.com", "asset_type": "other", "location": "https://webmail.usaa.com", "group": "In Scope Targets" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-0fdfbcf609dbd643", "name": "Vectors Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/vectors-marketplace", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 2, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:24Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/vectors-marketplace/changelog/f130a1f4-f675-46d7-9a5c-23c92ce988b8.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1212124/spectrum-formatting-macros?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1212124/spectrum-formatting-macros?hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1211894/ideation?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211894/ideation?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1211855/faq-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211855/faq-for-confluence?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1212012/discussion-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1212012/discussion-for-confluence?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1217652/content-status-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1217652/content-status-for-confluence?hosting=cloud&tab=overview", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1235238/morph-ai-powered-content-formatting-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235238/morph-ai-powered-content-formatting-for-confluence?tab=overview&hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1211800/glossary?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1211800/glossary?hosting=cloud", "group": "In Scope " }, { "name": "https://marketplace.atlassian.com/apps/1235579/comment-toolkit-for-jira?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235579/comment-toolkit-for-jira?hosting=cloud&tab=overview", "group": "In Scope " } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-50a24f7fc340bda2", "name": "Verisign Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/verisign", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $10,000", "reward_min": "$100", "reward_max": "$10,000", "scope_rank": 4, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:25Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/verisign/changelog/cab773d9-01e1-40cb-932b-7c5a4f2829fd.json" ], "in_scope": [ { "name": "epptool-ctld.verisign-grs.com (EPP service; DNS related)", "asset_type": "other", "location": null, "group": "In Scope Targets - Tier 1 Rewards" }, { "name": "a.root-servers.net (DNS service; DNS related)", "asset_type": "other", "location": null, "group": "In Scope Targets - Tier 1 Rewards" }, { "name": "j.root-servers.net (DNS service; DNS related)", "asset_type": "other", "location": null, "group": "In Scope Targets - Tier 1 Rewards" }, { "name": "*.gtld-servers.net (DNS service; DNS related)", "asset_type": "other", "location": null, "group": "In Scope Targets - Tier 1 Rewards" }, { "name": "www.verisign.com (Website; non-DNS related)", "asset_type": "website", "location": "https://www.verisign.com", "group": "In Scope Targets - Tier 2 Rewards" }, { "name": "*.youcouldbe.com", "asset_type": "website", "location": "https://youcouldbe.com", "group": "In Scope Targets - Tier 2 Rewards" }, { "name": "blog.verisign.com (Website; non-DNS related)", "asset_type": "website", "location": "https://blog.verisign.com", "group": "In Scope Targets - Tier 2 Rewards" }, { "name": "*.namestudioforsocial.com", "asset_type": "website", "location": "https://namestudioforsocial.com/", "group": "In Scope Targets - Tier 2 Rewards" }, { "name": "*.namestudio.com", "asset_type": "website", "location": "https://namestudio.com", "group": "In Scope Targets - Tier 2 Rewards" }, { "name": "*.verisign.com", "asset_type": "other", "location": "https://www.verisign.com", "group": "In Scope Targets - Tier 2 Rewards" }, { "name": "*.verisign-grs.com (DNS service; DNS related)", "asset_type": "other", "location": null, "group": "In Scope Targets - Tier 2 Rewards" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-d9e0b06dc68f5a80", "name": "Viator", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/viator", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$200 - $4,500", "reward_min": "$200", "reward_max": "$4,500", "scope_rank": 4, "access_status": "open", "industry": "Consumer Services", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:26Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/viator/changelog/3d692266-89d0-42d6-a49b-1430f275ec8f.json" ], "in_scope": [ { "name": "iOS Viator Tours & Activities App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/viator-tours-activities/id434832826", "group": "Viator In Scope Targets " }, { "name": "Android Viator Tours & Activities App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.viator.mobile.android&hl=en_US&gl=US", "group": "Viator In Scope Targets " }, { "name": "https://supplier.viator.com/", "asset_type": "website", "location": "https://supplier.viator.com/", "group": "Viator In Scope Targets " }, { "name": "https://www.toursgds.com/", "asset_type": "api", "location": "https://www.toursgds.com/", "group": "Viator In Scope Targets " }, { "name": "https://www.toursgds.com/ToursGdsService?wsdl", "asset_type": "api", "location": "https://www.toursgds.com/ToursGdsService?wsdl", "group": "Viator In Scope Targets " }, { "name": "https://www.toursgds.com/SupplierService?wsdl", "asset_type": "api", "location": "https://www.toursgds.com/SupplierService?wsdl", "group": "Viator In Scope Targets " }, { "name": "https://partners.viator.com", "asset_type": "website", "location": "https://partners.viator.com", "group": "Viator In Scope Targets " }, { "name": "travelagents.viator.com", "asset_type": "website", "location": "https://travelagents.viator.com", "group": "Viator In Scope Targets " }, { "name": "https://help.supplier.viator.com/en", "asset_type": "website", "location": "https://help.supplier.viator.com/en", "group": "Viator In Scope Targets " }, { "name": "kiwi.partner.viator.com", "asset_type": "website", "location": "https://kiwi.partner.viator.com", "group": "Viator In Scope Targets " }, { "name": "*.viatorinc.com", "asset_type": "website", "location": "https://*.viatorinc.com", "group": "Viator In Scope Targets " }, { "name": "selector.viator.com", "asset_type": "website", "location": "https://selector.viator.com", "group": "Viator In Scope Targets " }, { "name": "partnerhelp.viator.com/", "asset_type": "website", "location": "https://partnerhelp.viator.com/", "group": "Viator In Scope Targets " }, { "name": "*.viator.com", "asset_type": "website", "location": "https://*.viator.com", "group": "Viator In Scope Targets " } ], "out_of_scope": [ { "name": "*.rc.viator.com", "asset_type": "other", "location": null, "group": "Viator Out of Scope Targets" }, { "name": "*.sandbox.viator.com", "asset_type": "website", "location": null, "group": "Viator Out of Scope Targets" }, { "name": "*.partner.viator.com", "asset_type": "website", "location": null, "group": "Viator Out of Scope Targets" }, { "name": "agentcenter.viator.com", "asset_type": "website", "location": null, "group": "Viator Out of Scope Targets" }, { "name": "operatorresources.viator.com", "asset_type": "website", "location": null, "group": "Viator Out of Scope Targets" }, { "name": "partnerresources.viator.com", "asset_type": "website", "location": null, "group": "Viator Out of Scope Targets" }, { "name": "api.tapayments.com", "asset_type": "other", "location": null, "group": "Viator Out of Scope Targets" }, { "name": "*.rc.viatorinc.com", "asset_type": "other", "location": null, "group": "Viator Out of Scope Targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-4707e743dbc38b1f", "name": "Vico Marketplace Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/vicosoft", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:28Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/vicosoft/changelog/85768bd8-7687-4cd1-8423-1d6b21511c7a.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1221161/uml-for-confluence-cloud?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221161/uml-for-confluence-cloud?hosting=cloud&tab=overview", "group": "In Scope" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-8a7562d7d64064d9", "name": "Vinted Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/vinted-uab-mbb", "bounty_classification": "verified_policy", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$75 - $4,000", "reward_min": "$75", "reward_max": "$4,000", "scope_rank": 3, "access_status": "open", "industry": "eCommerce", "service_level": "Platform", "badge": "updated", "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "vinted-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:27Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/vinted-uab-mbb/changelog/762b2474-e004-41d0-b720-c050b4e16705.json" ], "in_scope": [ { "name": "www.vinted.com", "asset_type": "website", "location": "https://www.vinted.com", "group": "Primary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "www.vinted.net", "asset_type": "website", "location": "https://www.vinted.net", "group": "Primary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "www.vintedgo.com", "asset_type": "website", "location": "https://www.vintedgo.com", "group": "Primary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Vinted iOS application", "asset_type": "ios", "location": "https://apps.apple.com/us/app/vinted-pre-loved-marketplace/id632064380", "group": "Primary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Vinted Android application", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=fr.vinted", "group": "Primary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Vinted Go Sandbox", "asset_type": "website", "location": "https://sandbox.vintedgo.com", "group": "Secondary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Vinted Sandbox", "asset_type": "website", "location": "https://sandbox.vinted.com", "group": "Secondary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Vinted Go Escalations test", "asset_type": "website", "location": "https://test-escalations.vintedgo.com", "group": "Secondary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Encryption Service", "asset_type": "website", "location": "https://badger.it.vinted.com", "group": "Secondary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Vinted Careers", "asset_type": "website", "location": "https://careers.vinted.com", "group": "Secondary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Company Vinted", "asset_type": "website", "location": "https://company.vinted.com", "group": "Secondary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "News Vinted", "asset_type": "website", "location": "https://news.vinted.com", "group": "Secondary Target Group", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [], "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ], "review_flags": [] }, { "id": "bugcrowd-3bc2b522f2f83e10", "name": "Volkswagen", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/volkswagen-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,500", "reward_min": "$150", "reward_max": "$2,500", "scope_rank": 1, "access_status": "open", "industry": "Automotive", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:29Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/volkswagen-og/changelog/6bc3d4da-d19f-4458-8135-ad3a020ac71e.json" ], "in_scope": [ { "name": "*.volkswagen.de", "asset_type": "website", "location": null, "group": "In Scope Targets" } ], "out_of_scope": [ { "name": "erwin.volkswagen.de", "asset_type": "website", "location": "https://erwin.volkswagen.de", "group": "Out of scope targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-609231d43d6a8e7a", "name": "VR Public Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/vr-group-mbb-og1", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $5,000", "reward_min": "$100", "reward_max": "$5,000", "scope_rank": 1, "access_status": "open", "industry": "Transportation", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:30Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/vr-group-mbb-og1/changelog/e1932318-5130-4a41-9a7e-35cbd77e5015.json" ], "in_scope": [ { "name": "www.vr.fi", "asset_type": "website", "location": "https://www.vr.fi/", "group": "In Scope " } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-72f2cd2dfaa18ddb", "name": "Web.com Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/webdotcom", "bounty_classification": "verified_policy", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $3,000", "reward_min": "Points", "reward_max": "$3,000", "scope_rank": 1, "access_status": "open", "industry": "Technology", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "web-com-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:28Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/webdotcom/changelog/cdf0a5a7-3e14-4bd2-8997-a9567e0bb63e.json" ], "in_scope": [ { "name": "app.web.com", "asset_type": "website", "location": "https://app.web.com", "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "www.networksolutions.com", "asset_type": "website", "location": "https://www.networksolutions.com", "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://www.bluehost.com/", "asset_type": "website", "location": "https://www.bluehost.com/", "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://www.hostgator.com/", "asset_type": "website", "location": "https://www.hostgator.com/", "group": "In Scope ", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "*.web.com", "asset_type": "website", "location": "https://*.web.com", "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.register.com", "asset_type": "website", "location": "https://*.register.com", "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.networksolutions.com", "asset_type": "website", "location": "https://*.networksolutions.com", "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://app.gator.com/", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.bluehost.com", "asset_type": "website", "location": null, "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.hostgator.com", "asset_type": "website", "location": "https://*.hostgator.com", "group": "Out of Scope Targets", "source_ids": [ "assets-scope-2026-10-03" ] } ], "limitations": [ "Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research." ], "review_flags": [] }, { "id": "bugcrowd-443621b4bcaff6c1", "name": "weweave UG Marketplace Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/we-weave", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 3, "access_status": "open", "industry": null, "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:31Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/we-weave/changelog/c9784081-2fb5-40df-a91b-9cf9fa63caf2.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1226741/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226741/?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1222572/mermaid-charts-diagrams-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222572/mermaid-charts-diagrams-for-confluence?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1220302/data-tables-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1220302/data-tables-for-confluence?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1222532/prism-syntax-highlighter-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222532/prism-syntax-highlighter-for-confluence?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1221789/youtube-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221789/youtube-for-confluence?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1222612/chart-js-diagrams-for-confluence-cloud&hosting=cloud?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222612/chart-js-diagrams-for-confluence-cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1224009/content-mirror-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224009/content-mirror-for-confluence?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1223493/custom-css-code-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223493/custom-css-code-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1221973/content-tools-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221973/content-tools-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1228296/rapidoc-openapi-swagger-specification-ui-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228296/rapidoc-openapi-swagger-specification-ui-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1222562/flowchart-processes-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222562/flowchart-processes-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1223533/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1223533/?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1224537/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224537/?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1222737/jsbarcode-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222737/jsbarcode-for-confluence?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1221832/jsfiddle-for-confluence?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1221832/jsfiddle-for-confluence?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1224394/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1224394/?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1229317/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1229317/?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1222572/mermaid-charts-diagrams-for-confluence?tab=overview&hosting=datacenter", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222572/mermaid-charts-diagrams-for-confluence?tab=overview&hosting=datacenter", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1222572/mermaid-charts-diagrams-for-confluence?tab=overview&hosting=server", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1222572/mermaid-charts-diagrams-for-confluence?tab=overview&hosting=server", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1226668/dynamic-status-labels-for-confluence?hosting=cloud&tab=overview", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1226668/dynamic-status-labels-for-confluence?hosting=cloud&tab=overview", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1227226/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1227226/?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1225264/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1225264/?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1235463/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1235463/?tab=overview&hosting=cloud", "group": "In Scope Targets " }, { "name": "https://marketplace.atlassian.com/apps/1236260/?tab=overview&hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1236260/?tab=overview&hosting=cloud", "group": "In Scope Targets " } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-a85ce135751be9ce", "name": "Wise (ex-TransferWise)", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/wise", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $4,000", "reward_min": "$100", "reward_max": "$4,000", "scope_rank": 4, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:32Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/wise/changelog/b406940a-3bf6-4b05-ac3b-a8110ab53e81.json" ], "in_scope": [ { "name": "transferwise.com", "asset_type": "website", "location": "https://transferwise.com", "group": "In scope targets" }, { "name": "*.transferwise.com", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "wise.com", "asset_type": "website", "location": "https://wise.com", "group": "In scope targets" }, { "name": "*.wise.com", "asset_type": "website", "location": null, "group": "In scope targets" }, { "name": "Latest version of Wise iOS App", "asset_type": "ios", "location": "https://apps.apple.com/us/app/wise-ex-transferwise/id612261027", "group": "In scope targets" }, { "name": "Latest version of Wise Android App", "asset_type": "android", "location": "https://play.google.com/store/apps/details?id=com.transferwise.android&hl=en_US&gl=US", "group": "In scope targets" }, { "name": "AWS infrastructure and services in use by Wise (eg: S3 buckets)", "asset_type": "other", "location": null, "group": "In scope targets" }, { "name": "github.com/transferwise/*", "asset_type": "other", "location": "https://github.com/transferwise/*", "group": "In scope targets" }, { "name": "*.wise-sandbox.com", "asset_type": "website", "location": "https://wise-sandbox.com/", "group": "Sandbox environment" } ], "out_of_scope": [ { "name": "Wise Affiliate Program", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Third party services not hosted by Wise", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Any Github asset not under the “transferwise” organization", "asset_type": "other", "location": null, "group": "Out of scope targets" }, { "name": "Third party authentication services (eg: Facebook and Google)", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://transferwise.com/help/contact", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "https://wise.com/help/contact", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.tw.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "*.tw.ee", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "Non-current version of the Android app", "asset_type": "android", "location": null, "group": "Out of scope targets" }, { "name": "Non-current version of the iOS app", "asset_type": "ios", "location": null, "group": "Out of scope targets" }, { "name": "*.transferwise.tech", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "brand.wise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "links.wise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "widgets.transferwise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "brand.transferwise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "bootstrap.transferwise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "links.transferwise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "status.wise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "status.transferwise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "tech.transferwise.com", "asset_type": "website", "location": null, "group": "Out of scope targets" }, { "name": "docs.wise.com", "asset_type": "other", "location": null, "group": "Out of scope targets" }, { "name": "github.com/transferwise/pipelinewise", "asset_type": "other", "location": "https://github.com/transferwise/pipelinewise", "group": "Out of scope targets" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-ef99b236755f5621", "name": "Wyze Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/wyze", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$50 - $5,000", "reward_min": "$50", "reward_max": "$5,000", "scope_rank": 1, "access_status": "open", "industry": "Electronics", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:33Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/wyze/changelog/edde608a-a322-431d-8908-025b05972edb.json" ], "in_scope": [ { "name": "https://auth.wyze.com", "asset_type": "website", "location": "https://auth.wyze.com", "group": "In Scope Targets" }, { "name": "https://my.wyze.com", "asset_type": "website", "location": "https://my.wyze.com", "group": "In Scope Targets" }, { "name": "https://api.wyzecam.com", "asset_type": "api", "location": "https://api.wyzecam.com", "group": "In Scope Targets" }, { "name": "Wyze Cam V3", "asset_type": "hardware", "location": null, "group": "In Scope Targets 2" }, { "name": "Wyze Cam v4", "asset_type": "hardware", "location": "https://www.wyze.com/products/wyze-cam", "group": "In Scope Targets 2" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-34ee7f01629a6e29", "name": "Xfinity Home & xFi", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/xfinity-home", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "Points - $5,500", "reward_min": "Points", "reward_max": "$5,500", "scope_rank": 4, "access_status": "open", "industry": "Telecommunications", "service_level": "Priority Triage", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 15, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:34Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/xfinity-home/changelog/2a28998a-a3f5-4251-a7d6-cf3f735bb705.json" ], "in_scope": [ { "name": "████████████████████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "████████████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "███████████████████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "██████████████████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "██████████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "███████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "█████████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "███████████████████████████", "asset_type": "ios", "location": null, "group": "███████████████" }, { "name": "██████████████████████", "asset_type": "ios", "location": null, "group": "███████████████" }, { "name": "███████████████████████████████", "asset_type": "android", "location": null, "group": "███████████████" }, { "name": "██████████████████████████", "asset_type": "android", "location": null, "group": "███████████████" }, { "name": "███████████████████████", "asset_type": "api", "location": null, "group": "███████████████" }, { "name": "████████████████████████████", "asset_type": "api", "location": null, "group": "███████████████" }, { "name": "███████████████████████████████████████████████████", "asset_type": "hardware", "location": null, "group": "███████████████" }, { "name": "████████████████████", "asset_type": "iot", "location": null, "group": "███████████████" }, { "name": "█████████████████████", "asset_type": "website", "location": null, "group": "███████████████" }, { "name": "█████████████████", "asset_type": "api", "location": null, "group": "███████████████" }, { "name": "█████████████████████", "asset_type": "api", "location": null, "group": "███████████████" }, { "name": "██████████████████████████████████", "asset_type": "hardware", "location": null, "group": "███████████████" }, { "name": "████████", "asset_type": "hardware", "location": null, "group": "███████████████" }, { "name": "█████████████████████████████", "asset_type": "api", "location": null, "group": "███████████████" }, { "name": "█████████████████████████", "asset_type": "api", "location": null, "group": "███████████████" } ], "out_of_scope": [ { "name": "███████████████████████████████████████████████", "asset_type": "iot", "location": null, "group": "████████████" }, { "name": "█████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "██████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "██████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "██████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "███████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "██████████", "asset_type": "network", "location": null, "group": "████████████" }, { "name": "█████████████", "asset_type": "network", "location": null, "group": "████████████" }, { "name": "███████████████", "asset_type": "network", "location": null, "group": "████████████" }, { "name": "██████████████", "asset_type": "network", "location": null, "group": "████████████" }, { "name": "████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "15 repeated rows in the published table were collapsed in this catalog.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "bugcrowd-dd8f6d08a25c77a0", "name": "Xopero Software S.A. Marketplace Managed Bug Bounty Engagement", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/xopero-software-marketplace", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$100 - $1,500", "reward_min": "$100", "reward_max": "$1,500", "scope_rank": 1, "access_status": "open", "industry": "Computer Software", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:35Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/xopero-software-marketplace/changelog/4ba6bfbf-9aa5-4e67-aa74-1269020d0b30.json" ], "in_scope": [ { "name": "https://marketplace.atlassian.com/apps/1228719/gitprotect-io-for-jira-backup-restore-dr-data-management?hosting=cloud", "asset_type": "website", "location": "https://marketplace.atlassian.com/apps/1228719/gitprotect-io-for-jira-backup-restore-dr-data-management?hosting=cloud", "group": "In Scope Target" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-17548c34cd66c465", "name": "YNAB", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/ynab", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $3,000", "reward_min": "$150", "reward_max": "$3,000", "scope_rank": 1, "access_status": "open", "industry": "Finance", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:36Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/ynab/changelog/a11269ee-8680-42ef-b93e-92d82d5ca555.json" ], "in_scope": [ { "name": "staging-app.bany.dev", "asset_type": "website", "location": null, "group": "In Scope" }, { "name": "staging-api.bany.dev", "asset_type": "api", "location": "https://staging-api.bany.dev/", "group": "In Scope" }, { "name": "www.ynab.com", "asset_type": "website", "location": "https://www.ynab.com/", "group": "In Scope" } ], "out_of_scope": [ { "name": "https://app.ynab.com/", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "Any previous version of the desktop apps: YNAB 4, YNAB 3, YNAB Pro, YNAB Basic (Spreadsheet)", "asset_type": "other", "location": null, "group": "Out of Scope " }, { "name": "https://support.ynab.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "https://develop-app.ynab.com", "asset_type": "website", "location": null, "group": "Out of Scope " }, { "name": "https://learn.ynab.com/", "asset_type": "website", "location": null, "group": "Out of Scope " } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "bugcrowd-c6e7a4e989508d26", "name": "Zola Managed Bug Bounty", "platform": "Bugcrowd", "program_url": "https://bugcrowd.com/engagements/zola-mbb-og", "bounty_classification": "official_directory_paid_listing", "directory_card": { "publisher_category": "Bug Bounty", "reward_summary": "$150 - $2,000", "reward_min": "$150", "reward_max": "$2,000", "scope_rank": 1, "access_status": "open", "industry": "eCommerce", "service_level": "Platform", "badge": null, "ends_at": null, "is_external_listing": false, "is_demo": false, "is_private": false }, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:38Z", "scope_source_urls": [ "https://bugcrowd.com/engagements/zola-mbb-og/changelog/6c840b8d-89e7-4cdb-a809-2c5a7f243164.json" ], "in_scope": [ { "name": "██████████████████████", "asset_type": "website", "location": null, "group": "████████████████" }, { "name": "██████████████████████████", "asset_type": "ios", "location": null, "group": "████████████████" } ], "out_of_scope": [ { "name": "████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "██████████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "████████████████████████████", "asset_type": "ios", "location": null, "group": "████████████" }, { "name": "███████████████████████", "asset_type": "website", "location": null, "group": "████████████" }, { "name": "█████████████████████████████████████████", "asset_type": "website", "location": null, "group": "████████████" } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "The platform redacts at least one asset label; that row is not a usable target identifier." ], "review_flags": [] }, { "id": "hackerone-df9e660827f32e55", "name": "1Password - Enterprise Password Manager", "platform": "HackerOne", "program_url": "https://hackerone.com/1password?type=team", "bounty_classification": "verified_policy", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "1password-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:59:09Z", "scope_source_urls": [ "https://hackerone.com/1password/policy_scopes" ], "in_scope": [ { "name": "http://--your-own-1password-account--.1password.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": " —> Latest stable, beta, or nightly Command Line Interface (CLI)", "asset_type": "OTHER", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": " —> Latest stable, beta, or nightly Browser Extension (Chrome, Brave, Firefox, Edge, and Safari)", "asset_type": "OTHER", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://events.1password.com/api/", "asset_type": "API", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.agilebits.com", "asset_type": "WILDCARD", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "https://support.1password.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "https://www.1password.com/", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "All other domains, subdomains, and 1Password Accounts that are not owned by you, including accounts where you are a user but not the owner, are out of scope.", "asset_type": "OTHER", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false } ], "limitations": [ "Published structured-scope rows were captured. Submission eligibility and bounty eligibility differ; program policy text may add restrictions." ], "review_flags": [] }, { "id": "hackerone-da644f4b80e67dcd", "name": "1win", "platform": "HackerOne", "program_url": "https://hackerone.com/1win_com?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:45Z", "scope_source_urls": [ "https://hackerone.com/1win_com/policy_scopes" ], "in_scope": [ { "name": "1win.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://1win.com/betting", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://1win.com/casino", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "1w.cash", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "1w.run", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Deposit/Withdraw", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-17f38648acfa6655", "name": "23andMe Bug Bounty", "platform": "HackerOne", "program_url": "https://hackerone.com/23andme_bbp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:46Z", "scope_source_urls": [ "https://hackerone.com/23andme_bbp/policy_scopes" ], "in_scope": [ { "name": "api.23andme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "auth.23andme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "23andme.org/blog", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "23andme.org/education", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "23andme.org/media-center", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "23andme.org/clinicians", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "store.23andme.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "you.23andme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.23andme.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "merch.23andme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "portal.23andme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "style.23andme.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fulfillment.23andme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "23andme.org/ancestry/last-names", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "trust.23andme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "23andmeresearchinstitute.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "refer.23andme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "23andme.org/research", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-1f339a1376d2de7f", "name": "3CX", "platform": "HackerOne", "program_url": "https://hackerone.com/3cx?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:53Z", "scope_source_urls": [ "https://hackerone.com/3cx/policy_scopes" ], "in_scope": [ { "name": "https://apps.microsoft.com/detail/3cx/9NW77489NGJ0", "asset_type": "WINDOWS_APP_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://portal.3cx.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "activate.3cx.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wmr.3cx.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mailproxy.3cx.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "downloads-global.3cx.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "repo.3cx.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "rps.3cx.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "3CX Phone System", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "3CX Live chat WordPress plugin", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/details?id=com.tcx.sipphone14", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "3CX SBC", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/us/app/3cx/id992045982", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Other", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "*.3cx.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "3CX Phone 6.0", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-13a495ec90ff1384", "name": "8x8", "platform": "HackerOne", "program_url": "https://hackerone.com/8x8-bounty?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:56Z", "scope_source_urls": [ "https://hackerone.com/8x8-bounty/policy_scopes" ], "in_scope": [ { "name": "*.chalet.8x8.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "vcc-*.8x8.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://*.chalet.8x8.com/ws/v1", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://*.packet8.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.8x8cloud.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.p8t.us", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "platform.8x8pilot.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "uc.8x8pilot.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sso.8x8pilot.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "work-staging.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "user-profile-staging.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sso.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "platform.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "work.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "user-profile.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://webrtc.8x8.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pay.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "admin.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "apps.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Intellectual Property on Public Domains", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.8x8.vc", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.jit.si", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.jitsi.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.8x8staging.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.8x8.id", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.wavecell.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "qm-*.8x8.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.thinkingphones.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.thinkingphones.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "analytics-*.8x8.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.8x8.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.8x8.co.uk", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.8x8.uk", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.8x8e2e.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.ucverse.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.prod.cloud.8x8.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.in2tel.ie", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.call-control.ie", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.8x8.cloud", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.8x8.engineering", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.acceptance.cloud.8x8.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.ociadmin.cloud.8x8.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*-vpn.8x8.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.labs.8x8.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.rekap.8x8.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.8x8pilot.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.cceng.8x8.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.staging.cloud.8x8.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.8x8testa.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.8x8testb.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.packet8-pilot.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.8x8hosts.internal", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.8x8hosts.pilot", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.unreal-agents.jitsi.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.unreal-agents.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.ai.8x8.vc", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.preview.8x8.vc", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.8x8.studio", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.fuze.site", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.fuze.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.mavenlab.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.moobidesk.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.moobicast.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "connect.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "voapi.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://8x8.vc/xmpp-websocket", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "cloud8.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dashboard.qa.ai.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "vcc-ce.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "vap.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "callroute.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "callroute.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sipsynergy.co.uk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mcp.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "maestro.8x8.cloud", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "map.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "bridge.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "8x8.my.site.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "video-agent.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "developer.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "resolve.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "admin-resolve.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "pubtools.private.8x8cloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support-portal.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "debug.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "converse.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "unreal-agents.8x8pilot.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "eg.ht", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.fuzemeeting.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "fuze.me", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/jitsi", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "Cloud Misconfigurations", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "ASN: AS32308", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "ASN: AS44965", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "ASN: AS46680", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "ASN: AS49856", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "ASN: AS62306", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "ASN: AS62876", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "ASN: AS133144", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "ASN: AS198554", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "ASN: AS395362", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "ASN: AS398067", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "ASN: AS199687", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "ASN: AS206422", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "8x8 Partner Portal", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Third Party Application", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Discovered Leaked Credentials", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.npmjs.com/package/@8x8/pui-partner-comm", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "ASN: AS14294", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "ASN: AS13896", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "ASN: AS10976", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "org.vom8x8.sipua", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "Virtual Office Desktop", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "8x8-work", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "8x8 Communication APIs", "asset_type": "API", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "http://*.callstats.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://*.contactnow.8x8.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://*.sameroom.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://*.jitsi.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.msteams.8x8.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.bell.ca", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "express.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "accountmanager.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "investors.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "vm.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "supersite.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mobileidentity.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.wavecell.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "get8x8.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "feedback.wavecell.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "8x8.wavecell.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.spot8x8.spot", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "org.jitsi.meet", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "Jitsi Meet Desktop", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.atlassian.JitsiMeet.ios", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "8x8-meeting-rooms", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-6b9cf8eb4b652f82", "name": "Abercrombie & Fitch Bug Bounty", "platform": "HackerOne", "program_url": "https://hackerone.com/abercrombie_fitch_bbp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:58Z", "scope_source_urls": [ "https://hackerone.com/abercrombie_fitch_bbp/policy_scopes" ], "in_scope": [ { "name": "abercrombie.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hollisterco.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "corporate.abercrombie.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "anfcorp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.abercrombie.abercrombie", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.abercrombie.hollister", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "339041767", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "383915209", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "applications.abercrombie.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://nonmerchvendorprofile.anfcorp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-1cb34dcf5007950c", "name": "Acronis", "platform": "HackerOne", "program_url": "https://hackerone.com/acronis?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:00Z", "scope_source_urls": [ "https://hackerone.com/acronis/policy_scopes" ], "in_scope": [ { "name": "*-api-*.acronis.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.acronis.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.5nine.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.devicelock.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.acronis.work", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "beta-cloud.acronis.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "account.acronis.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Acronis Cyber Infrastructure", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Other Acronis Domains", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.acronis.acronistrueimage", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.acronis.abc", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Acronis Agent", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Acronis Cyber Protect", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Acronis DeviceLock DLP", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Acronis Snap Deploy", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Other Acronis executables", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Acronis Cloud Manager", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Acronis True Image (formerly Acronis Cyber Protect Home Office)", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "1118448159", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "978342143", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1192506963", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "learn.acronis.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "training.acronis.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-2719017326e56636", "name": "Affirm", "platform": "HackerOne", "program_url": "https://hackerone.com/affirm?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:03Z", "scope_source_urls": [ "https://hackerone.com/affirm/policy_scopes" ], "in_scope": [ { "name": "sandbox.affirm.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.affirm.internal.hackerone", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.affirm.central.audit", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.affirm.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-e79446e3e4ad057a", "name": "Agoda Public", "platform": "HackerOne", "program_url": "https://hackerone.com/agoda-public?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:04Z", "scope_source_urls": [ "https://hackerone.com/agoda-public/policy_scopes" ], "in_scope": [ { "name": "https://www.agoda.com/book/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.agoda.com/account/cashback", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.agoda.com/account/agodacash", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-1f9339ddf7cb529e", "name": "Airbnb", "platform": "HackerOne", "program_url": "https://hackerone.com/airbnb?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:06Z", "scope_source_urls": [ "https://hackerone.com/airbnb/policy_scopes" ], "in_scope": [ { "name": "*.hoteltonight.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.airbnb.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.musta.ch", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.airbnbpayments.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.airbnb.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "next.airbnb.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.airbnb.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "support-api.airbnb.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "assets.airbnb.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "m.airbnb.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "one.airbnb.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "open.airbnb.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "callbacks.airbnb.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.airbnb.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.airbnbcitizen.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.atairbnb.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.withairbnb.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.byairbnb.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.muscache.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.airbnb-aws.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.luxuryretreats.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hoteltonight-test.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.hoteltonight.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Localized airbnb sites listed at the link below:", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.airbnb.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.airbnb.app", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.luxuryretreats.ios", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "luckeyhomes.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "luckey.fr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "luckey.app", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "luckey.in", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "demo.urbandoor.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "provider.demo.urbandoor.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "admin.demo.urbandoor.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "luckey.partners", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-1ace0edc1ef505f4", "name": "Airtable", "platform": "HackerOne", "program_url": "https://hackerone.com/airtable?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:07Z", "scope_source_urls": [ "https://hackerone.com/airtable/policy_scopes" ], "in_scope": [ { "name": "*.staging-airtableblocks.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.staging.airtable.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "staging.airtable.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api-staging.airtable.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mcp.staging.airtable.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "airtable.js SDK (https://www.npmjs.com/package/airtable)", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.npmjs.com/package/@airtable/mcp-cli", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "blog.airtable.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.airtable.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "guide.airtable.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "airtable.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dl.airtable.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dl.getforma.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.airtable.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Airtable macOS app", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Airtable Windows app", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.formagrid.airtable", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.FormaGrid.Hyperbase", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-1cb8aa6e2728fe27", "name": "ALSCO", "platform": "HackerOne", "program_url": "https://hackerone.com/alsco?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:11Z", "scope_source_urls": [ "https://hackerone.com/alsco/policy_scopes" ], "in_scope": [ { "name": "sandbox.securegateway.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sandbox-royal.securegateway.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-0373299e645bdb72", "name": "Amazon Vulnerability Research Program", "platform": "HackerOne", "program_url": "https://hackerone.com/amazonvrp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:13Z", "scope_source_urls": [ "https://hackerone.com/amazonvrp/policy_scopes" ], "in_scope": [ { "name": "*.amazon.cl", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.co.za", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.com.au", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.com.br", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.com.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.com.mx", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.com.ng", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.com.tr", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.pl", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.com.be", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.ae", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.ca", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.cn", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.co.jp", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.co.uk", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.de", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.eg", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.es", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.fr", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.in", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.it", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.nl", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.sa", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.se", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.sg", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amazon.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "primevideo.com/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.amazon.*", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "amazonpayinsurance.in", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.amazonpay.in/*", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Vega OS", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Devices", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Services/Mobile/GenAI", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Echo Family Devices", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "FireTV", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Kindle E-Reader", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Luna", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tablets", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.mShop.android.shopping", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "amazon.speech.sim", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.mShop.android.business.shopping", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.mp3", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.flex.rabbit", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.imdbtv.livingroom", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.amazonvideo.livingroom", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.mp3.automotiveOS", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.dee.alexaonwearos", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.localqueen", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.helix.prod", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.tahoe.grownups", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.sft.rangoli.seller.app", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.imdb.tv.mobile.app", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.minitv.android.app", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.ziggy.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.music.tv", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "in.amazon.mShop.android.business.shopping", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "in.amazon.mShop.android.shopping", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.relay", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.avod.thirdpartyclient", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.sellerflexmobile", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.shopperpanel.android.mobile.app", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.vendormobile.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.technician.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.primenow.seller.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.vendormobile.india.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.sellermobile.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.astro", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.warhol.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.amazonone.androidapp", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.kisan.app", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.aba.application", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.enterprise.access.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.firetv.recast.blaster.aosp", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.ihm.candycane", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.swa.mobileapp", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.clouddrive.photos", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.dee.app", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.kindle", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.storm.lightning.client.aosp", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.tahoe.freetime", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.amazon.tails", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "297606951", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1552455423", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1498197033", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1265170914", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "510855668", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "6452192521", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "545519333", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1475021574", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1454725763", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1276296103", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "6471528064", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1532153219", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1579372261", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1478350915", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "794141485", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1494755014", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "342576766", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "358861688", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "348712880", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "374254473", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "335187483", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1592204907", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "6444868926", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "988788863", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1057338687", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1659883691", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1151746202", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "6479334468", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "6560104638", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1324809509", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1528364633", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "302584613", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "621574163", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "944011620", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "947984433", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "GenAI Apps under *.amazon.*", "asset_type": "AI_MODEL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Other Amazon Retail Sites (Please only actively test explicitly stated scope)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Other Amazon Retail Mobile Apps (Please only actively test explicitly stated scope)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Amazon Subsidiaries (Please only actively test explicitly stated scope)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Other Amazon Retail Assets (Please only actively test explicitly stated scope)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "amazongames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Amazon Web Services (AWS)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "\"Contact Us\" Functionality", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "AWS and AWS customer assets are strictly out of scope", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.*a2z*.*", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.dev", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.aws.*", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Anything considered a non-prod asset", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Anything which redirects to AWS", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "learning.logistics.amazon.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-9c22f93a3085991d", "name": "Anduril Industries", "platform": "HackerOne", "program_url": "https://hackerone.com/anduril_industries?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:14Z", "scope_source_urls": [ "https://hackerone.com/anduril_industries/policy_scopes" ], "in_scope": [ { "name": "*.anduril.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.andurildev.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.anduril.dev", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.andurildev.au", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.anduril.au", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.anduril.com.au", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "andurilgear.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Anduril Property and Facilities", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-4636d52dbfb788be", "name": "Anthropic", "platform": "HackerOne", "program_url": "https://hackerone.com/anthropic?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:15Z", "scope_source_urls": [ "https://hackerone.com/anthropic/policy_scopes" ], "in_scope": [ { "name": "claude.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "console.anthropic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.anthropic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "docs.anthropic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "support.anthropic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "anthropic.atlassian.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "github.com/anthropics", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Infrastructure & Internal Apps/Services", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Official Clients", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Claude Code", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Leaked Employee API Keys", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Claude Desktop Extensions and Claude.ai MCP servers", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Claude in Chrome", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "API & SDKs", "asset_type": "AI_MODEL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "https://github.com/modelcontextprotocol", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-82b66e90f50d458b", "name": "Arc", "platform": "HackerOne", "program_url": "https://hackerone.com/arc-bbp?type=team", "bounty_classification": "verified_policy", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "arc-circle-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:59:10Z", "scope_source_urls": [ "https://hackerone.com/arc-bbp/policy_scopes" ], "in_scope": [ { "name": "*.arc.io", "asset_type": "WILDCARD", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "rpc.testnet.arc.network", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "rpc.drpc.testnet.arc.network", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/circlefin/malachite", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/circlefin/arc-node", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/circlefin/arc-remote-signer", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true } ], "out_of_scope": [ { "name": "community.arc.io", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "explorer.arc.io", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "help.arc.io", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false } ], "limitations": [ "Published structured-scope rows were captured. Submission eligibility and bounty eligibility differ; program policy text may add restrictions." ], "review_flags": [] }, { "id": "hackerone-db4d7f1f13fba4fa", "name": "Arkose Labs", "platform": "HackerOne", "program_url": "https://hackerone.com/arkose_labs?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:21Z", "scope_source_urls": [ "https://hackerone.com/arkose_labs/policy_scopes" ], "in_scope": [ { "name": "client-api.arkoselabs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn.arkoselabs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "customer-sessions.arkoselabs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "portal.arkoselabs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "verify.arkoselabs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "iframe.arkoselabs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.arkoselabs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "demo.arkoselabs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "https://status.arkoselabs.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "developer.arkoselabs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-8cd014b6cccdc484", "name": "AT&T", "platform": "HackerOne", "program_url": "https://hackerone.com/att?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:23Z", "scope_source_urls": [ "https://hackerone.com/att/policy_scopes" ], "in_scope": [ { "name": "Other Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.oml.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.bizsoltraining.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.workdayinfortraining.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.mobilityranfo.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.tuvcpagebuilder.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.tuliveaccts.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.dfsttraining.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.attauthorizedretail.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.mdp.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.acenpw.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.cctrng.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.bussalesret.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.ran.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.premtechtraining.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.wlnp.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.customerconnecttraining.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.opusisdtraining.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.techcaretraining.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.retailtutorials.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.vrl.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.tuhub.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.techdevtraining.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.consumercares.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.emergingtechtraining.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.learningconnection.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.brandtraining.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.tuxr.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.tutrainenv.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.acetng.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.attconsumer.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.tulh.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.designthinking.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.opussims.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.retailtraining.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.leadershiphub.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.cptraining.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.retailpodcast.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.ehsato.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.tusims.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.salesevolution.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.bcsswirelinetraining.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.saselearning.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.retailleadershiptraining.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.ccltraining.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.cricketlearning.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.salesanddist.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.techtalent.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.ess.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.coretechtraining.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.bcsstechnical.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.tulearn.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.firstnetbcs.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.tul.att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.vtt.directv.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.comtrain.directv.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.learning.directv.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "att.com/acctmgmt/*/stub*/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "att.com/acctmgmt/*/chunks/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*tworks-att.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "prod-taxexempt.att.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.sky.com.mx", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "accbusinesspricing.att.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "rcloud.social", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "attdashboard.wireless.att.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://clec.att.com/clec/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "attsuppliers.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "attpurchasing.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "authkeysmx01.att.com.mx", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://40.233.66.139", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "thedirectvmarketingzone.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "att.suppliergateway.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://dna-uat.az.cloud.att.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "12.0.1.28", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "DirecTV Owned Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "40.233.66.139", "asset_type": "IP_ADDRESS", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-992ffc070c0267ce", "name": "Audible", "platform": "HackerOne", "program_url": "https://hackerone.com/audible?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:24Z", "scope_source_urls": [ "https://hackerone.com/audible/policy_scopes" ], "in_scope": [ { "name": "tax.audible.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.audible.(TLD)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.audible.application", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "379693831", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.acx.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "newsletters.audible.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.audiblecareers.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.audiblehub.com/submit", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "acx-horizonte.audible.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.audible.com/ep/podcast-development-program", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "demdex.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "omtrdc.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "adobedtm.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "All help centers across marketplaces", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "All Audible blogs across marketplaces", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Affiliate Programs", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-72dfb267385f03d8", "name": "Automattic", "platform": "HackerOne", "program_url": "https://hackerone.com/automattic?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:26Z", "scope_source_urls": [ "https://hackerone.com/automattic/policy_scopes" ], "in_scope": [ { "name": "*.tumblr.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.srvcs.tumblr.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.tumblr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "safe.tumblr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "secure.tumblr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "assets.tumblr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "embed.tumblr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.tumblr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "t.umblr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wordpress.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "akismet.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mailpoet.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "my.pressable.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "parse.ly", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "simplenote.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "simperium.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gravatar.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "clay.earth", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wpscan.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "intensedebate.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Jetpack", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "WooCommerce", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Crowdsignal", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "WordPress Plugins & Themes", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "WordPress VIP", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "WP Cloud", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Texts", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Beeper", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.tumblr", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.tumblr.tumblr", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.clay.ios", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "scrollkit.com,*.scrollkit.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "learnboost.com,*.learnboost.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.txmblr.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "afterthedeadline.com,*.afterthedeadline.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "polishmywriting.com,*.polishmywriting.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.survey.fm", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.poll.fm", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.crowdsignal.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "try.pressable.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "atavist.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "happy.tools", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*/xmlrpc.php", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-8501ce85809a9bd4", "name": "Banco Plata", "platform": "HackerOne", "program_url": "https://hackerone.com/banco_plata?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:30Z", "scope_source_urls": [ "https://hackerone.com/banco_plata/policy_scopes" ], "in_scope": [ { "name": "*.platacard.mx", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.bancoplata.mx", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "dif.tech.plata", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "id6443932656", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "https://bancoplata.mx/*/whistleblowing", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://platacard.mx/*/whistleblowing", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-c8992f1ef77a0a82", "name": "Basecamp", "platform": "HackerOne", "program_url": "https://hackerone.com/basecamp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:32Z", "scope_source_urls": [ "https://hackerone.com/basecamp/policy_scopes" ], "in_scope": [ { "name": "HEY.exe", "asset_type": "WINDOWS_APP_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hey.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.basecamp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "launchpad.37signals.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "world.hey.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.basecamp.bc3", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.basecamp.hey", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "basecamp-setup.exe", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Basecamp.app", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "HEY.app", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "hey-mail", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.basecamp.bc3-ios", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.hey.app.ios", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.fizzy.do", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/basecamp/trix", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/basecamp/writebook", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/basecamp/once-campfire", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "*.basecamphq.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.highrisehq.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "basecamp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-a7f2e5a79c12843c", "name": "Blend Labs", "platform": "HackerOne", "program_url": "https://hackerone.com/blend-labs?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:37Z", "scope_source_urls": [ "https://hackerone.com/blend-labs/policy_scopes" ], "in_scope": [ { "name": "knox.beta.blendlabs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-926f228b821f4e97", "name": "Booking.com", "platform": "HackerOne", "program_url": "https://hackerone.com/bookingcom?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:38Z", "scope_source_urls": [ "https://hackerone.com/bookingcom/policy_scopes" ], "in_scope": [ { "name": "*.fareharbor.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.booking.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.rentalcars.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.fareharbor.engineering", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "secure.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "careers.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://iphone-xml.booking.com/json/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://secure-iphone-xml.booking.com/json/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "account.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "kyc-onboarding.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "taxi.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "widget.rentalcars.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cars.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "supplier.auth.toag.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "paymentcomponent.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "metasearch-api.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "experiences.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "webhooks.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "taxis.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "paybridge.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "phone-validation.taxi.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "indicative-pricing.taxi.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "admin.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "chat.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "autocomplete.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "distribution-xml.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "paynotifications.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "supply-xml.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "accommodations.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "portal.taxi.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "flights.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "secure-supply-xml.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://secure-iphone-xml.booking.com/json/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "spark.fareharbor.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.fareharbor.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "teleport.fareharbor.engineering", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "demo.fareharbor.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "readonly.fareharbor.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "marketing.fareharbor.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sites.fareharbor.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "compass.fareharbor.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fhdn.fareharbor.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "tableau.fareharbor.engineering", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fareharborsites.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/details?id=com.booking&hl=en", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/details?id=com.booking.hotelmanager&hl=en", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/us/app/booking-com-hotels-travel/id367003839", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/us/app/pulse-for-booking-com-partners/id992795726", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "www.booking.com/bbmanage/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.booking.com/bbmanage/data/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "secure.booking.com/company/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "secure.booking.com/orgnode/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "spadmin.booking.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "business.booking.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.booking.com/bbm.html", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://secure.booking.com/companyjoin.html", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://secure.booking.com/enterprise/signon.en-gb.html", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://ugcupload.booking.com/upload_bbtool_company_logo", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://fareharbor.com/demo/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "jobs.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "welcomekit.booking.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "cpass.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "awscpasslab.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ams.merchandise.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "medialibrary.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.sustainability.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "procurement.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "workforce.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "workforce-dev.voicedqs.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "surveys.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "partnerfeedback.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "recruitmentsurveys.booking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "desk-demo.fareharbor.engineering", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "desk-demo-api.fareharbor.engineering", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-346f746b3317984a", "name": "Boozt Fashion AB", "platform": "HackerOne", "program_url": "https://hackerone.com/boozt?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:39Z", "scope_source_urls": [ "https://hackerone.com/boozt/policy_scopes" ], "in_scope": [ { "name": "*.boozt.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.booztlet.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "kronor.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.boozt", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.booztlet", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.boozt.app", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.boozt.booztlet", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "analytics.boozt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "bmp.boozt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.kronor.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-6d951fd506bfdf62", "name": "Box BB", "platform": "HackerOne", "program_url": "https://hackerone.com/box_private?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:42Z", "scope_source_urls": [ "https://hackerone.com/box_private/policy_scopes" ], "in_scope": [ { "name": "m.box.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "notes.services.box.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.box.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "account.box.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.box.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "upload.box.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dl.boxcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cloud.app.box.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Box Drive", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Box Tools", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Android Box Mobile App", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "iOS Box Mobile App", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "sr-staging-1.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "signrequest.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-ec82b7e39c5712b0", "name": "Braze, Inc.", "platform": "HackerOne", "program_url": "https://hackerone.com/braze_inc?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:43Z", "scope_source_urls": [ "https://hackerone.com/braze_inc/policy_scopes" ], "in_scope": [ { "name": "https://bug-bounty-dashboard.k8s.tools-001.d-use-1.braze-dev.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://bug-bounty-api.k8s.tools-001.d-use-1.braze-dev.com/", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://bug-bounty-rest.k8s.tools-001.d-use-1.braze-dev.com/", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-fe7206c8f2fec054", "name": "Bumba", "platform": "HackerOne", "program_url": "https://hackerone.com/bumba_bbp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:46Z", "scope_source_urls": [ "https://hackerone.com/bumba_bbp/policy_scopes" ], "in_scope": [ { "name": "http://bumba.global", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-3a39587567acbaf0", "name": "Bumble", "platform": "HackerOne", "program_url": "https://hackerone.com/bumble?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:47Z", "scope_source_urls": [ "https://hackerone.com/bumble/policy_scopes" ], "in_scope": [ { "name": "www.bumble.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bma.bumble.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "badoo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "eu1.badoo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "us1.badoo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "corp.badoo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "m.badoo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "meu1.badoo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mus1.badoo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hotornot.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bma.badoo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "badoocdn.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "translate.badoo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ccardseu1.badoo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ccardsus1.badoo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "chatdate.app", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.geneva-staging.chat", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.geneva-staging.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "web.geneva-staging.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "geneva-staging.chat", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.geneva-staging.chat", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "links.geneva-staging.chat", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "links.geneva-staging.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "go.geneva-staging.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "presence.geneva-staging.chat", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "presence.geneva-staging.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sockets.geneva-staging.chat", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sockets.geneva-staging.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.geneva-staging.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "deeplinks.geneva-staging.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "deeplinks.geneva-staging.chat", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "payments.geneva-staging.chat", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "payments.geneva-staging.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gateway.geneva-staging.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gateway.geneva-staging.chat", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "router.geneva-staging.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "social.geneva-staging.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "social.geneva-staging.chat", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.geneva-staging.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://testflight.apple.com/join/Y4cHu289", "asset_type": "TESTFLIGHT", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.genevachat.staging", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.bumble.app", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.badoo.mobile", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.badoo.twa", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.hotornot.app", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.bumblebff.app", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "930441707", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "351331194", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "403684733", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "6444040977", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "blog.bumble.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "shop.bumble.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "honey.bumble.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "thebeehive.bumble.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "brand.bumble.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-fc841c8ac5a3b8ce", "name": "Bybit Fintech Ltd", "platform": "HackerOne", "program_url": "https://hackerone.com/bybit_fintech?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:48Z", "scope_source_urls": [ "https://hackerone.com/bybit_fintech/policy_scopes" ], "in_scope": [ { "name": "*.bybit.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.bybit.eu", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.bybit.tr", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://testnet.bybit.eu", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://www.bybit.com/trade/tradfi/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://www.bybit.com/en/alpha/overview/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://www.byreal.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/details?id=com.bybit.app&hl=en", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/us/app/bybit-app/id1488296980", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-57ac53ff2963eb5d", "name": "Bykea", "platform": "HackerOne", "program_url": "https://hackerone.com/bykea?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:49Z", "scope_source_urls": [ "https://hackerone.com/bykea/policy_scopes" ], "in_scope": [ { "name": "*.bykea.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://googleplace*.bykea.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://kronos*.bykea.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://loadboard*.bykea.net/", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://raptor*.bykea.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://*test*.bykea.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "bykea.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://maps.bykea.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://leaflet-map.bykea.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://nominatim.bykea.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://geocode-beta.bykea.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://api.bykea.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "tomoe.bykea.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.bykea.pk", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.bykea.pk.partner", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1351179184", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.tellocast.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.tilismtechservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-f69ab9781883de03", "name": "Capital One Bug Bounty", "platform": "HackerOne", "program_url": "https://hackerone.com/capital-one-bounty?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:53Z", "scope_source_urls": [ "https://hackerone.com/capital-one-bounty/policy_scopes" ], "in_scope": [ { "name": "Eno® Browser Extension", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.capitalone.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.capitaloneshopping.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Capital One Shopping Browser Extension", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.capitalonegslbex.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.capitalone.ca", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.konylabs.capitalone", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.wikibuy.prod.main", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "407558537", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1089294040", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-4fdb0e8d03bf76eb", "name": "Chainlink", "platform": "HackerOne", "program_url": "https://hackerone.com/chainlink?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:59Z", "scope_source_urls": [ "https://hackerone.com/chainlink/policy_scopes" ], "in_scope": [ { "name": "https://github.com/smartcontractkit/chainlink", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/smartcontractkit/external-adapters-js/", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/smartcontractkit/staking-v0.1/tree/master/contracts", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/smartcontractkit/chainlink-evm/tree/develop/contracts", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/smartcontractkit/chainlink-solana/tree/develop/contracts", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "Faucets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.smartcontract.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "chain.link", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "docs.chain.link", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "chainlinklabs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "blog.chain.link", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "create.smartcontract.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/smartcontractkit/chainlink/tree/master/core/sgx", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/smartcontractkit/chainlink/tree/master/tools", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/smartcontractkit/chainlink/tree/master/integration", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "github.com/smartcontractkit/chainlink/examples", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "github.com/smartcontractkit/chainlink/contracts/src/*/dev", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/smartcontractkit/chainlink/tree/master/core/internal", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/smartcontractkit/chainlink", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/smartcontractkit/chainlink/tree/master/contracts", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/smartcontractkit/chainlink-evm/tree/develop/contracts/.../dev", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/smartcontractkit/chainlink-solana/tree/develop/contracts/.../dev", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": false }, { "name": "Intercom", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-0aface240d991a6f", "name": "Chaturbate", "platform": "HackerOne", "program_url": "https://hackerone.com/chaturbate?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:00Z", "scope_source_urls": [ "https://hackerone.com/chaturbate/policy_scopes" ], "in_scope": [ { "name": "*.highwebmedia.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.securegatewayaccess.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mmcdn.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.cb.dev", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mmwebc.dev", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "chaturbate.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "m.chaturbate.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "billingsupport.chaturbate.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "secure.chaturbate.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "support.chaturbate.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "status.chaturbate.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "cbswag.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-8756d9f7bdf35d4e", "name": "Chia Network", "platform": "HackerOne", "program_url": "https://hackerone.com/chia_network?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:01Z", "scope_source_urls": [ "https://hackerone.com/chia_network/policy_scopes" ], "in_scope": [ { "name": "https://vault.chiatest.net/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.vault.chiatest.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/Chia-Network/chia-blockchain", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/Chia-Network/chia-blockchain-gui", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/Chia-Network/clvm_rs", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/Chia-Network/chia_rs", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/Chia-Network/chiapos", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/Chia-Network/chiavdf", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/app/chia-signer/id6504493785", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-1a5cf3e4261f4650", "name": "Circle", "platform": "HackerOne", "program_url": "https://hackerone.com/circle-bbp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:02Z", "scope_source_urls": [ "https://hackerone.com/circle-bbp/policy_scopes" ], "in_scope": [ { "name": "api.circle.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.circle.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "console.circle.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/stellar-cctp", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/stablecoin-sui", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/stablecoin-aptos", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/sui-cctp", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/stablecoin-starknet", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/aptos-cctp", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/stablecoin-xlm", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/evm-cctp-contracts", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://github.com/circlefin/noble-cctp", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/solana-cctp-contracts", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/buidl-wallet-contracts", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/stablecoin-evm", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/noble-fiattokenfactory", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/evm-gateway-contracts", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/evm-xreserve-contracts", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/starknet-cctp", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/evm-cpn-contracts", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/stablecoin-near", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/circlefin/solana-gateway-contracts", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-048bc8fbfcdeb0ce", "name": "CLEAR", "platform": "HackerOne", "program_url": "https://hackerone.com/clear?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:06Z", "scope_source_urls": [ "https://hackerone.com/clear/policy_scopes" ], "in_scope": [ { "name": "clearme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "enroll.clearme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.clearme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "web-edge.clearme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "my.clearme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mobile.clearme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ir.clearme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "scan.clearme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "authentication.clearme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "verified.clearme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "concierge.clearme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identity.clearme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://verified.clearme.com/dashboard", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "clearme.atlassian.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.clearme.Clear", "asset_type": "OTHER_IPA", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.clearme.clearapp", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "verified.clearme.com/v1/verification_sessions", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "fieldsupport.clearme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "docs.clearme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "hub.clearme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "legal.clearme.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-4aaa7dee426399c5", "name": "Cloud Software Group", "platform": "HackerOne", "program_url": "https://hackerone.com/csg-public?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:08Z", "scope_source_urls": [ "https://hackerone.com/csg-public/policy_scopes" ], "in_scope": [ { "name": "ap-s.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "eu.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "us.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.citrixworkspacesapi.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "onboarding.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "onboarding-*.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "accounts.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "adm.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.adm.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Citrix Secure Access client for Windows", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Citrix Secure Access client for iOS", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Citrix Secure Access client for Linux", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Citrix End Point Analysis (EPA) client for Linux", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Citrix End Point Analysis (EPA) client for Windows", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Citrix Secure Access client for Android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Citrix Secure Access client for macOS", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "*developer.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "citrix.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "accounts-internal.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "launch.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.citrix*.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.cloudburrito.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.securevdr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.podio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "(yoursubdomain).us.iws.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "(yoursubdomain).ap.iws.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "(yoursubdomain).eu.iws.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "(youriwssubdomain).cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.xmtest.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.xmqa.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.xmdev.cloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.browser.cloud.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-f851f0727c99b3af", "name": "Cloudflare Public Bug Bounty", "platform": "HackerOne", "program_url": "https://hackerone.com/cloudflare?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:09Z", "scope_source_urls": [ "https://hackerone.com/cloudflare/policy_scopes" ], "in_scope": [ { "name": "dash.cloudflare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cloudflareworkers.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.teams.cloudflare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.cloudflare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.cloudflare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://github.com/cloudflare", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "one.dash.cloudflare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/cloudflare/workerd", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/cloudflare/vinext", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Cloudflare Pages", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "CDNJS", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "WARP Mobile Apps", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Cloudflare Access", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stream", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "1.1.1.1 Resolver", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Magic Transit", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Spectrum", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Load Balancing", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Bot Management", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Cloudflare Zero Trust/Cloudflare One", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Open source tools from Cloudflare", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Area 1", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Cloudflare D1", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Cloudflare R2", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "WARP desktop client", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.cloudflarepartners.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Cloudflare DNS", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Cloudflare CASB", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Workers", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Cloudflare Tunnel", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "AMP Real URL", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Cloudflare Cache", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Magic Firewall", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Cloudflare Zaraz", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "China Network", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "API Shield", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Gateway", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Browser Isolation", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "AI Gateway", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Vectorize", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Hyperdrive", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Workers KV", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Cloudflare Analytics", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Cloudflare Durable Objects", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Waiting Room", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Magic WAN", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Data Loss Prevention (DLP)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "SSL/TLS", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Cloudflare Workers CI", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Images", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Workers AI", "asset_type": "AI_MODEL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.plugins.realtime.cloudflare.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.cloudflare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.cloudflare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.cloudflarewarp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "waf.cumulusfire.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "events.www.cloudflare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "demo.realtime.cloudflare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api.staging.realtime.cloudflare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "examples.realtime.cloudflare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "react-examples.realtime.cloudflare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "app.dyte.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "test.realtime.cloudflare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "files.plugins.realtime.cloudflare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/cloudflare/vinext-private", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/cloudflare/moq-rs", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/cloudflare/privacy-gateway-server-go", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/cloudflare/saffron.git", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/cloudflare/realtimekit-web-examples", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/cloudflare/recapn", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/cloudflare/computer", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/cloudflare/cloudflare-os", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/cloudflare/templates", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/cloudflare/pp-browser-extension", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/cloudflare/agentic-inbox", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/cloudflare/cf", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "Turnstile", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "172.65.0.0/16", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-af813ba803adf77c", "name": "Coinbase", "platform": "HackerOne", "program_url": "https://hackerone.com/coinbase?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:13Z", "scope_source_urls": [ "https://hackerone.com/coinbase/policy_scopes" ], "in_scope": [ { "name": "*.coinbase-corp.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.base.app", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.coinbase.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.cbhq.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/coinbase/cb-mpc", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/coinbase/*", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/base/*", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://chrome.google.com/webstore/detail/coinbase-wallet-extension/hnfanknocfeofbddgcijnmhnfnkdnaad", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.base.org", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.coinbase.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "org.toshi", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "54.175.255.192/27", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "org.toshi.distribution", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.vilcsak.bitcoin2", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/coinbase/cb-mpc-go", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "Other", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "status.*.coinbase.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "status.coinbase.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "N/A - Not Coinbase owned or operated", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-506fc9236b351984", "name": "CoinMate.io", "platform": "HackerOne", "program_url": "https://hackerone.com/coinmate?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://hackerone.com/coinmate/policy_scopes", "http_status": 200, "result": "javascript_required", "note": "The official public policy_scopes page returned a JavaScript app shell during this review. The existing structured-scope capture had zero rows; a current asset list was not independently visible from this page." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "no_published_assets", "scope_captured_at": "2026-10-03T15:50:14Z", "scope_source_urls": [ "https://hackerone.com/coinmate/policy_scopes" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official public policy_scopes page returned a JavaScript app shell during this review. The existing structured-scope capture had zero rows; a current asset list was not independently visible from this page." ], "review_flags": [] }, { "id": "hackerone-9fb3b8bf1923ee31", "name": "CoinSpot", "platform": "HackerOne", "program_url": "https://hackerone.com/coinspot?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:15Z", "scope_source_urls": [ "https://hackerone.com/coinspot/policy_scopes" ], "in_scope": [ { "name": "www.coinspot.com.au", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.coinspot.com.au/v2/api", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.coinspot.app", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1541949985", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-e14b1026056fd046", "name": "Compass", "platform": "HackerOne", "program_url": "https://hackerone.com/compass-bbp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:16Z", "scope_source_urls": [ "https://hackerone.com/compass-bbp/policy_scopes" ], "in_scope": [ { "name": "www.compass.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.compass.compass", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/us/app/compass-real-estate-homes/id692766504", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.sothebysrealty.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.realogy.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.nrtllc.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.mycbdesk.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.leadrouter.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.era.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.corcoran.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.coldwellbanker.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.century21global.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.century21.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.cbcworldwide.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.cartus.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.c21.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.bhgre.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.porchlightgroup.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.ctccal.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.chartwellescrow.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.legacytexastitle.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.firstalliancetitle.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.sqstitle.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.attorneyskeytitle.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.kvstitle.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.anywhere.re", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.trgc.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://www.compass.com/contact/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://www.compass.com/api/v3/lead_forms/agent_profile", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "century21.hk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "c21.hk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "glide.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Christie’s International Real Estate", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "@properties", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Consumer’s Title of California", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Chartwell", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "LegacyTexas Title", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "SQS Square Settlements", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "KVS Title", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Glide", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-3d133609f9fb7801", "name": "Coupang Taiwan", "platform": "HackerOne", "program_url": "https://hackerone.com/coupang_tw?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:20Z", "scope_source_urls": [ "https://hackerone.com/coupang_tw/policy_scopes" ], "in_scope": [ { "name": "ads-partners.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cart-front-api.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dco.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "feed-web.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fileupload-video.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fileupload.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fintech-aml-kyc-tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "go-cms.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "id.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "influencers.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "link.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ljc-test.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ljc.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "logs-partners.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "loyalty.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mauth.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "my.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "myself.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "partners.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "reco.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "rs-open-api.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "shop.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "store-display.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "syndication.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developers.tw.coupangcorp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "helpcenter-tw.coupangcorp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "helpseller.tw.coupangcorp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "marketplace.tw.coupangcorp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "tw.coupangcorp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "tw.coupangls.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "promo.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cart.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cash.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "checkout.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cmapi.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "m.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mc.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "member.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "notification-front-web.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pages.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pay.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "payment.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "review.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.tw.coupang.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "SUPERAPP (AOS)", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "SUPERAPP (IOS)", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-b575df220d46283e", "name": "Credit Karma", "platform": "HackerOne", "program_url": "https://hackerone.com/creditkarma?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:22Z", "scope_source_urls": [ "https://hackerone.com/creditkarma/policy_scopes" ], "in_scope": [ { "name": "https://*.creditkarma.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://*.creditkarma.co.uk", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://*.creditkarma.ca", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "accounts.creditkarma.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.creditkarma.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.creditkarma.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.creditkarma.com/reviews/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "blog.creditkarma.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.creditkarma.com/savings", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "support.creditkarma.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.creditkarma.mobile", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.creditkarma.mobile.international", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.creditkarma.mobile", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.creditkarma.mobile.international", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "https://www.creditkarma.com/article/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "tax.creditkarma.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "help.creditkarma.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.creditkarma.com/all/advice", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "appsflyer.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "crashlytics.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "taplytics.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "socialverification.creditkarma.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "socialverification.stage.creditkarma.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "taxsupport.creditkarma.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-4318147bbac81dda", "name": "Crowdstrike", "platform": "HackerOne", "program_url": "https://hackerone.com/crowdstrike?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:23Z", "scope_source_urls": [ "https://hackerone.com/crowdstrike/policy_scopes" ], "in_scope": [ { "name": "*.crowdstrike.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.humio.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.securecircle.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.preempt.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.preemptsecurity.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.reposify.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.bionic.ai", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.flowsecurity.app", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.adaptive-shield.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.crowdstrike.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "falcon-sandbox.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hybrid-analysis.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.crowdstrike.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sgnl.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sgnl.cloud", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sgnl.team", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sgnlapis.cloud", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "CrowdStrike public infrastructure", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "play.google.com/store/apps/details?id=com.crowdstrike.falconmobile", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "apps.apple.com/us/app/crowdstrike-falcon/id1458815656", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "onum.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "onum-labs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Falcon Browser Extension V2", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-6d0aca6e36ecf809", "name": "Crypto.com", "platform": "HackerOne", "program_url": "https://hackerone.com/crypto?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:24Z", "scope_source_urls": [ "https://hackerone.com/crypto/policy_scopes" ], "in_scope": [ { "name": "*.crypto.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mona.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://crypto.com/exchange", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.mona.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "js.crypto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "tax.crypto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://crypto.com/nft", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "web.crypto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developer-platform-api.crypto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developer.crypto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developer-api.crypto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "og.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "travel.crypto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "experiences.crypto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "tickets.crypto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "merchant.crypto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://crypto.com/price", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nadex.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://etherscan.io/token/0xfe18ae03741a5b84e39c295ac9c856ed7991c38e", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://explorer.cronos.org/token/0x2e53c5586e12a99d4CAE366E9Fc5C14fE9c6495d", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "co.mona.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.monaco.mobile", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Crypto.com mobile app APIs that require an account", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true }, { "name": "Crypto.com Exchange APIs that require an account", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "https://github.com/crypto-com/cro-staking", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/crypto-com/swap-contracts-periphery", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/crypto-com/swap-contracts-core", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/crypto-com/chain-desktop-wallet", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "Crypto.com Wallet Extension", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.defi.wallet", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.defi.wallet", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-c3f228f4cfb65d14", "name": "CS Money", "platform": "HackerOne", "program_url": "https://hackerone.com/cs_money?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:25Z", "scope_source_urls": [ "https://hackerone.com/cs_money/policy_scopes" ], "in_scope": [ { "name": "cs.money", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "support.cs.money", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "blog.cs.money", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wiki.cs.money", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "3d.cs.money", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "old.cs.money", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "grafana.cs.money", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "CS.Money Antiscam", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-077a226296df271f", "name": "d-you App & German EUDI Wallet Ecosystem", "platform": "HackerOne", "program_url": "https://hackerone.com/common_codes?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:26Z", "scope_source_urls": [ "https://hackerone.com/common_codes/policy_scopes" ], "in_scope": [ { "name": "d-you Wallet iOS Test", "asset_type": "TESTFLIGHT", "location": null, "group": null, "bounty_eligible": true }, { "name": "d-you Wallet Android Test", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://wallet-backend-sandbox.apps.sandbox.nwb.youniqx.com/v1/wpb", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://wallet-backend-sandbox.apps.sandbox.nwb.youniqx.com/v1/rwsca", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://wallet-backend-sandbox.apps.sandbox.nwb.youniqx.com/v1/mdvm", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://wallet-backend-sandbox.apps.sandbox.nwb.youniqx.com/v1/status-lists", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://wallet-backend-sandbox.apps.sandbox.nwb.youniqx.com/v1/pns", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "OOS: All domains from [*.]bundesdruckerei.de", "asset_type": "API", "location": null, "group": null, "bounty_eligible": false }, { "name": "OOS: All other domains from [*.]youniqx.com", "asset_type": "API", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-066b23fc84620102", "name": "Databricks", "platform": "HackerOne", "program_url": "https://hackerone.com/databricks?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:29Z", "scope_source_urls": [ "https://hackerone.com/databricks/policy_scopes" ], "in_scope": [ { "name": "databricks.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "accounts.cloud.databricks.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://dbc-9a3f8ed1-7608.cloud.databricks.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Databricks Free Edition", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Open Scope", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Lakebase-Supported extensions", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.cloud.databricks.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.azuredatabricks.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.gcp.databricks.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-13427421e09fd998", "name": "Deribit", "platform": "HackerOne", "program_url": "https://hackerone.com/deribit?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:30Z", "scope_source_urls": [ "https://hackerone.com/deribit/policy_scopes" ], "in_scope": [ { "name": "*.deribit.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "test.deribit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "insights.deribit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pb.deribit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 1", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 2", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.deribit", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1293674041", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.chattest.deribit.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "deribit.zendesk.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "office.deribit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "trust.deribit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.deribit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-6e7e739d37e61a8e", "name": "Deriv.com", "platform": "HackerOne", "program_url": "https://hackerone.com/deriv?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:31Z", "scope_source_urls": [ "https://hackerone.com/deriv/policy_scopes" ], "in_scope": [ { "name": "*.deriv.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.deriv.cloud", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.derivws.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.deriv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "smarttrader.deriv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cashier.deriv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "oauth.deriv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.deriv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "derivws.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "secure-dfadmin.deriv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "home.deriv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "core-api.deriv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://api-core.deriv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "github.com/binary-com", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "github.com/deriv-com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "ct.deriv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "deriv.partners", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "partners.deriv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "deriv.slack.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "tradingview.deriv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "trade.mql5.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.deriv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://deriv.atlassian.net/servicedesk/customer/user/signup", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "deriv.ae", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Any 3rd party managed domain", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-43fa2a30bf85ad89", "name": "Discourse", "platform": "HackerOne", "program_url": "https://hackerone.com/discourse?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:35Z", "scope_source_urls": [ "https://hackerone.com/discourse/policy_scopes" ], "in_scope": [ { "name": "try.discourse.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/discourse/discourse", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-be10e8ab9c7750da", "name": "Django", "platform": "HackerOne", "program_url": "https://hackerone.com/django?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://hackerone.com/django/policy_scopes", "http_status": 200, "result": "javascript_required", "note": "The official public policy_scopes page returned a JavaScript app shell during this review. The existing structured-scope capture had zero rows; a current asset list was not independently visible from this page." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "no_published_assets", "scope_captured_at": "2026-10-03T15:50:37Z", "scope_source_urls": [ "https://hackerone.com/django/policy_scopes" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official public policy_scopes page returned a JavaScript app shell during this review. The existing structured-scope capture had zero rows; a current asset list was not independently visible from this page." ], "review_flags": [] }, { "id": "hackerone-0e742ef0ac68e7fd", "name": "DoorDash", "platform": "HackerOne", "program_url": "https://hackerone.com/doordash?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:38Z", "scope_source_urls": [ "https://hackerone.com/doordash/policy_scopes" ], "in_scope": [ { "name": "www.doordash.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.dd.doordash", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "doordash.DoorDashConsumer", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.dashapi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.doorcrawl.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.order.online", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "doordash.com/unified-gateway/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "doordash.com/orders/drive/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://help.doordash.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "careersatdoordash.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ir.doordash.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "unified-gateway.doordash.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "consumer-mobile-bff.doordash.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "merchant-mobile-bff.doordash.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "merchant-portal.doordash.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://doordash.com/merchant", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "track.doordash.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "internal.doordash.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "DoorDash Payments", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-0b26afeb0f903c23", "name": "Doppler", "platform": "HackerOne", "program_url": "https://hackerone.com/doppler?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:39Z", "scope_source_urls": [ "https://hackerone.com/doppler/policy_scopes" ], "in_scope": [ { "name": "doppler.team", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.doppler.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dashboard.doppler.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "share.doppler.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/DopplerHQ/cli", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "doppler", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "http://calendly.com/doppler/enterprise", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "docs.doppler.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "doppler.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.doppler.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.doppler.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/DopplerHQ/awesome-bots", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-786b4464ac339999", "name": "Dynatrace", "platform": "HackerOne", "program_url": "https://hackerone.com/dynatrace?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:42Z", "scope_source_urls": [ "https://hackerone.com/dynatrace/policy_scopes" ], "in_scope": [ { "name": "*.sprint.dynatracelabs.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.sprint.apps.dynatracelabs.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "account-sprint.dynatracelabs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sso-sprint.dynatracelabs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "myaccount-hardening.dynatracelabs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Core Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Dynatrace OneAgent", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Dynatrace ActiveGate", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Dynatrace MobileAgent", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/Dynatrace", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "*.dynatrace.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.dev.dynatracelabs.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "university-staging.dynatracelabs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "wyq34449.sprint.apps.dynatracelabs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "playground.apps.dynatrace.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "easyTravel demo application", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "EasyTrade demo application", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-01636bf90c479b43", "name": "Dyson", "platform": "HackerOne", "program_url": "https://hackerone.com/dyson?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:43Z", "scope_source_urls": [ "https://hackerone.com/dyson/policy_scopes" ], "in_scope": [ { "name": "www.dyson.co.uk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dysoncanada.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.it", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.ie", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.ch", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.se", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.nl", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.at", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.be", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.pt", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.de", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.fr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.no", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.dk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.es", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.fi.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dyson.se", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dysoncanada.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dyson.dk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dyson.it", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dyson.es", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dyson.co.uk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dyson.at", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dyson.nl", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dyson.be", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dyson.pt", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dyson.no", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dyson.de", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dyson.ch", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dyson.fr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dyson.ie", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.fi.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.pl", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.in", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.com.mx", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.com.sg", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.co.kr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.co.nz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.com.tr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.ae", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.co.il", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.com.au", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.hk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.co.th", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.my", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "shop.dyson.co.za", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.sa.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.cz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.hu", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.co.jp", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.com.ro", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.vn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.cp.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.cn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.com.ua", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "shop.dyson.tw", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.tw", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.gr.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dyson.com.ee", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Other Dyson Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Github findings", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Dyson Connected Products (IoT Hardware)", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.dyson.mobile.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "993135524", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*dyson-demo.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.dynsystem.kr", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "comm.dyson*", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "bounce.dyson*", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sakti3.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "on.dyson.co.uk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sm2.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "m.shop.dyson.cn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "register-dyson.co.kr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "jobs.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "reviews.dyson*", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sm3.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "view.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mail.register-dyson.co.kr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "test.oepay.dyson.cn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "shop.dyson.co.kr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*central.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "shop.dyson.ru", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "jamesdysonfoundation.*", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "aio.shop.china-dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "q.dyson.cn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api.q.dyson.cn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "fsc.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "auth.dysonrecall.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "centraltest.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "30secondbleeps.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.dyson.ovh", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dysontherapie.fr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "svn.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "central-test.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "careers.dyson.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-1e50f0caf2c49b77", "name": "Early Warning", "platform": "HackerOne", "program_url": "https://hackerone.com/early_warning?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:44Z", "scope_source_urls": [ "https://hackerone.com/early_warning/policy_scopes" ], "in_scope": [ { "name": "*.zellepay.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.earlywarning.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "developer*.earlywarning.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "support*.earlywarning.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.zelle.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "zelleservice.my.site.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ews-fusion.my.site.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "zelleservice.my.salesforce.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.certos.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.clearxchange.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "api.zmsp.*.earlywarning.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*bc.earlywarning.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "ccpa*.zellepay.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "toolkit.zellepay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ccpa.zellepay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "zellepay.earlywarning.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "platformtest.cat.earlywarning.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "zellepay.force.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://api.zellepay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://api.zmsp.earlywarning.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://earlywarningapi.force.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "platform.cat.earlywarning.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "docs.earlywarning.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "demo.earlywarning.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "flip0717.earlywarning.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-9a6f8a4f012ddf44", "name": "eero", "platform": "HackerOne", "program_url": "https://hackerone.com/eero?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:45Z", "scope_source_urls": [ "https://hackerone.com/eero/policy_scopes" ], "in_scope": [ { "name": "*.eero.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.e2ro.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "eero Devices", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.eero.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1023499075", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "Anything not in scope", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Services, Apps, Mobile", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Devices", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-c94a85f143650391", "name": "Elastic", "platform": "HackerOne", "program_url": "https://hackerone.com/elastic?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:46Z", "scope_source_urls": [ "https://hackerone.com/elastic/policy_scopes" ], "in_scope": [ { "name": "*.elastic.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.found.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elstc.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticnet.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.eops.nl", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elastic.dev", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.ela.st", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elastic.wtf", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticacademy.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticaccelerationzone.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticapm.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticbeats.wtf", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticcloud.wtf", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticgov.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticloud.wtf", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticon.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticon.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticpartneracademy.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticps.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticsearch.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticsearch.fr", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticsearch.jp", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticsearch.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.elasticsearch.wtf", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.estccdn.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.insight.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.kibana.wtf", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.logstash.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.logstash.wtf", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.prelert.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.theelasticast.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "Software Supply Chain", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Elastic Credentials", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Subdomain takeover", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.swiftype.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/elastic/*/wiki", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/swiftype/*/wiki", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.es.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.jina.ai", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.keephq.dev", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.kbndev.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "learn.elastic.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "link.email.elastic.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "track.email.elastic.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sendgrid.elastic.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "cloud.elastic.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.elastic.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "discuss.elastic.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Other", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Elastic Package Registry", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Elastic Synthetics Monitoring", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Elastic Clients", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Beats - Auditbeat", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Beats - Filebeat", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Beats - Heartbeat", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Beats - Metricbeat", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Beats - Packetbeat", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Beats - Winlogbeat", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Elastic Agent", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Elastic Cloud Enterprise (ECE)", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Elastic Cloud on Kubernetes (ECK)", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Elastic Enterprise Search", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Elastic Maps Server", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Elasticsearch", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Logstash", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Observability - APM Agents", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Observability - APM Server", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Fleet Server", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Kibana", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Beats", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Elastic Defend", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Beats - Osquerybeat", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Elastic Distributions of OpenTelemetry (EDOT)", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-f244151680c83618", "name": "Enjin", "platform": "HackerOne", "program_url": "https://hackerone.com/enjin?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:48Z", "scope_source_urls": [ "https://hackerone.com/enjin/policy_scopes" ], "in_scope": [ { "name": "nft.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Enjin Blockchain", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.enjin.mobile.wallet", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.enjin.mobile.wallet", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.enjinusercontent.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "docs.enjin.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "platform.enjin.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "enj.in", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "enjin.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "cdn.nft.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "faucet.canary.enjin.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.enjin.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.nft.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "assets.enjin.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "cdn.enjin.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-849058e2387b747d", "name": "Epic Games", "platform": "HackerOne", "program_url": "https://hackerone.com/epicgames?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:49Z", "scope_source_urls": [ "https://hackerone.com/epicgames/policy_scopes" ], "in_scope": [ { "name": "*.epicgames.dev", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.twinmotion.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "dev.epicgames.com/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.rocketleague.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.psynet.gg", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.unrealtournament.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.unrealengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.fortnite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.epicgames.dev", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "metahuman.unrealengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "twinmotion.unrealengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.psyonix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.3lateral.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.cubicmotion.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.oncatapult.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mediatonic.co.uk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.artstation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.easy.ac", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.sketchfab.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.quixel.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.amplitude-game.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.audicagame.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.dancecentral.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.dropmix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.singspacegame.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.harmonixmusic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hmxwebservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fortnite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "harmonixmusic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "aqtooling.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "aquiristech.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "buckingfuggy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hc2services.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hc2tooling.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wonderboxapi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wonderboxdev.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "capturingreality.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fab.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "innersloth.kidswebservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "kidswebservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "niantic.kidswebservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "staging.kidswebservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "competitive.fortnite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "create.fortnite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "content-service.bfda.live.use1a.on.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "content-service-live-testing.bfda.live.use1a.on.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://urc-uefn.live.ucs.on.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://nexus.live.ucs.on.epicgames.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://urc-auth-uefn.live.ucs.on.epicgames.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://fngw-svc-gc-livefn.ol.epicgames.net/api/magpie", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://fngw-svc-ds-livefn.ol.epicgames.net/api/magpie", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://fn-commerce-live.eeef.live.use1a.on.epicgames.com/api/fn-commerce/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cosmo.fdeb.live.use1a.on.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://communities.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.fallguys.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "aquiris.com.br", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "aquiris.studio", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ballistic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ballistic.com.br", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "horizonchase.com.br", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "horizonchase.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "horizonchaseturbo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "playwonderbox.com.br", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "playwonderbox.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "FortniteClient-Android-Shipping-arm64-es2.apk", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "Any other Epic games owned asset not listed in the out of scope section", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "EpicOnlineServices", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "v1staging.kidswebservices.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "v1. kidswebservices.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "FortniteClient-Win64-Shipping.exe", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "FortniteLauncher-Win64-Shipping.exe", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "FortniteLauncher-Win64-Shipping_BE.exe", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "FortniteLauncher-Win64-Shipping_EAC.exe", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "FortniteLauncher.exe", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "EOS C# SDK", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "UnrealEditorFortnite-Win64-Shipping.exe", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "EpicGamesLauncher.exe", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "UEFN", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "id1520720139", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "id1534920947", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "help.sketchfab.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "forum.sketchfab.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "*.bandcamp.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.bcbits.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "epicsupport.force.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "learn.unrealengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "docs.unrealengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "udn.unrealengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "watch.fortnite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "merch.fortnite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "eoshelp.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "answers.unrealengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "communityportal.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "marketplacehelp.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "twinmotionhelp.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "issues.unrealengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "damascushelp.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mithrilhelp.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "stadiahelp.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "artportal.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "communities.unrealengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "login.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "forums.unrealengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "webinars.unrealengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "skookum.chat", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mediaspace.unrealengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.popjam.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.rukkaz.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.jellychat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://superawesome.com/contact-us/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "detroitlabs.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "isitbandcampfriday.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.bcbits.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.superbeatsports.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "admin.harmonixmusic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.harmonixmusic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "admin-dev.harmonixmusic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "web-admin.harmonixmusic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "teamcity-external.harmonixmusic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "tableau.harmonixmusic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mail.harmonixmusic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "locustus.harmonixmusic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "jira.harmonixmusic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "confluence.harmonixmusic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "autodiscover.harmonixmusic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "swarm.harmonixmusic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "songsdb.harmonixmusic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sompmgr-frontend.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sompmgr.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "msoid.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "fuser-admin-live-external.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "fuser-admin-dev-external.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "teamcity.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "swarm-monitoring-node-01.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mon.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "public-web-swarm-cluster.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www-api.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sompmgr-proxy-int.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sompmgr-dev-proxy-azure.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "azure-int-proxy.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sompmgr-proxy-int-dev.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "logstash-shipper-azure.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "rb4-admin.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sompmgr-admin.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sompmgr-proxy-ext.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sompmgr-dev.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sompmgr-int-dev.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sompmgr-int.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sompmgr-dev-proxy-aws.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sompmgr-proxy-ext-dev.hmxservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "audica-live-admin.hmxwebservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "audica-prod-admin.hmxwebservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "audica-prod-api.hmxwebservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dcvr-live-admin.hmxwebservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dcvr-prod-admin.hmxwebservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dropmix-dev-admin.hmxwebservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dropmix-prod-admin.hmxwebservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "hype-dev-admin.hmxwebservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "rb4ca-prod-admin.hmxwebservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "rb4ca-staging-admin.hmxwebservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "docs.superawesome.tv", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "msoid.harmonixmusic.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "facebook.aquiris.com.br", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "senior.aquiris.com.br", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "vimeo.aquiris.com.br", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "looneytuneswom.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.capturingreality.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "news.capturingreality.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "epicswag.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://brand.epicgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "start.gg", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "unrealfest.unrealengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/EpicGames/UnrealTournament", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "Adobe Flash related submissions", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.superawesome.tv", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.superawesome.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Popjam Android application", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Rukkaz Android application", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.bandcamp.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "maestro.io", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Recent Acquisitions", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "FortniteClient-Mac-Shipping.app", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "app.playwonderbox.com", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-aab7e8d2f30909bd", "name": "Eternal", "platform": "HackerOne", "program_url": "https://hackerone.com/eternal?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:53Z", "scope_source_urls": [ "https://hackerone.com/eternal/policy_scopes" ], "in_scope": [ { "name": "*.zomato.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.zdev.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.zomans.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hyperpure.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.runnr.in", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://*.grofer.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://*.grofers.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.district.in", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.edition.in", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.ticketnew.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.insider.in", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.tktnew.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.eternal.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "winecellar.zomato.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.grofers.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api2.grofers.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "blinkit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bistro-api.blinkit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://mcp-server.zomato.com/mcp", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "All Assets (other than Blinkit)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 2", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 1", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 3", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Data Protection Program", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.application.zomato", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.grofers.customerapp", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.blinkit.bistro", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.application.zomato.district", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "434613896", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "960335206", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "6670203019", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "6670536058", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Scope Questions: Items not explicitly listed here", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.application.zomatomerchant", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "staging*.runnr.in", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://*.blinkit.support", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.zomatoportugal.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.bstro.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.ali.zomans.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "business-blog.zomato.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "blog.zomato.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.zomato.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "success.zomato.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dev.hyperpure.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "devapi.hyperpure.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "devpod.hyperpure.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "send.zomato.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zomatobook.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.application.zomato.ordering", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-ebb43d877451dbe1", "name": "eufy Security", "platform": "HackerOne", "program_url": "https://hackerone.com/eufy_security?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:54Z", "scope_source_urls": [ "https://hackerone.com/eufy_security/policy_scopes" ], "in_scope": [ { "name": "eufyMake Studio(2D UV)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://us.eufy.com/products/e8213181", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "eufyMake E1", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Solarbank 2 E1600 Pro", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Anker soundcore Work D3200", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Liberty 5 Pro Max D1204", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://us.eufy.com/products/t88711w1", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://us.eufy.com/products/t88511d1", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://us.eufy.com/products/t8410121", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "id=com.oceanwing.soundcore", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "id=com.zhixin.controller", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.oceanwing.battery.cam", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.oceanwing.FDMPrint", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.anker.charging", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "anker-nebula/id1319092174", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "soundcore/id1331876603", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.security.BatteryCam", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.anker.AnkerMake", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Anker", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-c01cd0677db4334d", "name": "Evernote", "platform": "HackerOne", "program_url": "https://hackerone.com/evernote?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:55Z", "scope_source_urls": [ "https://hackerone.com/evernote/policy_scopes" ], "in_scope": [ { "name": "9wzdncrfj3mb", "asset_type": "WINDOWS_APP_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.evernote.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "accounts.evernote.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.evernote.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.evernote", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "406056744", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "281796108", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "accounts.stage.evernote.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api.stage.evernote.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "help.evernote.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.evernote.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-279eb4b2a7f631df", "name": "EXNESS", "platform": "HackerOne", "program_url": "https://hackerone.com/exness?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:56Z", "scope_source_urls": [ "https://hackerone.com/exness/policy_scopes" ], "in_scope": [ { "name": "my.exness.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pay.ibex.exchange", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://my.exness.com/webtrading/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "exnessaffiliates.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pwapi.ex2b.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.excalls.mobi", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://my.exness.com/pa/pim/manager", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "exness.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.exness.android.pa", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Exness Trade: Online Trading", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Exness Investor", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Any subdomain infrastructure issue", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Any subdomain application issue", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "External service data leakage", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "stat.* (e.g. stat.exnessaffiliates.com)", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-9970a869a4d513da", "name": "Exodus", "platform": "HackerOne", "program_url": "https://hackerone.com/exodus?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:57Z", "scope_source_urls": [ "https://hackerone.com/exodus/policy_scopes" ], "in_scope": [ { "name": "*.exodus.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.a.exodus.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.exodus.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "pay.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "login.exodus.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pay-admin.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "turing.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nexotrack.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nexotrack-p.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ctr.a.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fiat.a.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fiat-p.a.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fiat-prod-fallback.a.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "kyc.a.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/ExodusOSS/crypto", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/ExodusOSS/bytes", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/ExodusOSS/hydra", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.npmjs.com/package/@exodus/keychain", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.npmjs.com/package/@exodus/sentry-client", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.npmjs.com/package/@exodus/errors", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.npmjs.com/package/@exodus/safe-string", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Smart Contract: Solana - EQYRmLmkE7G7a2WQyojwrXg4SeguypCdnbm3ecncizsd", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Smart Contract: Solana mainnet - xoUSDq85Rjsb6SbUwJyreFgeWQvxdkT7R3c3g7s6p5Y", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/details?id=exodusmovement.exodus&hl=en_IN", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Exodus Desktop Wallet", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "exodus-movement.exodus", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/us/app/exodus-crypto-bitcoin-wallet/id1414384820", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "get.exodus.*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.exodus.com/job-application/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.atp-exodus.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.grateful.me", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.exodus.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://www.exodus.com/contact-support", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support-helpers.a.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "slack-invite.exodus.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "exodus.atlassian.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "exodusstore.blob.core.windows.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "safeguard.a.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "passkeys.foundation", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "wallet.passkeys.foundation", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "relay.passkeys.foundation", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "my.passkeys.network", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api.passkeys.network", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "embedded.passkeys.foundation", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://exchange-server.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "exchange-server-p.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "exchange-p.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api.xoswap.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api-p.xoswap.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "xoswap-graphql.a.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "xoswap-graphql-p.a.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dashboard.xoswap.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dashboard-p.xoswap.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "exchange-server.exodus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://exodus.atlassian.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://exodus.com/keybase.txt", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Passkey Wallet", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Exodus Mobile App Browser and Wallet Connect", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://play.google.com/store/apps/details?id=com.exodus.grateful", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "Exodus Browser Extension", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://apps.apple.com/us/app/grateful-by-exodus/id6754093889", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-58030e9572e48f03", "name": "Expedia Group Bug Bounty", "platform": "HackerOne", "program_url": "https://hackerone.com/expediagroup_bbp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:58Z", "scope_source_urls": [ "https://hackerone.com/expediagroup_bbp/policy_scopes" ], "in_scope": [ { "name": "*.vrbo.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hotwire.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.carrentals.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.wotif.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.cheaptickets.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.lastminute.co.nz", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.lastminute.com.au", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.travelocity.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.travelocity.ca", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.expediacruises.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.expediapartnercentral.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.tiqets.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.expedia.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.abritel.fr", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.bookabach.co.nz", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.ean.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.expediaagents.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.expediagroup.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.expediapartnersolutions.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.fewo-direkt.de", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hotels.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hotwirepartnercentral.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.orbitz.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.expedia-aarp.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.flights.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.stayz.com.au", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.expediataap.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.expediataaprewards.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.hotels.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.expedia.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.expediapartnercentral.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.vrbo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.hotwire.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.orbitz.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.ebookers.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.ebookers.fi", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.mrjet.se", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.carrentals.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.wotif.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.cheaptickets.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.lastminute.co.nz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.lastminute.com.au", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.travelocity.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.travelocity.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.expediacruises.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.abritel.fr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.bookabach.co.nz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.fewo-direkt.de", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.stayz.com.au", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.expediagroup.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.expedia-aarp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.tiqets.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.expediataap.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.hotwire.hotels", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.ebookers", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.orbitz", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.expedia.bookings", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.wotif.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.cheaptickets", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.travelocity.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.hcom.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.vrbo.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.carrentals", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.homeaway.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "566635048", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "403546234", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "483394780", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "427916203", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "531549799", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "880759727", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "284803487", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "284971959", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1245772818", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "506426310", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "642441300", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.expediapartnercentral", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "987675995", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-8aa3bd7b67d92531", "name": "FanDuel", "platform": "HackerOne", "program_url": "https://hackerone.com/fanduel?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:02Z", "scope_source_urls": [ "https://hackerone.com/fanduel/policy_scopes" ], "in_scope": [ { "name": "*.fanduel.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mgmt.fndlsb.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.prd.fndlsb.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*inf.fndlsb.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.tvg.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "login-4ngbets.us.betfair.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.4njbets.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "4njbets.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "4njbets.us.betfair.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "login-4njbets.us.betfair.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.fanduel.android.self", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.fanduel.sportsbook", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.fanduel.casino", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.fanduel.racing", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "599664106", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1506229470", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1485539253", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "6740879082", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1413721906", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.fndl.dev", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "affiliates.fanduel.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "equibase-store.fanduel.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-2d5d714bdf4e2b81", "name": "Faraday, Inc.", "platform": "HackerOne", "program_url": "https://hackerone.com/faraday_inc?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:04Z", "scope_source_urls": [ "https://hackerone.com/faraday_inc/policy_scopes" ], "in_scope": [ { "name": "app.faraday.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.faraday.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vault2.faraday.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "row.pro", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.row.pro", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pro.faraday.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mcp.faraday.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.pro.faraday.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "s3://faraday-secret", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "gs://fdy-production-sdk-uploads", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "gs://faraday-secret", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "BigQuery", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "faraday.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "faraday.atlassian.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "s3://faraday-uploads", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Support Live Chat", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-ca54cf0a75b03578", "name": "FetLife", "platform": "HackerOne", "program_url": "https://hackerone.com/fetlife?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:07Z", "scope_source_urls": [ "https://hackerone.com/fetlife/policy_scopes" ], "in_scope": [ { "name": "*.fetlife.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "fetlife.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fetlifemail.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.bitlove.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "status.fetlife.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mail.fetlife.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "n2.fetlife.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "fetlifestatus.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "bitlove.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.bitlove.fetlife", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": false }, { "name": "Requests to our ad endpoints (on any server): `/ads/serve`, `/ads/application_serve*`, and `/ads/click/*`", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "co.bitlove.opensource.FetLife", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-12dcafdd4e490253", "name": "Figma", "platform": "HackerOne", "program_url": "https://hackerone.com/figma?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:10Z", "scope_source_urls": [ "https://hackerone.com/figma/policy_scopes" ], "in_scope": [ { "name": "www.figma.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.figma.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Figma Atlassian App", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Figma Desktop App", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Figma iOS and Android apps", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Figma Slack App", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Figma for Microsoft Teams", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Figma Weave", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "www.designsystems.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-c6cb359d6b73b906", "name": "Files.com", "platform": "HackerOne", "program_url": "https://hackerone.com/files?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:11Z", "scope_source_urls": [ "https://hackerone.com/files/policy_scopes" ], "in_scope": [ { "name": "app.files.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "your-assigned-subdomain.files.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "your-assigned-subdomain.hosted-by-files.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.files.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "FIles.com REST API", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Files.com SDKs and MCP", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Files.com Mobile App", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Files.com Command Line Interface (CLI) App", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Files.com Desktop v6 App", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Files.com On-Premise Agent", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "developers.files.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "status.files.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mail.files.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "In-App AI Assistant", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-a69f11874826e3db", "name": "Flickr", "platform": "HackerOne", "program_url": "https://hackerone.com/flickr?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:17Z", "scope_source_urls": [ "https://hackerone.com/flickr/policy_scopes" ], "in_scope": [ { "name": "*.flickr.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.whatismode.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "modefestival.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.yahoo.mobile.client.android.flickr", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "328407587", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.flickr.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "blog.flickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "amt.flickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "appletv.flickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "blogtest.flickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "bluebird.flickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "code.flickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "csp.flickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "guce.flickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "stage.guce.flickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "trunk.guce.flickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "health.flickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "help.flickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "parkorbird.flickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "links.flickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "flickrhelp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Zero Day Vulnerabilities/Security Upgrades", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-f78540575f647669", "name": "Flipkart", "platform": "HackerOne", "program_url": "https://hackerone.com/flipkart?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:18Z", "scope_source_urls": [ "https://hackerone.com/flipkart/policy_scopes" ], "in_scope": [ { "name": "https://api.myntra.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://payments.myntra.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.myntra.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.flipkart.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://pay.payzippy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://uiscoop.payzippy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/in/app/flipkart-online-shopping-app/id742044692", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/details?id=com.flipkart.android", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/details?id=com.myntra.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/in/app/myntra-fashion-shopping-app/id907394059", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-0b6f23f3ba8510d4", "name": "FloQast", "platform": "HackerOne", "program_url": "https://hackerone.com/floqast?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:19Z", "scope_source_urls": [ "https://hackerone.com/floqast/policy_scopes" ], "in_scope": [ { "name": "*.eu.floqast.app", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.floqast.app", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://*.floqast.engineering", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "api-eu.floqast.app", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.floqast.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.floqast.studio", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "Any Asset Not Specifically Listed as In-Scope", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "s3://floqast", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-6fdffedcced7675a", "name": "Flutter UK&I", "platform": "HackerOne", "program_url": "https://hackerone.com/flutteruki?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:20Z", "scope_source_urls": [ "https://hackerone.com/flutteruki/policy_scopes" ], "in_scope": [ { "name": "*.betfair.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.paddypower.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.betfair.es", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.betfair.it", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.betfair.ro", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.betfair.se", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.paddypower.it", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.skygamingcontent.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.skycasino.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.sbgcdn.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.skybet.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.betviewapi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.skypoker.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.skyvegas.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.skybingo.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.sbgcore.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.platformservices.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.skybetservices.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.sbgorigin.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.sbgservices.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.skybettingandgaming.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.msgsvc.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.operationstechnology.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.securityservices.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.skybet.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.skybet.co.uk", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.sbgtest.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.skybettest.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.skybettingandgaming.design", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.skybettingandgaming.info", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.betsharedservices.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.sportinglife.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.paddypartners.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.ppbdev.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.dibz.co.uk", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.ppb.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "super6.skysports.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "itv7.itv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "rafflee.co.uk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "metrocompetitions.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/developer?id=Sky+Betting+and+Gaming+Apps&gl=uk", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/dev?id=9151483005769461618&gl=GB", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/dev?id=8912907283039023448&gl=GB", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/dev?id=5503565801970655430&gl=gb", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.us.betfair.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.betfair.com.au", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.sbpartner.it", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.skybet.de", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.skybet.it", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.skybetcareers.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.skybetpartner.de", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.skybettingandgamingresearch.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.sbgpeople.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.sbga.me", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.sbg.life", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.skybet-it.info", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.skybetchiusuraconto.it", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.sbgdataintl.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.sbgcolab.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.skybetgraduates.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.sbggraduates.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.s6.sbgservices.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.sbgmail.skybettingandgaming.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.email.skybet.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.skybusinessemail.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "online.*.skybingo.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.sbagmail.skybettingandgaming.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.technology.skybettingandgaming.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.betfair.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "affiliatehub.skybet.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "partners.skybet.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "technology.skybettingandgaming.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "email1.skybet.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "skymail.sky.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "skyrgs.blueprintgaming.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.skypoker.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.staging.skypoker.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sbagmail.skybettingandgaming.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.betfair.com.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.developer.betfair.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-2852d82770f2b82b", "name": "ForeScout Technologies", "platform": "HackerOne", "program_url": "https://hackerone.com/forescout_technologies?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:22Z", "scope_source_urls": [ "https://hackerone.com/forescout_technologies/policy_scopes" ], "in_scope": [ { "name": "www.forescout.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "datapod-2-ingest.acceptance.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "datapod-2-query.acceptance.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "datapod-1-ingest.production.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "datapod-1-query.production.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mgmtpod-1-dashboard.production.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mgmtpod-1.production.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "logstash-props.devicecloud.acceptance.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "datapod-1-100-druid-ingest.development.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "datapod-1-100-druid-query.development.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "datapod-1-100-druid-ingest.testing.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "datapod-1-druid-ingest.production.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "datapod-1-100-druid-query.production.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "datapod-2-druid-ingest.production.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://telemetry-polling.devicecloud.acceptance.forescoutcloud.net/v1/upload", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://telemetry-polling.devicecloud.acceptance.forescoutcloud.net/v1/polling", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://telemetry-polling.devicecloud.acceptance.forescoutcloud.net/v1/package", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://logstash-props.devicecloud.production.forescoutcloud.net/api/v1/properties", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://backend-api.devicecloud.production.forescoutcloud.net/api/v1/settings", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://datapod-1-druid-ingest.production.forescoutcloud.net/v1/upload", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://mgmtpod-1.production.forescoutcloud.net/oauth/token", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/grouptogroup", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/firstreporttimeentry", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/iplist", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://datapod-1-druid-query.production.forescoutcloud.net/v3/matrixoverview", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://datapod-1-druid-query.production.forescoutcloud.net/v3/query/overlappingzones", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://datapod-1-druid-query.production.forescoutcloud.net/v1/query/agg", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://datapod-1-druid-query.production.forescoutcloud.net/v1/polling", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/overlappinggroups", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://datapod-1-druid-query.production.forescoutcloud.net/v2/matrixoverview", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://datapod-1-druid-query.production.forescoutcloud.net/v3/query/zonetozone", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://datapod-1-druid-query.production.forescoutcloud.net/v2/deletestatus", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/ips/bysrc", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://datapod-1-druid-query.production.forescoutcloud.net/v2/service-list", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/ips/bydst/details", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://datapod-1-druid-query.production.forescoutcloud.net/v2/services", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "iris-testing-us-east-1-nlb-4df4bbde6f6e2bbb.elb.us-east-1.amazonaws.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "updates.forescout.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "streaming.iris.acceptance.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mgmt-sensors.iris.acceptance.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "obs-sensors.iris.acceptance.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "streaming-api.iris.acceptance.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "aebddc74953f248bc8455665b0f7d47b-78af959a11e5d0c1.elb.us-east-1.amazonaws.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "streaming.iris.production.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mgmt-sensors.iris.production.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "obs-sensors.iris.production.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "streaming-api.iris.production.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ab2b0c50cdc7b445391f99d4957850c5-cd4ccfdb37dfafad.elb.us-east-1.amazonaws.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "streaming-gw.iris.production.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "community.forescout.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "us.forescout.cloud", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "uk.forescout.cloud", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "de.forescout.cloud", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cloud.forescout.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "CounterAct 9.x", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "38.140.238.56/29", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "97.105.243.96/28", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "64.47.18.80/29", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "194.90.25.80/29", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "194.90.151.192/28", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "194.90.89.165/32", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "212.143.112.81/29", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "64.84.60.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "datapod-1-100-ingest.development.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "datapod-1-100-query.development.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mgmtpod-1-100-dashboard.development.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mgmtpod-1-100.development.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "datapod-1-100-ingest.testing.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "datapod-1-100-query.testing.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "datapod-1-ingest.acceptance.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "datapod-1-query.acceptance.forescoutcloud.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-5c3e0872ae6b58dd", "name": "Front", "platform": "HackerOne", "program_url": "https://hackerone.com/fronthq?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:24Z", "scope_source_urls": [ "https://hackerone.com/fronthq/policy_scopes" ], "in_scope": [ { "name": "app.frontapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api2.frontapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.frontapp.mobile", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Front for Mac", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Front for Windows", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.frontapp.mobile", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-78c75c2f15e70de8", "name": "GitHub", "platform": "HackerOne", "program_url": "https://hackerone.com/github?type=team", "bounty_classification": "verified_policy", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "github-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T15:03:35Z", "scope_source_urls": [ "https://bounty.github.com/scope", "https://bounty.github.com/targets" ], "in_scope": [ { "name": "github.com and its subdomains", "asset_type": "domain_pattern", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Subject to the explicit exceptions and target-specific policy pages." }, { "name": "*.githubassets.com", "asset_type": "domain_pattern", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Subject to the explicit exceptions and target-specific policy pages." }, { "name": "*.githubusercontent.com", "asset_type": "domain_pattern", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Subject to the explicit exceptions and target-specific policy pages." }, { "name": "*.githubapp.com", "asset_type": "domain_pattern", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Subject to the explicit exceptions and target-specific policy pages." }, { "name": "*.githubwebhooks.net", "asset_type": "domain_pattern", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Subject to the explicit exceptions and target-specific policy pages." }, { "name": "*.github.net", "asset_type": "domain_pattern", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Subject to the explicit exceptions and target-specific policy pages." }, { "name": "*.npmjs.com", "asset_type": "domain_pattern", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Subject to the explicit exceptions and target-specific policy pages." }, { "name": "*.npmjs.org", "asset_type": "domain_pattern", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Subject to the explicit exceptions and target-specific policy pages." }, { "name": "GitHub.com", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "GitHub API", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "GitHub CSP", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "GitHub Actions", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "GitHub Pages", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "GitHub Gist", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "GitHub Enterprise Server", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "GitHub Enterprise Cloud", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "Dependabot", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "GitHub Desktop", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "GitHub Mobile", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "GitHub CLI", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "GitHub Copilot App", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "GitHub Codespaces", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "GitHub Copilot", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "GitHub Education", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "GitHub Credentials", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "npm Registry", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] }, { "name": "npm CLI", "asset_type": "product", "location": null, "group": "Target directory", "source_ids": [ "assets-targets-2026-10-03" ] } ], "out_of_scope": [ { "name": "blog.github.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "community.github.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "email.enterprise.github.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "email.finance.github.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "email.staging.finance.github.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "email.support.github.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "email.verify.github.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "google7650dcf6146f04d8.github.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "k1._domainkey.github.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "k1._domainkey.mcmail.github.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "mcmail.github.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "resources.github.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "*.resources.github.com", "asset_type": "domain_pattern", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "sgmail.github.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "*.sgmail.github.com", "asset_type": "domain_pattern", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "shop.github.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "smtp.github.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "*.smtp.github.com", "asset_type": "domain_pattern", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "livesend.github.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "atom-io.githubapp.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "atom-io-staging.githubapp.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "email.enterprise-staging.githubapp.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "email.haystack.githubapp.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." }, { "name": "reply.githubapp.com", "asset_type": "domain", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "note": "Explicit exception to the applicable in-scope wildcard." } ], "limitations": [ "The target directory is a high-level product index; individual target pages may narrow eligibility.", "Unlisted products and GitHub-owned domains are excluded by the official policy; the enumerated exceptions are not the only possible exclusions." ], "review_flags": [] }, { "id": "hackerone-11fb4dcd46f4d597", "name": "GitLab", "platform": "HackerOne", "program_url": "https://hackerone.com/gitlab?type=team", "bounty_classification": "verified_policy", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "gitlab-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:59:12Z", "scope_source_urls": [ "https://hackerone.com/gitlab/policy_scopes" ], "in_scope": [ { "name": "*.gitlab.net", "asset_type": "WILDCARD", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "*.gitlab.org", "asset_type": "WILDCARD", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "*.gitlap.com", "asset_type": "WILDCARD", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "customers.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "registry.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "about.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "docs.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "design.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "advisories.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://gitlab.com/gitlab-org/gitlab", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://gitlab.com/gitlab-org/gitlab-runner", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://gitlab.com/gitlab-org/gitaly", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://gitlab.com/gitlab-org/gitlab-pages", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://gitlab.com/gitlab-org/gitlab-shell", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://gitlab.com/gitlab-org/gitlab-vscode-extension", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "Your Own GitLab Instance", "asset_type": "OTHER", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "Other non-production infrastructure", "asset_type": "OTHER", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "GitLab for Jira Cloud", "asset_type": "OTHER", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.gitlab.cn", "asset_type": "WILDCARD", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "*.runway.gitlab.net", "asset_type": "WILDCARD", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "*.gitlab-private.org", "asset_type": "WILDCARD", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "*.service-now.com", "asset_type": "WILDCARD", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "dashboards.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "alerts.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "support.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "shop.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "forum.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "status.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "partners.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "aptly.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "translate.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "federal-support.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "us-federal-gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "ir.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "levelup.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "gitlab.biterg.io", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "gitlabsandbox.net", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "gitlabdemo.cloud", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "gitlabtraining.cloud", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "packages.gitlab.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "https://gitlab.com/gitlab-org/cli/", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "https://gitlab.com/gitlab-org/opstrace/opstrace-ui", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "https://gitlab.com/gitlab-org/opstrace/opstrace", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false } ], "limitations": [ "Published structured-scope rows were captured. Submission eligibility and bounty eligibility differ; program policy text may add restrictions." ], "review_flags": [] }, { "id": "hackerone-44dcd09820086753", "name": "Goldman Sachs", "platform": "HackerOne", "program_url": "https://hackerone.com/goldmansachs?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:31Z", "scope_source_urls": [ "https://hackerone.com/goldmansachs/policy_scopes" ], "in_scope": [ { "name": "*.goldmansachs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.gs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.goldman.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.marcus.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.honestdollar.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.marcus.co.uk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "research.gs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.gsam.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.gsselect.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.gs-mosaic.qa.gs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.gs-mosaic.gs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.qaglobal-liquidity.gs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.global-liquidity.gs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developer.gs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "goldmansachsindices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "marquee.gs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.ayco.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.gspublishing.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.gs.de", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.goldmanpfm.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "apigw.foliofn.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.foliofn.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.advisorsolutions.gs.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.folioclient.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.foliofn.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.folioidentity.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.folioinstitutional.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.folioinvesting.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.nnip.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.nextcapital.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.foliodigitalwealth.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.foliofirst.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.marcus.android.uk", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.marcus.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.gs.pwmdigital.external.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.gs.pfmg.wellness", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.gs.mobile.trader", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.gs.mobile.gsnow", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.marcus.ios-us", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.marcus.ios-uk", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.gs.pwmdigital.external", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.gs.gstrader.external", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.gs.gsnow.external", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "GS Select iOS app", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.claritymoney.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "*.events.gs.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "gsg.goldman.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "gspf.goldman.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "gsg-uk.goldman.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.rocaton.com,secure.rocaton.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "qa-billpay.goldman.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "billpay.goldman.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "18098.nextcapital.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "deb.nextcapital.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "email.nextcapital.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "npm-new.nextcapital.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "npm.nextcapital.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "repo.nextcapital.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "rubygems.nextcapital.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "All .cn domains", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.vennhypotheken.nl", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.scripts.vennhypotheken.nl", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.overrules.vennhypotheken.nl", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.communicatie.vennhypotheken.nl", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "3rd party hosted assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-4588c0655c7a95e9", "name": "GoodRx", "platform": "HackerOne", "program_url": "https://hackerone.com/goodrx?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:32Z", "scope_source_urls": [ "https://hackerone.com/goodrx/policy_scopes" ], "in_scope": [ { "name": "www.goodrx.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.goodrx", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.goodrx.iphone", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "support.goodrx.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sso.identity.goodrx.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "investors.goodrx.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.goodrx.doctors", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.goodrx.gold", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.goodrx.doctors", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.goodrx.gold", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-cc4625170e3d2b82", "name": "Grab", "platform": "HackerOne", "program_url": "https://hackerone.com/grab?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:33Z", "scope_source_urls": [ "https://hackerone.com/grab/policy_scopes" ], "in_scope": [ { "name": "*.myteksi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.myteksi.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.grab.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.grabpay.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.grab-sure.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.ovofinansial.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.ovo.id", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.grabtaxi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.grab.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "p.grabtaxi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gamma.grab.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "manage.grab.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.grabpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "xtramile.grabpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gifts.grab.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hungrygowhere.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "grab.careers", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "kartaview.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "C100447517", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "C103149579", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Cloud & 3rd-Party Services (First-Party Misconfigurations)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.grabtaxi.passenger", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.grabtaxi.driver2", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.grab.merchant", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "ovo.id", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.moveit.app.customer", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.grabpay.merchant", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "647268330", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1257641454", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1142114207", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1481198245", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1343620481", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.qms.grab.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-4304c321ea98e0b5", "name": "Greenhouse.io", "platform": "HackerOne", "program_url": "https://hackerone.com/greenhouse?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:34Z", "scope_source_urls": [ "https://hackerone.com/greenhouse/policy_scopes" ], "in_scope": [ { "name": "app.greenhouse.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "boards.greenhouse.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.greenhouse.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "onboarding.greenhouse.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "support.greenhouse.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "jss.greenhouse.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "interseller.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.interseller.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.greenhouse.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 1 Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 2 Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 3 Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "community.greenhouse.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "resources.greenhouse.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "store.greenhouse.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-72cfb26828611859", "name": "Grindr", "platform": "HackerOne", "program_url": "https://hackerone.com/grindr?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:35Z", "scope_source_urls": [ "https://hackerone.com/grindr/policy_scopes" ], "in_scope": [ { "name": "*.grindr.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.grindr.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.grindr.mobi", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "web.grindr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.grindrapp.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "319881193", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.dev.grindr.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.dev2.grindr.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "preprod1.grindr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "*.intomore.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.grindrads.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "selfservice.grindr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "go.grindr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "grindr.atlassian.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "blog.grindr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "help.grindr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "grindrbloop.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "shop.grindrbloop.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "kindr.grindr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/grindrlabs", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "shop.grindr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "investors.grindr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "grindrtogo.grindr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "status.grindr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "github.com/thesokrin/vfd", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-3c380cec9385aec5", "name": "HackerOne", "platform": "HackerOne", "program_url": "https://hackerone.com/security?type=team", "bounty_classification": "verified_policy", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "hackerone-security-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:59:13Z", "scope_source_urls": [ "https://hackerone.com/security/policy_scopes" ], "in_scope": [ { "name": "hackerone.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "api.hackerone.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "www.hackerone.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "app.pullrequest.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "reviewer.pullrequest.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "hackerone-us-west-2-production-attachments.s3.us-west-2.amazonaws.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "www.wearehackerone.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "mta-sts.wearehackerone.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "errors.hackerone.net", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://*.hackerone-ext-content.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "a5s.hackerone-ext-content.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "b5s.hackerone-ext-content.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "hackerone-ext-content.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://*.hackerone-user-content.com/", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "ctf.hacker101.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "hackathon-photos.hackerone-user-content.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "cover-photos.hackerone-user-content.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "hackathon-photos-us-east-2.hackerone-user-content.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "profile-photos.hackerone-user-content.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "hackerone-user-content.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "profile-photos-us-east-2.hackerone-user-content.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "cover-photos-us-east-2.hackerone-user-content.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "hackerone.live", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "*.vpn.hackerone.net", "asset_type": "OTHER", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://hackerone.com/mcp", "asset_type": "OTHER", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/Hacker0x01/react-datepicker", "asset_type": "OTHER", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false } ], "out_of_scope": [ { "name": "support.hackerone.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "go.hacker.one", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "info.hacker.one", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "ma.hacker.one", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "h1.community", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "www.h1.community", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "www.hackeronestatus.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false }, { "name": "hackerone-swag.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false } ], "limitations": [ "Published structured-scope rows were captured. Submission eligibility and bounty eligibility differ; program policy text may add restrictions." ], "review_flags": [] }, { "id": "hackerone-6fb7a0454f1fd1a0", "name": "Hilton", "platform": "HackerOne", "program_url": "https://hackerone.com/hilton?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:43Z", "scope_source_urls": [ "https://hackerone.com/hilton/policy_scopes" ], "in_scope": [ { "name": "*.hilton.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hilton.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hiltonbusinessonline.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hiltonlocalbiz.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "hilton.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hilton.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hiltonbusinessonline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hiltonlocalbiz.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "resmax.hilton.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Hilton Franchised Properties", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Hilton Third Party Applications - *.hilton.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Managed Property Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.hilton.android.hhonors", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "167.187.0.0/16", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "192.251.123.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "192.251.124.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "192.251.125.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "192.251.126.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "82.196.42.196/28", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "203.79.37.2/29", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "62.216.152.46/29", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "121.200.237.36/29", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "id635150066", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.hiltonhotels.jp", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.hamptonhotels.com.cn", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://jobs.hilton.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "hiltongrandvacations.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "hiltonnet.hilton.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "onqinsider.hilton.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "pim.hilton.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "eis.hilton.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "guestfeedback.hilton.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "hgv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "hiltonfoundation.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "a1.hilton.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-c11655104a7ffb56", "name": "hostinger ", "platform": "HackerOne", "program_url": "https://hackerone.com/hostinger?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:44Z", "scope_source_urls": [ "https://hackerone.com/hostinger/policy_scopes" ], "in_scope": [ { "name": "hostinger.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cpanel.hostinger.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hpanel.hostinger.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "builder.hostinger.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "horizons.hostinger.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "reach.hostinger.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "agents.hostinger.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "payments.hostinger.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ecommerce.hostinger.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "H5G/Agency", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "mail.hostinger.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Managed OpenClaw", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-d583fe0bc6c60232", "name": "HubSpot", "platform": "HackerOne", "program_url": "https://hackerone.com/hubspot?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:47Z", "scope_source_urls": [ "https://hackerone.com/hubspot/policy_scopes" ], "in_scope": [ { "name": "app*.hubspot.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "api*.hubspot.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "api*.hubapi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hubspotemail.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hs-sites(-eu1)?.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hubspotpagebuilder.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hubspotpagebuilder.eu", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "chatspot.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hubspot.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Customer Connected Domain", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "HubSpot Sales Office 365 add-in", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Customer Portal", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Other HubSpot-owned (sub)domains not listed as Out of Scope", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "HubSpot Android Mobile App", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "HubSpot iOS Mobile App", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "connect.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "shop.hubspot.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "trust.hubspot.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "thespot.hubspot.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ir.hubspot.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "events.hubspot.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-9b1526800575fa1e", "name": "Hyatt Hotels", "platform": "HackerOne", "program_url": "https://hackerone.com/hyatt?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:49Z", "scope_source_urls": [ "https://hackerone.com/hyatt/policy_scopes" ], "in_scope": [ { "name": "hyatt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.hyatt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "world.hyatt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "assets.hyatt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "newsroom.images.hyatt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "salesportal.hyatt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "meetings.hyatt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ebsext.oft.hyatt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mobileapp.hyatt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "plannerrequest.hyatt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "public.hyatt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "roominglist.hyatt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "soaext.oft.hyatt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sso.oft.hyatt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "upsell.hyatt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.hyattconnect.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "confluence.hyattdev.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "scapegoat.hyatt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "book.cheapcaribbean.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "res.vacations.buschgardens.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "res.vacations.sesameplace.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vacations.travelimpressions.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.blueskytours.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.cheapcaribbean.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.triseptsolutions.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "blueskytours.globalbookingsolutions.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "booking.cheapcaribbean.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "booking.beachbound.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "book.beachbound.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "res.funjet.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "res.secretsresorts.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "res.vacations.discoverycove.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "res.vacations.seaworld.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vacations.universalstudioshollywood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.funjet.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.universalorlandovacations.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.wynnvacations.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.beachbound.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "book.applevacations.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "book.booktandl.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "login.www.vaxvacationaccess.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "new.www.vaxvacationaccess.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "res.blueskytours.globalbookingsolutions.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "res.universalorlandovacations.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "res.vacations.united.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "res.vacations.universalstudioshollywood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "reservations.wynnvacations.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "rezagent.triseptsolutions.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "shop.wyndhamvacationownership.trisept.travel", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.triseptapi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.triseptdemo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vacations.united.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.applevacations.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "res.hyattinclusivecollection.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.hyattinclusivecollection.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "booking.applevacations.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.Hyatt", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "140.95.0.0/16", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "213.139.133.32/28", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "199.66.248.0/22", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "476639005", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-36c64c28743d2ac3", "name": "HYPR", "platform": "HackerOne", "program_url": "https://hackerone.com/hypr-corp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:51Z", "scope_source_urls": [ "https://hackerone.com/hypr-corp/policy_scopes" ], "in_scope": [ { "name": "*.hypr.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.gethypr.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.hypr.one", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "HyprUnlock.exe", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "HYPR Workforce Access.app", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.hypr.one", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "support.hypr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "help.hypr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "partners.hypr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "demo.hypr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-2e0d6200af192657", "name": "Inditex", "platform": "HackerOne", "program_url": "https://hackerone.com/inditex?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:53Z", "scope_source_urls": [ "https://hackerone.com/inditex/policy_scopes" ], "in_scope": [ { "name": "e-Commerce", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Other related e-commerce services", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Recruitment services", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Main corporate site", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-eecd057ab79e141f", "name": "inDrive", "platform": "HackerOne", "program_url": "https://hackerone.com/indrive?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:54Z", "scope_source_urls": [ "https://hackerone.com/indrive/policy_scopes" ], "in_scope": [ { "name": "*.indriverapp.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://*.indriver.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.indrive.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.indriver.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "cargo.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "volans.tech", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wga.volans.tech", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "external.indrive.dev", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "debug.clairvoyance.indrive.tech", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ingest.clairvoyance.indrive.tech", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "job.ryadom.kz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ryadom.kz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "couriers.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "careers.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "intercity.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "media.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "url-checker.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "teammate.indriver.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "blog.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "delivery-webview.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "invisionu.education", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.ryadom.kz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "landing.ryadom.kz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sso.ryadom.kz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "web.ryadom.kz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ab-api-gw-cf.global.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ab-api-gw-scf.global.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api-gw-scf.sa.apse1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ath-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ath-gw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ath-gw-scf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "baf-gw-cf.africa.afso1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "baf-gw-scf.sa.apse1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "balance-api-front.eu-east-1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "balance-api.eu-east-1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bc-cf.latam-co.saea1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bc-gw-cf.latam-pe.saea1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bdu-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bdu-gw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bdu-gw-scf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bf-cf.latam-co.saea1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bf-gw-cf.latam-pe.saea1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bid-cf.africa.afso1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bid-gw-cf.africa.afso1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bid-gw-scf.sa.apse1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ca-gw-cf.latam-mx.usea1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cas-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cas-gw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cas-gw-scf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cas.eu-east-1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cca-cf.latam-mx.usea1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "chat.eu-east-1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cht-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cht-gw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cht-gw-scf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cm-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cmf-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "co-gw-scf.sa.apse1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "co-in-cf.mena.meso1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "co-in-gw-scf.sa.apse1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "courier-gw-cf.cis.euce1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "daw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dh-cf.mena.meso1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dh-gw-scf.sa.apse1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dr-gw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "es-gw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "exs-dtu-gw-cf.africa.afso1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "exs-dtu-gw-scf.sa.apse1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fch-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fch-gw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fch-gw-scf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fch-scf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fe-gw-scf.sa.apse1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fic-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "file-storage-front.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fp-cf.global.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fsf-gw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fsf-scf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "g2-gw-scf.sa.apse1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gt-gw-cf-0.cis.euce1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gt-gw-scf.sa.apse1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gvt-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gvt-scf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ic3-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ic3-gw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ic3-gw-scf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "icl-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "icl-gw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "icl-gw-scf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "icl-scf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "idc-cf.cis.euce1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "idc-gw-cf.cis.euce1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "idp-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "idp-gw-cf.latam-mx.usea1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "idp-scf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "in-gw-scf.sa.apse1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "inc-gw-scf.sa.apse1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "is-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "isa-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "isa-gw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "msg-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "msg-gw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "msg-gw-scf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nb-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ncc-cf.latam-br.saea1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ncc-gw-cf.latam-pe.saea1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nf-cf.latam-mx.usea1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nf-of-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nha-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nha-gw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nha-gw-scf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "no-gw-cf.africa.afso1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "no-gw-scf.sa.apse1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pa-gw-scf.sa.apse1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pages.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pc-gw-scf.sa.apse1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pf-gw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pf-gw-scf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pm-gw-scf.sa.apse1.aws.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pot-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pp-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pp-gw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ppw-gw-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ppw.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ps-cf.euce1.indriverapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "alternativa.film", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "auroratechaward.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "movie.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "oymyakon.indriver.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "arsentomsky.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "av.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "company.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "jlml-wf.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "jlml.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "juntasllegamos.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pristegnimechty.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "referral-program.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.juntasllegamos.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "coms.ryadom.kz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "bus.*.indrive.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "servicos.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "coaching.supernovas.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.supernovas.indrive.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sinet.startup.inDriver", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-1f26185a60574534", "name": "Insightly", "platform": "HackerOne", "program_url": "https://hackerone.com/insightly?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:56Z", "scope_source_urls": [ "https://hackerone.com/insightly/policy_scopes" ], "in_scope": [ { "name": "crm.na1.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "accounts.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "outlook.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mobileapi.na1.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://api.insightly.com/v3.1/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "login.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mobileapi.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://api.na1.insightly.com/v3.1/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "marketing.na1.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.insight.ly", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "gmailaddon.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "podapi.na1.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "chloe.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "frontdoorproxy.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "webhook.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.insight.ly", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "insight.ly", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "blog.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "help.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "my.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "newsletter.insightly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.insightly.droid", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "563017797", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-bdb377400c03ba29", "name": "Inspectorio", "platform": "HackerOne", "program_url": "https://hackerone.com/inspectorio?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:57Z", "scope_source_urls": [ "https://hackerone.com/inspectorio/policy_scopes" ], "in_scope": [ { "name": "app.stg.inspectorio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "rise.stg.inspectorio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "report-html-sight.stg.inspectorio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.stg.inspectorio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "rise-api.stg.inspectorio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "docuflow.stg.inspectorio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "id.stg.inspectorio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://testflight.apple.com/join/vwFxXX7t", "asset_type": "TESTFLIGHT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://app.bitrise.io/app/51a95edaab331ec5/installable-artifacts/e5213e1a814bf0ba/public-install-page/bed0d33f048271d6828c5a4a979ecc96", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "files-stg.inspectorio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://collabora.stg.inspectorio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-d7614d7d57cad8a3", "name": "Instacart", "platform": "HackerOne", "program_url": "https://hackerone.com/instacart?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:58Z", "scope_source_urls": [ "https://hackerone.com/instacart/policy_scopes" ], "in_scope": [ { "name": "*.instacart.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.instacart.tools", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.instacart.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.instacart.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "admin.instacart.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "shoppers.instacart.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "template.uat.foodstorm.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Android & iOS App for Instacart Shoppers", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.instacart.client", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "545599256", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.email.instacart.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "brand.instacart.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "careers.instacart.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "carrotstore.instacart.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "corporate.instacart.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "covidresponse.instacart.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "design.instacart.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "life.instacart.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "news.instacart.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "tech.instacart.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "enterprise-status.instacart.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "instacart.careers", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-32855a40ca375ec2", "name": "Judge.me ", "platform": "HackerOne", "program_url": "https://hackerone.com/judgeme?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:07Z", "scope_source_urls": [ "https://hackerone.com/judgeme/policy_scopes" ], "in_scope": [ { "name": "judge.me", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://judge.me/reviews", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "shop.judge.me", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "woocommerce-adapter.judge.me", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bigcommerce-adapter.judge.me", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cache.judge.me", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "insights.judgeme.dev", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-7bb261375848615b", "name": "KAYAK", "platform": "HackerOne", "program_url": "https://hackerone.com/kayak?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:09Z", "scope_source_urls": [ "https://hackerone.com/kayak/policy_scopes" ], "in_scope": [ { "name": "*.kayak.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.kayak.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.swoodoo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.checkfelix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.momondo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.cheapflights.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.hotelscombined.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.mundi.com.br", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "business.kayak.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "kayak.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.kayak.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.kayak.travel", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "https://*.kayakairplanemode.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "klassereise.checkfelix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "kayak.com/hotelowner/*", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "kayak.com/moira/ehoe/*", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "kayak.com/guides/*", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "affiliates.kayak.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "cruises.kayak.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-3c00e7bc437a575a", "name": "KHealth", "platform": "HackerOne", "program_url": "https://hackerone.com/khealth?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:12Z", "scope_source_urls": [ "https://hackerone.com/khealth/policy_scopes" ], "in_scope": [ { "name": "https://*.khealth.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hhc247.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.khealth-test.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.csconnect.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mgbcareconnect.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.northwellprimarycarenow.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hmh247.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.primarycareondemand.mayoclinic.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.novanthealthvirtualprimarycare.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.pennmedicine.connect-visit.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "org.hartfordhealthcare.hhc247", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/us/app/hhc-24-7/id6741442288", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "6741442288", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "www.kpharmacyllc.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "app.khealth.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "salesforce.khealth.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ai.kanghealth", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "1180400838", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-199022bdc17fe291", "name": "Kiwi.com", "platform": "HackerOne", "program_url": "https://hackerone.com/kiwicom?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:13Z", "scope_source_urls": [ "https://hackerone.com/kiwicom/policy_scopes" ], "in_scope": [ { "name": "*.kiwi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.skypicker.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.kiwi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "auth.skypicker.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "tequila.kiwi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://www.kiwi.com/stories", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "jobs.kiwi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kiwicom/js-iam-middleware", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kiwicom/k8s-vault-operator", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kiwicom/kiwi-cache", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kiwicom/kiwi-json", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kiwicom/kiwi-structlog-config", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kiwicom/konfetti", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kiwicom/navigation-compose-typed", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kiwicom/orbit", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kiwicom/pg2avro", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kiwicom/request-session", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.skypicker.main", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.skypicker.Skypicker", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*ov.kiwi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*sg.kiwi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*._domainkey.kiwi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "email*skypicker.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "email*kiwi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*_domainkey.skypicker.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*citi-sign.kiwi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*cars.kiwi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*code.kiwi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*parking.kiwi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*learn.kiwi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.coupons.kiwi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*experiences.kiwi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "vacation.kiwi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "outbound.intercom.kiwi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mail.skypicker.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "packages.kiwi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "nyrujhhu3yuk.nest.skypicker.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "status.kiwi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "rooms.kiwi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "retool.skypicker.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "kiwistore.kiwi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "link.kiwi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-33f43a97e85494f0", "name": "Klarna", "platform": "HackerOne", "program_url": "https://hackerone.com/klarna?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:15Z", "scope_source_urls": [ "https://hackerone.com/klarna/policy_scopes" ], "in_scope": [ { "name": "*.klarna.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.klarna.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.klarnacdn.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.pricerunner.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "Merchant Portal", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Klarna Android App (com.myklarnamobile)", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Klarna iOS App (com.klarna.app)", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.klarna.com", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "locker.klarna.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://app.klarna.com/us/api/connected_card_bff/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://api.pricerunner.com/swagger-ui.html", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://api-us.pricerunner.com/swagger-ui.html", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://api-stage.pricerunner.com/swagger-ui.html", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "nuji.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "jobs.pricerunner.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Kustom", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-a70e087be0446ae5", "name": "KOHO", "platform": "HackerOne", "program_url": "https://hackerone.com/koho?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:16Z", "scope_source_urls": [ "https://hackerone.com/koho/policy_scopes" ], "in_scope": [ { "name": "web.koho.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://api.koho.ca/1.0", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://api.koho.ca/partner", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.koho.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "login.koho.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.koho.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "usercontent.koho.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "assets.koho.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "clicks.koho.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ca.koho", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1091010942", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.line-of-credit.koho.ca", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.koho.ca/cdn-cgi", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-c06b2179f9ff3ee5", "name": "Kong", "platform": "HackerOne", "program_url": "https://hackerone.com/kong?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:17Z", "scope_source_urls": [ "https://hackerone.com/kong/policy_scopes" ], "in_scope": [ { "name": "https://*.api.konghq.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://us.identity.konghq.com/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://app.insomnia.rest/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://cloud.konghq.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developer.konghq.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "konghq.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Subdomain Takeover - konghq.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "GitHub Actions in our Public Repositories", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Insomnia CLI (inso)", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Insomnia Desktop Client", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Kong Mesh", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Kong Gateway Plugins (Kong-Supported Only)", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Kong Gateway Enterprise", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Kong Gateway OSS", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "https://*.konghq.tech", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.gateways.konghq.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.*.edge.gateways.konghq.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://kuma.io/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://insomnia.rest/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://docs.konghq.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://httpbin.konghq.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Non-Kong GitHub Repositories", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Kong Enterprise Gateway - Sandbox Functionality", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Non-Kong Plugins", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-fcc1cbc0cf5cbd81", "name": "Krisp", "platform": "HackerOne", "program_url": "https://hackerone.com/krisp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:19Z", "scope_source_urls": [ "https://hackerone.com/krisp/policy_scopes" ], "in_scope": [ { "name": "*.krisp.ai", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "krisp.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "account.krisp.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.krisp.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "teams.krisp.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "download.krisp.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "analytics.krisp.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "upld.krisp.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.krisp.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Other", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://download.krisp.ai/win", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://download.krisp.ai/mac", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "help.krisp.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "help-jp.krisp.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "resources.krisp.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "*dev*.krisp.ai", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "whatsnew.krisp.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "url5145.krisp.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "voice-ai-newsletter.krisp.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sdk-docs.krisp.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "metabase.krisp.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-ad585ed38d23dd3c", "name": "Kubernetes", "platform": "HackerOne", "program_url": "https://hackerone.com/kubernetes?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:20Z", "scope_source_urls": [ "https://hackerone.com/kubernetes/policy_scopes" ], "in_scope": [ { "name": "prow.k8s.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "kubernetes.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "k8s.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "kubernetes-csi.github.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/csi-api", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/kubernetes", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/dns", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/kube-openapi", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/git-sync", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/gengo", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/cluster-bootstrap", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/kube-controller-manager", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/kube-scheduler", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/kubelet", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/kube-proxy", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/cli-runtime", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/metrics", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/apiextensions-apiserver", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/kube-aggregator", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/apiserver", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/component-base", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/client-go", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/api", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/apimachinery", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/code-generator", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/publishing-bot", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/cluster-registry", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/k8s.io", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/klog", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/utils", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/website", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/test-infra", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/kops", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/minikube", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/kompose", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/kube-state-metrics", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/autoscaler", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/kube-deploy", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/release", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/node-problem-detector", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/repo-infra", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/kubectl", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/org", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/sig-release", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/kubeadm", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/cri-api", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/node-api", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/csi-translation-lib", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/cloud-provider", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes-security", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes-client", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "github.com/kubernetes-csi", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "k8s.gcr.io", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://storage.googleapis.com/kubernetes-release/", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 1", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 2", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 3", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/kubernetes/cloud-provider-alibaba-cloud", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/cloud-provider-sample", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/kubernetes-template-project", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/kubernetes-anywhere", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/frakti", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/sample-cli-plugin", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/sample-controller", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/sample-apiserver", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/cloud-provider-gcp", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/security", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/examples", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/steering", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/funding", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/cloud-provider-aws", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/community", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/enhancements", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/cloud-provider-openstack", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/perf-tests", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/cloud-provider-azure", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/cloud-provider-vsphere", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/legacy-cloud-providers", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes-incubator", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "github.com/kubernetes-retired", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes-sigs", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "Community Management & Communications", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "https://github.com/kubernetes/ingress-gce", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/kubernetes/ingress-nginx", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-647b102a2580ed64", "name": "Lark Technologies", "platform": "HackerOne", "program_url": "https://hackerone.com/lark_technologies?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:21Z", "scope_source_urls": [ "https://hackerone.com/lark_technologies/policy_scopes" ], "in_scope": [ { "name": "larksuite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "lark-frontier.byteoversea.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "file.larksuite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "open.larksuite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.larksuite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.larksuite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "caldav.larksuite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "status.larksuite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "passport.larksuite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "internal-api.larksuite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "internal-api-lark-api.larksuite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "internal-api-drive-stream.larksuite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hackers_chosendomain.larksuite.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.larksuite.suite", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "Windows OS Executable: Download here https://www.larksuite.com/download", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Mac OS Executable: Download here https://www.larksuite.com/download", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "1452166623", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-cfc47e0f2fb4023d", "name": "LinkedIn", "platform": "HackerOne", "program_url": "https://hackerone.com/linkedin?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:23Z", "scope_source_urls": [ "https://hackerone.com/linkedin/policy_scopes" ], "in_scope": [ { "name": "www.linkedin.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.linkedin.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "business.linkedin.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.linkedin.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "288429040", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-68ee1d985c2695d6", "name": "Live Nation", "platform": "HackerOne", "program_url": "https://hackerone.com/live_nation?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:24Z", "scope_source_urls": [ "https://hackerone.com/live_nation/policy_scopes" ], "in_scope": [ { "name": "app.livenation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.ticketmaster.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.ticketmaster.com.au", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.ticketmaster.com.mx", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.ticketmaster.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.ticketmaster.co.uk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.ticketmaster.ie", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.ticketmaster.eu", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "livenation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ticketmaster.com.br", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ticketmaster.de", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ticketmaster.com.mx", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ticketmaster.co.uk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ticketmaster.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ticketmaster.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "livenation.me", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "frontgatetickets.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://signup.ticketmaster.com/bugbountytest", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.livenation.co.uk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.royalarena.dk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.onthewaterfrontfestival.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.lineup.com.mx", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dk.royalarena.app", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/us/app/ticketmaster-buy-sell-tickets/id500003565", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/no/app/royal-arena/id1181913144", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-3e26953a15a7b521", "name": "Logitech", "platform": "HackerOne", "program_url": "https://hackerone.com/logitech?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:26Z", "scope_source_urls": [ "https://hackerone.com/logitech/policy_scopes" ], "in_scope": [ { "name": "*vc.logitech.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.streamlabs.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "circle.logi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "id.logi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "accounts.logi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.logitech.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.logitechg.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.ultimateears.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.astrogaming.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.logitech.com.cn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sync.logitech.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.logicool.co.jp", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "logitechg.com.cn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gaming.logicool.co.jp", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "logiq.logitech.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Circle Cameras", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Video Conferencing Products", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "USB Unifying and LightSpeed Receivers", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Presentation Remotes", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Logitech Mice & Keyboards", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Ultimate Ears Speakers", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.logitech.ueboom", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.logitech.circle", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.streamlabs.slobsrc", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.streamlabs", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.logitech.logue", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Streamlabs Desktop Application PC/MAC", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Logitech Sync", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Logitech MIXLINE", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Logi Tune PC/MAC", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "G Hub", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Logi Options+ PC/MAC", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "632344648", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1018340690", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1294578643", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1476615877", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1456293789", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.logitech.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.ultimateearsuniversity.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.mysqueezebox.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.logitechmusic.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.logitechauthorization.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.logitech-channel-marketing.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.harmonyremote.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.slimdevices.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.uesmartradio.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.myharmony.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.streamlabscharity.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.melonapp.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.oslo.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.lucra.live", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.logitech.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.wlo.link", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.mevo.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.logi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.crossclip.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.logitechg.com*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.lukwerks.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.cognitiveperformer.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.logicool.co.jp", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "partner.logitech.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.logitech.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.logitech-partner.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "maintenance.logitech.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.jaybirdsport.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "buy.logitech.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "outage.logitech.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "outagehistory.logitech.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "external.logitech.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "logilife.logitech.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "logitech.zendesk.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.logi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "feedback.logitech.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.logitechstore.com.br", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "jira.logitech.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "logitechgchallenge.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.logitechclub.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "select.logitech.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.logitech.com/blog", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "alert.logitech.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Scope Questions: Items not explicitly listed here", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Other Logitech Hardware/IoT", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": false }, { "name": "Harmony Remotes", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": false }, { "name": "Other Logitech Desktop and Mobile Application", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Harmony Remote Software", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "Logitech Options PC/MAC", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "*.saitekforum.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.saitek-fr.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.saitek.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.wilife.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "Squeezebox Products", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": false }, { "name": "Logitech Alert Cameras", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": false }, { "name": "Logitech Capture", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-b101a671cf81bf03", "name": "Lyst", "platform": "HackerOne", "program_url": "https://hackerone.com/lyst?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:31Z", "scope_source_urls": [ "https://hackerone.com/lyst/policy_scopes" ], "in_scope": [ { "name": "*.lyst.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.lystit.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.lyst.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdna.lystit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mobileapi.lystit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.lyst.lystapp", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "597940518", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "help.lyst.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-4e9c2659476d38ce", "name": "Magic Eden", "platform": "HackerOne", "program_url": "https://hackerone.com/magic-eden?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:33Z", "scope_source_urls": [ "https://hackerone.com/magic-eden/policy_scopes" ], "in_scope": [ { "name": "dicey.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.dicey.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "magiceden.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "blog.magiceden.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "eng.magiceden.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "eng.magiceden.dev", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://ord-mirror.magiceden.dev", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mainframe.magiceden.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "img-cdn.magiceden.dev", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "cdn.magiceden.dev", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://auth.magiceden.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "staging.dicey.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "help.dicey.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "docs.magiceden.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.magiceden.io", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.magiceden.dev", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.magiceden.workers.dev", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-751224ddab8e7db1", "name": "Malwarebytes", "platform": "HackerOne", "program_url": "https://hackerone.com/malwarebytes?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:34Z", "scope_source_urls": [ "https://hackerone.com/malwarebytes/policy_scopes" ], "in_scope": [ { "name": "*.mwbsys.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mb-cosmos.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mbamupdates.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.cloud.malwarebytes.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.malwarebytes.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mwb-threatintel.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.threatdown.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.cyrus-security.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.malwarebytes.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "my.malwarebytes.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cloud.malwarebytes.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "oneview.threatdown.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://oneview.threatdownstage.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cloud.threatdown.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "BrowserGuard (Firefox/Chrome/Safari browser extension)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "ThreatDown Patch Management", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "ThreatDown Endpoint Detection & Response (EDR)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "ThreatDown Endpoint Protection", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "ThreatDown Device Control", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Any other Malwarebytes asset", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "ThreatDown Browser Phishing Protection", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Any other ThreatDown asset", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Malwarebytes Privacy (VPN)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "org.malwarebytes.antimalware", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Malwarebytes for Windows", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Malwarebytes for Mac", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "AdwCleaner", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Malwarebytes for Teams", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Malwarebytes Remediation for CrowdStrike", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Malwarebytes ToolSet (MBTS)", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Malwarebytes Support Tool (MBST)", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Malwarebytes Windows Firewall Control", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.malwarebytes.Malwarebytes", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "forums.malwarebytes.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "blog.malwarebytes.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.malwarebytes.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Malwarebytes Anti-Exploit", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "USB Flash Drive Control", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "estore.malwarebytes.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "store.malwarebytes.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "pages.malwarebytes.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "view.malwarebytes.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "store.threatdown.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "malwarebytes.zoom.us", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Malwarebytes Anti-Ransomware", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-168d379057d4efbd", "name": "Marriott Bug Bounty Program", "platform": "HackerOne", "program_url": "https://hackerone.com/marriott?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:36Z", "scope_source_urls": [ "https://hackerone.com/marriott/policy_scopes" ], "in_scope": [ { "name": "*gateway-apc.marriott.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.dcfgateway.marriott.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mgs.marriott.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.gateway.marriott.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.apigatewayc.marriott.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.apigwc.marriott.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.artifactory.marriott.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.sba.marriott.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "homes-and-villas.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "careers.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sso.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mgs.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "jobs.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "passwordchallenge.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gateway*.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dcfgateway*.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "marriottfranchisetransactions.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "lawmanager.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "all-inclusive.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "reservations.all-inclusive.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "marrtool.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cpp.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "editionhotels.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://gatewaydsapdev2.marriott.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://dcfgatewaytst1.marriott.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://gatewaydsaptst1.marriott.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://gatewaydsapprd.marriott.com/v2/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "moments.marriottbonvoy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "help.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "psp.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "esupplier.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://gatewaydsapprd.marriott.com/v1/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "activities.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://gatewaydsaptst2.marriott.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.ritzcarlton.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*uat.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "traveler.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "travelagents.marriott.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mipartnerprivileges.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "efast.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "eidhelp.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "apcgateway.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "auth-apc.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bpa2.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "device.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ifast.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wechat.api.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hotel-deals.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://www.shopmarriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "smetrics.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bsp.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cache.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "channel-portal.homes-and-villas.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ci-propertyconversionportal.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "contentportal.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "contentportalauth.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "join.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "joinrewards.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "oasisprod.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ocijlbex1prd.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "owa.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app-insiders.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mds.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "meetmarriottbonvoy.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "prod-mipaasiaasservices.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.travel-brilliantly.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "uber.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "university.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bilt.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gifts.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "joinmarriottbonvoy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hotel-development.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hotshoppeservices.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vacation.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "moments.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.giving.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.members.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "splunk-phantom-nlb.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "455004730", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "giftcards.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "globaldesign.marriott.com/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "vacations.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "towneplacesuites.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.travelagents.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*moxymix*.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mi.bookmarriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.ritzcarltonyachtcollection.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.phunware.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "marriottlearnourbrands.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "hotelexcellence.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "meetings-excellence.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "springhillsuites.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "marriott.tech", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.msg-gateway.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ssm-marriottms.saviyntcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "apps.ritzcarlton.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "element-hotels.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "milux.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "luxurybrands.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.github.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "llmgw.codefest2026.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "fe.emergingtech-btsales.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "latinoamerica.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "clmagtest.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "gis.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "eswebdev.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ofhub.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "gdstest.marriott.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.ritzcarlton.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Phoenix Platform", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Not-Listed Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-6b56fd7a835400a5", "name": "Matomo", "platform": "HackerOne", "program_url": "https://hackerone.com/matomo?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:38Z", "scope_source_urls": [ "https://hackerone.com/matomo/policy_scopes" ], "in_scope": [ { "name": "matomo.cloud", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/matomo-org/docker", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/matomo-org/matomo", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://plugins.matomo.org/developer/matomo-org", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://plugins.matomo.org/developer/innocraft", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/matomo-org", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/innocraft/", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/matomo-org/tracker-proxy", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/matomo-org/developer-documentation", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "org.piwik.mobile2", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "737216887", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "api.matomo.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "matomo.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "forum.matomo.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "shop.matomo.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "plugins.matomo.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-651dfd1ec9282b37", "name": "Meesho", "platform": "HackerOne", "program_url": "https://hackerone.com/meesho_bbp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:40Z", "scope_source_urls": [ "https://hackerone.com/meesho_bbp/policy_scopes" ], "in_scope": [ { "name": "www.meesho.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "admin.meeshosupply.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "supplier.meesho.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "affiliate.meesho.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.valmo.in", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "superstoreapp.meesho.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "investor.meesho.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "meesho.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.meesho.supply", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.valmo.valmo", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1457958492", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "prod.meeshoapi.com", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.meeshogcp.in", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.meeshoaiservices.ai", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.meesho.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.meeshosupply.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.valmo.in", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.meeshoapi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "grocery-supplier.meesho.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "farmiso.meeshosupply.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "atlas.valmo.in", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "affiliate-c.meesho.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "warehouse.meesho.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "agency.meesho.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "di-prd-superset.meesho.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "console.valmo.in", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "log10-web-staging.valmo.in", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "admin.meesho.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Other Asset", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Rider App", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.valmo.ops", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-0a964b6640f044fb", "name": "MercadoLibre", "platform": "HackerOne", "program_url": "https://hackerone.com/mercadolibre?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:42Z", "scope_source_urls": [ "https://hackerone.com/mercadolibre/policy_scopes" ], "in_scope": [ { "name": "*.adminml.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mercadolibre.cl", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mercadolibre.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mercadolibre.com.ar", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mercadolibre.com.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mercadolibre.com.mx", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mercadolibre.com.pe", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mercadolibre.com.uy", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mercadolivre.com.br", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mercadopago.cl", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mercadopago.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mercadopago.com.ar", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mercadopago.com.br", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mercadopago.com.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mercadopago.com.mx", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mercadopago.com.pe", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mercadopago.com.uy", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mlstatic.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.mercadopago.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.mercadolibre.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "logistica.redelcom.cl", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.mercadolibre.co.cr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.mercadolibre.com.bo", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.mercadolibre.com.do", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.mercadolibre.com.ec", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.mercadolibre.com.gt", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.mercadolibre.com.hn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.mercadolibre.com.ni", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.mercadolibre.com.pa", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.mercadolibre.com.py", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.mercadolibre.com.sv", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.mercadolivre.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.mercadopago.com.ec", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "biolibre.ar", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "biolibre.cl", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "biolibre.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "biolibre.mx", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "biolivre.com.br", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "meliplay.com.ar", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "meliplay.com.pe", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "meliplay.com.uy", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mercadoplay.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mercadoplay.com.pe", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mercadoplay.com.uy", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mercadoplay.pe", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mercadoplay.uy", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "portalinmobiliario.cl", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "portalinmobiliario.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "tucarro.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "tucarro.com.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "tumoto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "furycloud.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "furydocs.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sustentabilidadmercadolibre.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mercadopago.com.ve", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mpago.li", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mpago.la", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mercadobackoffice.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Crypto", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 3", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Wonder", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Leaked Credentials", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Point Smart", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.mercadopago.wallet", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.mercadolibre", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.mercadoenvios.driver", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.mercadoenvios.crowdsourcing", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.mercadoenvios.logistics", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.mercadolibre.android.mplay_tv", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.mercadopago.MercadoPago", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.3mosquitos.MercadoLibre", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.tucarro.com.ve", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.mercadolibre.com.ve", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "mercadolibreexperience.com.*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "mercadoenvios.com.ve", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.ipbooster.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "*.kangu.com.br", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.gokangu.cl", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.gokangu.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.gokangu.mx", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.gokangu.uy", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.kangu.tech", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "wow-int.mercadolibre.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "developersforum", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Redelcom", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-083acc05565add07", "name": "Mergify", "platform": "HackerOne", "program_url": "https://hackerone.com/mergify?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:44Z", "scope_source_urls": [ "https://hackerone.com/mergify/policy_scopes" ], "in_scope": [ { "name": "api.mergify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dashboard.mergify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "mergify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "blog.mergify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "articles.mergify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-00b4fbc2448f61ca", "name": "MetaMask", "platform": "HackerOne", "program_url": "https://hackerone.com/metamask?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:45Z", "scope_source_urls": [ "https://hackerone.com/metamask/policy_scopes" ], "in_scope": [ { "name": "metamask.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "snaps.metamask.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "signature-insights.api.cx.metamask.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wallet.web3auth.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api-wallet.web3auth.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "MetaMask Browser Extension", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "MetaMask SDK", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://metamask.github.io/phishing-warning/", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Snaps", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "mUSD Stablecoin", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "io.metamask", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "io.metamask.Metamask", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Third Party Snaps", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "https://*.metamask.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.api.cx.metamask.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.metamask.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "portfolio.metamask.io (app.metamask.io)", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://mmi-support.metamask.io/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://support.metamask.io/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "permissionless.snaps.metamask.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://user-storage.api.cx.metamask.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "developer.metamask.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dashboard.web3auth.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api-dashboard.web3auth.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "card.metamask.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "travel.metamask.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/Web3Auth/web3auth-web", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "Snaps Development Packages", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.npmjs.com/search?q=%40metamask", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Metamask Flask Extension", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://metamask.github.io/", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Core Tier Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Non-Core Tier Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Wallet Tier Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Message signing snap", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-303eb2dfd9dd9f77", "name": "Modern Treasury", "platform": "HackerOne", "program_url": "https://hackerone.com/modern_treasury?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:48Z", "scope_source_urls": [ "https://hackerone.com/modern_treasury/policy_scopes" ], "in_scope": [ { "name": "app.moderntreasury.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn.moderntreasury.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "www.moderntreasury.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "docs.moderntreasury.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "trust.moderntreasury.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://app.moderntreasury.com/tell_us_more", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "help.moderntreasury.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ph.moderntreasury.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-5a3a0c54fb45f15c", "name": "Moneybird", "platform": "HackerOne", "program_url": "https://hackerone.com/moneybird?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:52Z", "scope_source_urls": [ "https://hackerone.com/moneybird/policy_scopes" ], "in_scope": [ { "name": "moneybird.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "moneybirdstorage.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.moneybird.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.moneybird.Moneybird", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-a69ab289f68ae3eb", "name": "MongoDB", "platform": "HackerOne", "program_url": "https://hackerone.com/mongodb?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:53Z", "scope_source_urls": [ "https://hackerone.com/mongodb/policy_scopes" ], "in_scope": [ { "name": "*.mongodb.com/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "voyageai.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Enterprise Edition Products and Tools", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Evergreen", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "MongoDB Owned GitHub Repositories", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Cluster-To-Cluster sync", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Compass", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Relational Migrator", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "MongoDB Shell", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "VS Code Plugin", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "MongoDB Connectors", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "MongoDB Atlas", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "MongoDB Server", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "MongoDB IntelliJ Plugin", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "MongoDB Partner Integrations", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "MongoDB MCP Server", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "MongoDB Assistant", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Jira Projects", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Atlas Charts", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Atlas IAM", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Atlas Data Federation", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Atlas Payments/Billing", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "MongoDB Atlas Agent Engine", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "MongoDB Atlas Agent Engine CLI and First Party Libraries", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Atlas Infinite", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Drivers", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Database Tools", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "University Platform", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "MongoDB Toolchain", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "App Services/Realm", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-e423c4958e9e2df8", "name": "MoonPay ", "platform": "HackerOne", "program_url": "https://hackerone.com/moonpay?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:54Z", "scope_source_urls": [ "https://hackerone.com/moonpay/policy_scopes" ], "in_scope": [ { "name": "*.moonpaycloud.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hypermint.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.moonpay.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.iron.xyz", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.swaps.xyz", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hypermint.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "web3.moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sell.moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "buy.moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "auth.moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.paybox.sh", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.paybox.sh", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "iframe.moonx-dev.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.moonx-dev.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/moonpay", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/details?id=com.moonpay", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/app/id1635031432", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.hel.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.plexlabs.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "clicks.moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "qr.moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "page.moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "docs.moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "plexlabs.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "request-headers-no-proxy.moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "request-headers.moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "docs.hypermint.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "help.moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "storefront.hypermint.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ethpass.xyz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dev.moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "payload-marketing.moonpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/moonpay/moonpay-sign", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/moonpay/moonpay-demo-integrations", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/moonpay/devops-challenge", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-cf81d600977a6a5e", "name": "NBA Public Bug Bounty", "platform": "HackerOne", "program_url": "https://hackerone.com/nba-public?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:04Z", "scope_source_urls": [ "https://hackerone.com/nba-public/policy_scopes" ], "in_scope": [ { "name": "www.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bal.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "content-api-nextgen-prod.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "content-api-prod.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "core-api.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "id.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats-trafficcop-prod.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identity.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "teamportal.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "syndication.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn-bal.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "corp-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "manage.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "manage-teams.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nbafedsvc.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vote.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mcd.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mcdalerts.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "elm.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "lockervision.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "adb.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "br.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cares.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cl.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gamenotes.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "grae.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gleague-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gleague-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "socialimpact.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www-ng.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vth.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "teamdirectory.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bal-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bal-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bal-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mcd-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mcd-devint.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mcd-perf.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mcd-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mcd-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mcdalerts-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mcdalerts-devint.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mcdalerts-perf.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mcdalerts-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mcdalerts-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "content-api-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "content-api-nextgen-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "content-api-nextgen-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "content-api-nextgen-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "content-api-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "content-api-sandbox.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "content-api-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "core-api-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "core-api-devint.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "core-api-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "core-api-sandbox.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "core-api-uat-uc.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "core-api-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "core-api-uc.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott-devint.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott-uat-uc.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott-uc.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identity-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identity-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identity-ng.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identity-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "manage-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "manage-teams-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "manage-teams-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "manage-teams-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "manage-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nbafedsvc-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nbafedsvc-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "auth-identity.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "auth-identity-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "auth-identity-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "auth-identity-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "aces-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "aces-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "aces.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dream-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dream-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dream.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fever-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fever-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fever.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fire-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fire-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fire.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "liberty-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "liberty-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "liberty.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "lynx-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "lynx-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "lynx.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mercury-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mercury-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mercury.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mystics-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mystics-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mystics.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "portland-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "portland-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "portland.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sky-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sky-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sky.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sparks-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sparks-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sparks.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "storm-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "storm-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "storm.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sun-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sun-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sun.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "tempo-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "tempo-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "tempo.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "valkyries-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "valkyries-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "valkyries.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wings-dev.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wings-qa.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wings.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-slot6-preview-ott-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-slot6-ott-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-slot5-ott-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-slot4-ott-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-slot3-ott-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-slot2-ott-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-slot1-ott-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-qa-aws-preview.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott-uc-preview.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott-uat-uc-preview.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott-uat-preview.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott-preview.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott-qa-aws.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott-qa-preview.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott-aws-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott-aws-uat-uw2.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott-aws-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott-dev-aws.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cweb-ott-dev-preview.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "core-api-aws-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "core-api-aws-prod-east1.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "core-api-aws-prod.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "core-api-aws-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "core-api-aws-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "auth-identity-dev-ping.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "auth-identity-ping.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "auth-identity-qa-ping.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "auth-identity-uat-ping.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identity-ping.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identity-server-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identity-server-ping-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identity-server-ping-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identity-server-ping-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identity-server-ping.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identity-server-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identity-server-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identity-server.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "login-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "login-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "login-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "login.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats-trafficcop-aws-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats-trafficcop-aws-prod-east1.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats-trafficcop-aws-prod.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats-trafficcop-aws-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats-trafficcop-aws-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats-trafficcop-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats-trafficcop-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats-trafficcop-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "aces-qa2.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dream-qa2.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fever-qa2.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "liberty-qa2.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wings-qa2.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sun-qa2.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "storm-qa2.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sparks-qa2.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sky-qa2.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mystics-qa2.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mercury-qa2.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "lynx-qa2.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "aguacaliente-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "aguacaliente-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "aguacaliente.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "austin-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "austin-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "austin.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bakersfield-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bakersfield.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "birmingham-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "birmingham-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "birmingham.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bluecoats-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bluecoats.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "canton-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "canton-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "canton.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "capitalcity-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "capitalcity-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "capitalcity.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "capitanes-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "capitanes-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "capitanes.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn-gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn-uat.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cleveland.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cpskyhawks-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cpskyhawks-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cpskyhawks.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "delaware-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "delaware-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "delaware.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "detroit-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "detroit-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "detroit.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dev.stats.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "erie-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "erie-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "erie.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fortwayne-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fortwayne-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fortwayne.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "grandrapids-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "grandrapids-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "grandrapids.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "greensboro-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "greensboro-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "greensboro.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ignite-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ignite-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ignite.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "iowa-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "iowa-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "iowa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "lakeland-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "southbay.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "southbay-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "southbay-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "siouxfalls.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "siouxfalls-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "siouxfalls-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "santacruz.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "santacruz-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "santacruz-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "saltlakecity.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "saltlakecity-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "saltlakecity-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ripcity.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ripcity-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ripcity-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "riograndevalley.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "riograndevalley-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "riograndevalley-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "reno.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "reno-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "raptors905.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "raptors905-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "raptors905-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ontario.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "oklahomacity.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "oklahomacity-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "oklahomacity-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "northernarizona.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "northernarizona-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "northernarizona-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "motorcity.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "memphis.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "memphis-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "memphis-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "maine.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "maine-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "maine-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "longisland.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "longisland-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "longisland-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "lakeland.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "lakeland-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stats-querytoolapi.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "qa.stats.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dev.stats.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "syndication-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "syndication-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www-prod.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www-all.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "watch-ng.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "watch.global.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "voices.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "thisiswhyweplay.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "videorulebook-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "videorulebook-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "videorulebook.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn-bal-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn-bal-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn-bal-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn-uat.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn-gleague-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn-gleague-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "allstar-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cl-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "coronavirus.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "contact.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "contact-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "contact-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "communityassist.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "coalition-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "coalition-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cares-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cares-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bealegend.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "amp-nba-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "amp-nba-stage.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "amp-nba.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ak-static-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "corp.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "courtside.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dev.courtside.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ec2-redirect-west.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ec2redirect-west.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fit.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gatoradetrainingcenter.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "globalstores-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "globalstores-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "globalstores.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gms-prev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gms.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "green.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hoopsfortroops.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "huddle.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "inclusion-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "inclusion-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "inclusion.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "indiaontrack.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "jrnbaworldchampionship-QA.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "jrnbaworldchampionship-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "jrnbaworldchampionship.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "lockervisionteam.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mediaavail.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mediaday.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "meetings.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mexicogames.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nba-ar-app.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nbabroadcastmanuals.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nbaacademy-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nbaacademy-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nbaacademy.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nbaholidaycard-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nbaholidaycard-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nbaholidaycard.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nbaintl.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nbameeting.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nycbasketball.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pdfroster-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pdfroster-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pdfroster.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "data-test.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dwhreports.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gldatacenter.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hoop.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nbatickets-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nbatickets-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nbatickets.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nbavideo.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "official-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "official-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "official.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "peopleanalyticsportal.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "playerhealthvideo.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pr-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pr-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pr.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ptiw.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sems.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stockton-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stockton-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "stockton.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "taiwan.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "teamapps.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "teaminquiry.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "teamofficelist.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "teamvideo.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "texas-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "texas-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "texas.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "townhall.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "tpp.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "trs.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vttp.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "westchester-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "westchester-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "westchester.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "windycity-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "windycity-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "windycity.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wisconsin-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wisconsin-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wisconsin.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wnbabroadcastmanuals.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cleveland-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cleveland-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "coachellavalley.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "coachellavalley-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "coachellavalley-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "laketown.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "laketown-dev.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "laketown-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "osceola.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "osceola-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sandiego.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "valley.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "valley-qa.gleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.nbaimd.gametime.nba2011", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.nbaimd.gametime.universal", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "2kleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "cms.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "stats.2kleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mindhealth.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "totalhealth.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "coalition.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "2kleague-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "2kleague-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dev.stats.2kleague.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "payment.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "evergent.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "nbafoundation-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "nbafoundation-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "nbafoundation.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "leaguepass.wnba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "smm.events.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "arcade.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "login-sandbox.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "events.bal.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ak-static.cms-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ak-static.cms-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ak-static.cms.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mediacentral.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "jr.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "games.nbaacademy.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "cms-dev.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "cms-int.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "cms-qa.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "brand.nba.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-e5c8c944bb1bb522", "name": "Neon", "platform": "HackerOne", "program_url": "https://hackerone.com/neon_bbp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:06Z", "scope_source_urls": [ "https://hackerone.com/neon_bbp/policy_scopes" ], "in_scope": [ { "name": "https://console.neon.tech/api/v2/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://console.neon.tech/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://console-stage.neon.build/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Neon-supported extensions", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-991e61b782021406", "name": "Netflix", "platform": "HackerOne", "program_url": "https://hackerone.com/netflix?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:07Z", "scope_source_urls": [ "https://hackerone.com/netflix/policy_scopes" ], "in_scope": [ { "name": "*.nflxext.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "api*.netflix.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.prod.ftl.netflix.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.prod.cloud.netflix.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.nflxvideo.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.prod.dradis.netflix.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.nflximg.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.nflxso.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.netflix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "beacon.netflix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "customerevents.netflix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "secure.netflix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "help.netflix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ichnaea.netflix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "presentationtracking.netflix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nmtracking.netflix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "meechum.netflix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Open Source - Atlas", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Corporate Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Open Source - Zuul", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Microsites", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Open Source - Spectator", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Secondary Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Content Authorization Targets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Netflix Mobile Application for Android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Netflix Mobile Application for iOS", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Affiliates or entities such as recently acquired companies", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Content authorization vulnerabilities affecting only the in-browser player", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Low impact, individually exposed Google Docs with no common root cause (see “Publicly accessible Google Document or Drive Links” in the “Corporate Targets” section)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Netflix Gaming Target", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "ir.netflix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ir.netflix.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "netflixinvestor.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Open Source - Consoleme", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Open Source - Weep", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Open Source - Dispatch", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Third party websites or systems hosted by non-Netflix entities Out of Scope", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Set-top-boxes, smart TVs, streaming sticks Out of Scope", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Assets associated with ReadyPlayerMe", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-92a8d20bbbfe3215", "name": "Netlify", "platform": "HackerOne", "program_url": "https://hackerone.com/netlify?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:08Z", "scope_source_urls": [ "https://hackerone.com/netlify/policy_scopes" ], "in_scope": [ { "name": "*.services.netlify.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.services-prod.nsvcs.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.infra-prod.nsvcs.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.ops.netlify.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.onegraph.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.netlify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.netlify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "internal.netlify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "netlify-cdp-loader.netlify.app", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "screenshot-proxy.netlify.app", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "netlify-rum.netlify.app", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "list-v2--netlify-plugins.netlify.app", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "internal-docs.netlify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "supportal.netlify.app", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.netlify.app", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.netlify.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.netlifycms.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.netlify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "webpop.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "docs.netlify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "answers.netlify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/netlify/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-32bf241b5dba2270", "name": "NetScaler Public Program", "platform": "HackerOne", "program_url": "https://hackerone.com/netscaler_public_program?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:09Z", "scope_source_urls": [ "https://hackerone.com/netscaler_public_program/policy_scopes" ], "in_scope": [ { "name": "NetScaler Gateway", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "NetScaler ADC", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "NetScaler AAA", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-5a81398eee5a9efe", "name": "Newegg", "platform": "HackerOne", "program_url": "https://hackerone.com/newegg?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:10Z", "scope_source_urls": [ "https://hackerone.com/newegg/policy_scopes" ], "in_scope": [ { "name": "http://*.newegg.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://*.newegg.ca", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://secure.newegg.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "secure.newegg.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pmtcards.newegg.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.newegg.app", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.newegg.app", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "sellerportal.newegg.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "http://*.neweggbusiness.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "jobs.newegg.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sellingpilot.newegg.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-77b0a541bfafd4b9", "name": "Nextcloud", "platform": "HackerOne", "program_url": "https://hackerone.com/nextcloud?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:11Z", "scope_source_urls": [ "https://hackerone.com/nextcloud/policy_scopes" ], "in_scope": [ { "name": "help.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "usercontent.apps.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "projects.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "lookup.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "knowledge.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "surveyserver.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "static.apps.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "apps.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "updates.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "docs.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "crm.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "scan.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "lists.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "portal.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "push-notifications.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "customerupdates.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "auth.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "logs.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "stats.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "download.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "pushfeed.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "newsletter.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/server", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/activity", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/files_accesscontrol", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/3rdparty", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/files_pdfviewer", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/files_texteditor", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/firstrunwizard", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/notifications", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/password_policy", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/user_saml", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/files_automatedtagging", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/files_retention", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/serverinfo", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/nextcloud_announcements", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/logreader", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/survey_client", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/updater", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/spreed", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/photos", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/mail", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/files_rightclick", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/privacy", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/recommendations", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/viewer", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/text", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/circles", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/data_request", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/files_antivirus", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/fulltextsearch", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/flow_notifications", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/fulltextsearch_elasticsearch", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/files_fulltextsearch", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/groupfolders", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/guests", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/sharepoint", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/socialsharing", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/suspicious_login", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/terms_of_service", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/twofactor_totp", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/user_oidc", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/workflow_script", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/calendar", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/contacts", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/richdocuments", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/end_to_end_encryption", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/deck", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/bruteforcesettings", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/related_resources", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/approval", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/files_lock", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/user_migration", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/twofactor_webauthn", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/preferred_providers", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/external", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/notify_push", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/calendar_resource_management", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/globalsiteselector", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/notes", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/roundcube/roundcubemail", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/nextcloud/files_confidential", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/nextcloud/tables", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/nextcloud/collectives", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "nextcloud/files_fulltextsearch_tesseract", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.nextcloud.client", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.nextcloud.talk2", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "it.niedermann.owncloud.notes", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "Desktop Client", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.peterandlinda.iOCNotes", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "it.twsweb.Nextcloud", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.nextcloud.Talk", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "drone.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "conf.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "cloud.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "demo.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sentry.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "try.nextcloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://nextcloud.atlassian.net/jira/dashboard", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "daita/files_fulltextsearch_tesseract", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [ "No captured in-scope row is marked bounty eligible by HackerOne." ] }, { "id": "hackerone-18bbf0c481f44e77", "name": "Nintendo", "platform": "HackerOne", "program_url": "https://hackerone.com/nintendo?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:12Z", "scope_source_urls": [ "https://hackerone.com/nintendo/policy_scopes" ], "in_scope": [ { "name": "Nintendo Switch System", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Nintendo Switch applications for which Nintendo is the publisher worldwide", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Nintendo Switch 2 applications for which Nintendo is the publisher worldwide", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Nintendo Switch 2 Security controller known as PSC or Platform Security Controller (any component) / Security controller known as TSEC (bootROM only)", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Nintendo Switch 2 Kernel / ARM® TrustZone®", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Nintendo Switch 2 System Processes allowing piracy", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Nintendo Switch 2 System Processes", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "Nintendo 3DS applications for which Nintendo is the publisher worldwide", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": false }, { "name": "Nintendo 3DS System", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-c3c832707d1b77c9", "name": "Node.js", "platform": "HackerOne", "program_url": "https://hackerone.com/nodejs?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:14Z", "scope_source_urls": [ "https://hackerone.com/nodejs/policy_scopes" ], "in_scope": [ { "name": "https://github.com/nodejs/node", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-ffe4ec7b21238db6", "name": "Notion Labs, Inc.", "platform": "HackerOne", "program_url": "https://hackerone.com/notion?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:16Z", "scope_source_urls": [ "https://hackerone.com/notion/policy_scopes" ], "in_scope": [ { "name": "mail.notion.so", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "calendar.notion.so", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Notion Frontend", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Product API", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Public API", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Notion Integrations", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Privilege Escalation", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Notion Authentication", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Github Repositories or other public artifacts owned by makenotion", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "notion.id", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Notion Desktop App", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Notion AI", "asset_type": "AI_MODEL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-e2521299c0c15290", "name": "OKG", "platform": "HackerOne", "program_url": "https://hackerone.com/okg?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:24Z", "scope_source_urls": [ "https://hackerone.com/okg/policy_scopes" ], "in_scope": [ { "name": "*.okx.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.oklink.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/okx/go-wallet-sdk", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Mac OS Executable", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Windows OS Executable", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "OKX Android APK", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "OKX iOS APP", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "OKX Wallet Chrome Extension", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "OKX Wallet Edge Add-ons", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "OKX Wallet Safari Extension", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.okg.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://web3.okx.com/onchainos", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "okx.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/okx", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "Testnet faucet / Testnet funds / Testnet", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "OKX Xlayer Faucet", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Agentic Wallet", "asset_type": "AI_MODEL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-4e08cf5dbf75df7f", "name": "Omarchy", "platform": "HackerOne", "program_url": "https://hackerone.com/omarchy?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:25Z", "scope_source_urls": [ "https://hackerone.com/omarchy/policy_scopes" ], "in_scope": [ { "name": "https://github.com/omacom/omarchy", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-4f6c580ad93e25d2", "name": "OPPO", "platform": "HackerOne", "program_url": "https://hackerone.com/oppo_bbp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:31Z", "scope_source_urls": [ "https://hackerone.com/oppo_bbp/policy_scopes" ], "in_scope": [ { "name": "com.katanlabs.worm.ioeatemall", "asset_type": "WINDOWS_APP_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "opposhop.cn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.opposhop.cn/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.opposhop.cn/m/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://cloud.oppo.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.oppo.com/my/store", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.oppo.com/id/store", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.oppo.com/th/store", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://gcsm.oppoit.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://e.oppo.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://u.oppomobile.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://drp.myoppo.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.oppo.com/in/store", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "id.oppo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "id.heytap.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://safe.heytap.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://zhongbao-ear.heytap.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://zhongbao.heytap.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.coloros.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://developers.oppomobile.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://open.oppomobile.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://c.realme.com/eg/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://c.realme.com/global/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://c.realme.com/id/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://c.realme.com/in/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://c.realme.com/ru/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://community.oppo.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://communityin.oppo.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://e-global.heytap.com/marketing/login", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.oplus.games", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.music", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.pictorial", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.coloros.pictorial", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.coloros.findmyphone", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.finshell.wallet", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.nearme.gamecenter", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.finshell.finance", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.research", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.netease.my.nearme.gamecenter", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.oplus.aimemory", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.oppo.speechassist", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.oplus.play", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.coloros.wallet", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.coloros.assistantscreen", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.wallet", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.fintech.life", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.book", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.databaseengine", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.health.quickapp", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.heymelody", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.miniapp.sports", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.ocsp.client", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.reader", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.tas", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.wearable.breeno", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.wearable.browser", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.wearable.elves", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.wearable.healthassessment", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.wearable.market", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.wearable.research", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.wearable.themestore", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.oplus.accesscard", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.oplus.melody", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.oplus.studycenter", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.qpon.merchant", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.qpon.platform", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.shopai.apps", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.katanlabs.bubblepop", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.katanlabs.matchballgame", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "ColorOS", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Low Level Properties and Test environment", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "A16k", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "A76", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "A96", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "F 21 Pro", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "FindN2", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "FindN2Flip", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "FindN3", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "FindN3Flip", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "FindX6", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "FindX6Pro", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "FindX7", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "FindX7Ultra", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "K10", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "K105G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "K9", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "K9Pro", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "K9s", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Porsche-B", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Reno105G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Reno10Pro+5G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Reno10Pro5G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Reno115G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Reno11Pro5G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Reno12", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Reno12Pro", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Reno8Pro5G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Reno9Pro+5G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Reno9Pro5G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Reno 9 5G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "realme GT7Pro", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "realme GT7", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "realme GT7T", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "realme GT6", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "realme GT6T", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "realme 15 Pro 5G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "realme 15 5G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "realme 15T", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "realme P3 Lite 5G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "realme P4 Pro 5G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "realme P4 5G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "realme P1 speed", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "NARZO 80 Lite 4G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Narzo 80 lite 5G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "NARZO 80x 5G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "NARZO 80 Pro 5G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "realme Note 70", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "realme C75 5G", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "realme C71", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.coloros.video", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.browser", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.cloud", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.health.international", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.market", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.themestore", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.xgame", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.oplus.account", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.oplus.themestore", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.oppo.market", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.oppo.quicksearchbox", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.store", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.heytap.mall", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.oppo.store", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "com.fullmetalgamedev.fruitshooting", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-4098ddf23f2ec872", "name": "Palantir Public", "platform": "HackerOne", "program_url": "https://hackerone.com/palantir_public?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:34Z", "scope_source_urls": [ "https://hackerone.com/palantir_public/policy_scopes" ], "in_scope": [ { "name": "Any public (Internet-facing) infrastructure owned and operated by Palantir.", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Any public cloud (e.g. Amazon AWS, Microsoft Azure) resource or infrastructure operated and managed by Palantir.", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "gear.palantir.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "investors.palantir.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "blog.palantir.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "go.palantir.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "explore.palantir.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "info.palantir.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "certification.palantir.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "training.palantir.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "learn.palantir.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sandbox.training.palantir.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "palantirpacusa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "palantirfedstart.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.palantir.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "store.palantir.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Any infrastructure or assets related to Silk, FancyThat, or other Palantir acquisitions.", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-2caec1b148dda141", "name": "Payoneer", "platform": "HackerOne", "program_url": "https://hackerone.com/payoneer?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:36Z", "scope_source_urls": [ "https://hackerone.com/payoneer/policy_scopes" ], "in_scope": [ { "name": "*.payoneer.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "payoneer.com.cn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://greenchannel.payoneer.com.cn/gcportal", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "myaccount-cn.payoneer.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "myaccount.payoneer.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "blog.payoneer.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.payoneer.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "affiliates.payoneer.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "tracks.payoneer.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "explore.payoneer.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "register.payoneer.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "duediligence.payoneer.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "skuad.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "brand.payoneer.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "investorday.payoneer.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-012d67a58a1e6aa1", "name": "PayPal", "platform": "HackerOne", "program_url": "https://hackerone.com/paypal?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:37Z", "scope_source_urls": [ "https://hackerone.com/paypal/policy_scopes" ], "in_scope": [ { "name": "*.xoom.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.paypal.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.braintreegateway.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.paydiant.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.venmo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "paypal.me", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "py.pl", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.braintreepayments.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.braintree-api.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.braintree.tools", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.paypalcorp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hyperwallet.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.paylution.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "paypalobjects.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sandbox.braintreegateway.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.paypal-*.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "prequal.swiftfinancial.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "partner.swiftfinancial.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "decision.swiftfinancial.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pigeon.swiftfinancial.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "scrutiny.swiftfinancial.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.swiftcapital.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.loanbuilder.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.swiftfinancial.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.swiftfinancial.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "my.swiftfinancial.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.loanbuilder.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "my.loanbuilder.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "loanbuilder.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "swiftfinancial.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "swiftcapital.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Braintree SDK", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "PayPal SDK", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.xoom.android.app", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.paypal.merchant.client", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.paypal.android.p2pmobile", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.venmo", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "351727428", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.xoom.app", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.paypal.merchant", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.yourcompany.PPClient", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "*.paypal.cn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "braintree.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.gopay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.paypal-support.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.atlassian.net", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.paypal.here", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.paypal.herehd", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.paypal.here", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-0402fac19fe5f16c", "name": "Phabricator", "platform": "HackerOne", "program_url": "https://hackerone.com/phabricator?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://hackerone.com/phabricator/policy_scopes", "http_status": 200, "result": "javascript_required", "note": "The official public policy_scopes page returned a JavaScript app shell during this review. The existing structured-scope capture had zero rows; a current asset list was not independently visible from this page." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "no_published_assets", "scope_captured_at": "2026-10-03T15:53:42Z", "scope_source_urls": [ "https://hackerone.com/phabricator/policy_scopes" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official public policy_scopes page returned a JavaScript app shell during this review. The existing structured-scope capture had zero rows; a current asset list was not independently visible from this page." ], "review_flags": [] }, { "id": "hackerone-3b233fa8dbefd0e1", "name": "Ping Identity", "platform": "HackerOne", "program_url": "https://hackerone.com/pingidentity?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:46Z", "scope_source_urls": [ "https://hackerone.com/pingidentity/policy_scopes" ], "in_scope": [ { "name": "https://ort-admin.pingone.com/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://openam-bug-bounty-stag.forgeblocks.com/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ort-authenticator.pingone.com/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ort-desktop.pingone.com/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.ort-one-pingone.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "console.ort-one-pingone.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "apps.ort-one-pingone.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "auth.ort-one-pingone.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://console.ort-one-pingone.com/?env=361b34ef-2725-4fd9-af1b-a2b189df3d05", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://console.ort-one-pingone.com/?env=7f327541-54e0-4ba4-8335-65eac2a25b5e", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "https://*.pingidentity.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://*.pingidentity.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://*.pingidentity.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://developer.pingidentity.com/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "admin.pingone.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api.pingone.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "authenticator.pingone.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "console.pingone.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "uploads.pingone.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "uploads-staging.pingone.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api-staging.pingone.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "console-staging.pingone.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "desktop.pingone.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "test-desktop.pingone.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "test-sso.connect.pingidentity.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "privilege.ort-one-pingone.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-68a2d02689a689f6", "name": "pixiv", "platform": "HackerOne", "program_url": "https://hackerone.com/pixiv?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:47Z", "scope_source_urls": [ "https://hackerone.com/pixiv/policy_scopes" ], "in_scope": [ { "name": "*.fanbox.cc", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "booth.pm", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "comic.pixiv.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sketch.pixiv.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sensei.pixiv.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "accounts.pixiv.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.pixiv.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hub.vroid.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dic.pixiv.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vroid.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "payment.pixiv.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "neoket.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "novel.pixiv.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://vroid.com/studio", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "coban.pixiv.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pastela.app", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "comic-indies.pixiv.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "premium.pixiv.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.pixiv.co.jp", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "factory.pixiv.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ads.pixiv.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-1d70fb59b821bbbf", "name": "Plaid", "platform": "HackerOne", "program_url": "https://hackerone.com/plaid?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:48Z", "scope_source_urls": [ "https://hackerone.com/plaid/policy_scopes" ], "in_scope": [ { "name": "production.plaid.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dashboard.plaid.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cdn.plaid.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "my.plaid.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "secure.plaid.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "demo.plaid.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "plaid.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/plaid/plaid-link-ios", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/plaid/plaid-link-android", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/plaid/plaid-ruby", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/plaid/react-native-plaid-link-sdk", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/plaid/react-plaid-link", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "https://my.plaid.com/data-subject-request-form", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-0ae0f0abcd9f1bf5", "name": "PlayStation", "platform": "HackerOne", "program_url": "https://hackerone.com/playstation?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:50Z", "scope_source_urls": [ "https://hackerone.com/playstation/policy_scopes" ], "in_scope": [ { "name": "*.playstation.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.sonyentertainmentnetwork.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.api.playstation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "my.playstation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "store.playstation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "social.playstation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "transact.playstation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wallets.api.playstation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "direct.playstation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.direct.playstation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ca.account.sony.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "my.account.sony.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ps5.np.playstation.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "checkout.playstation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "profile.playstation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "session-share.playstation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "compete.playstation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "web.np.playstation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.playstation.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "PlayStation 4", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "PlayStation 5", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Android Playstation App", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "iOS Playstation App", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.playstation.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-271e08de6db62deb", "name": "Playtika", "platform": "HackerOne", "program_url": "https://hackerone.com/playtika?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:51Z", "scope_source_urls": [ "https://hackerone.com/playtika/policy_scopes" ], "in_scope": [ { "name": "9nqwjwnqjj5n", "asset_type": "WINDOWS_APP_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.slotomania.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.playtika.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.bingoblitz.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.caesarsgames.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.boardkingsgame.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.houseoffun.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.playwsop.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.serious.li", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.wooga.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.redecor.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.seriously.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.monopoly-poker.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.playticorp.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "gnocchi-www.buffalo-ggn.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bestfiends.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.facebook.com/pokerheat", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.facebook.com/vegas_downtown_slots", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.facebook.com/pearls-peril", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "1474700 (Steam app id)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 1 Studios", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 2", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 3", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 1", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "air.com.playtika.slotomania", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "air.com.buffalo_studios.newflashbingo", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.playtika.caesarscasino", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.jellybtn.boardkings", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.pacificinteractive.HouseOfFun", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.playtika.wsop.gp", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.Seriously.BestFiends", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.jellybtn.cashkingmobile", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "net.supertreat.solitaire", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "net.wooga.junes_journey_hidden_object_mystery_game", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "air.com.playtika.cvs", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.bigblueparrot.pokerfriends", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "fi.reworks.redecor", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.Seriously.Phoenix", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "lol.onevone", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "net.wooga.switchcraft.googleplay", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "net.wooga.tropicats_tropical_cats_puzzle_paradise", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.wooga.pearlsperil", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.youdagames.monopolypoker", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "447553564", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "529996768", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "603097018", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1116488672", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "586634331", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "719525810", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "868013618", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "654671575", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1223338261", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1200391796", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "975035622", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "480523695", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1413287364", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1438744533", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1508620125", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "645949180", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1510325826", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1215220850", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "594802437", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1448884851", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.governorofpoker.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.gop3.nl", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-cb354b491a6a1e62", "name": "Polygon Technology", "platform": "HackerOne", "program_url": "https://hackerone.com/polygon-technology?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:52Z", "scope_source_urls": [ "https://hackerone.com/polygon-technology/policy_scopes" ], "in_scope": [ { "name": "staking-api.polygon.technology", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "faucet.polygon.technology", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "portal.polygon.technology", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "staking.polygon.technology", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api-gateway.polygon.technology", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true }, { "name": "faucet-api.polygon.technology/", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true }, { "name": "gasstation.polygon.technology/", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true }, { "name": "api-polygon-tokens.polygon.technology/", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.matic.network", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/maticnetwork/heimdall", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/maticnetwork/bor", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/maticnetwork/contracts", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/maticnetwork/matic-cli", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/0xPolygon/heimdall-v2", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-da664b317804fd8c", "name": "PornBox", "platform": "HackerOne", "program_url": "https://hackerone.com/pornbox?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:53Z", "scope_source_urls": [ "https://hackerone.com/pornbox/policy_scopes" ], "in_scope": [ { "name": "www.pornbox.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.analvids.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.ddfcontent.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.pornworld.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-dbd66347ba0eb606", "name": "PortSwigger Web Security", "platform": "HackerOne", "program_url": "https://hackerone.com/portswigger?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:54Z", "scope_source_urls": [ "https://hackerone.com/portswigger/policy_scopes" ], "in_scope": [ { "name": "portswigger.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ai.portswigger.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "collections.portswigger.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "share.portswigger.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "links.portswigger.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "id.portswigger.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http1mustdie.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Burp Suite DAST", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Burp Collaborator", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Burp Suite Pro/Community", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.portswigger.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.web-security-academy.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "Burp Suite Extension (BApps)", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-56f0e651cd324f30", "name": "Priceline", "platform": "HackerOne", "program_url": "https://hackerone.com/priceline?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:55Z", "scope_source_urls": [ "https://hackerone.com/priceline/policy_scopes" ], "in_scope": [ { "name": "www.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cruises.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.getaroom.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "flyiin.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ir.bookingholdings.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bookingholdings-coe.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.priceline.com/pwd/v0/pcln-graphql/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "press.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.bookingholdings.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.priceline.android.negotiator", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "336381998", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Penny", "asset_type": "AI_MODEL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "secure.rezserver.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "reservations.rezserver.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.airportrentalcars.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api.rezserver.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "admin.rezserver.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "availability.getaroom.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "extranet.getaroom.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "breadcrumb.getaroom.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "supply.getaroom.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "stockroom.production.getaroom.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.roomvaluesteam.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.testaroom.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.testaroom.cloud", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "groupdeals.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "careers.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "weatherstatus.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "img1.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "url5932.travel.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "tools.corp.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "tools-qaa.corp.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "remotecontrol.corp.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "qaa.booking.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "offers.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mail.corp.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "localdealsemail.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "links.deals.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "jira.corp.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "itsupport.corp.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ids-too.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ids-dev.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "help.corp.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "guse4-rc-qa.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "google.corp.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "experiences.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "employeedeals.flightdeals.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dev.sales-ccp.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dev.customerservice-ccp.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dashboard.corp.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "customerservice-ccp.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "booking.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api-guse4-poc.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api-gnae1-poc.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ace-qa.corp.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "1psb.priceline.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.priceline.com/vp-web/*", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-c07ca7b89de0ad7b", "name": "Privy (Bounty)", "platform": "HackerOne", "program_url": "https://hackerone.com/privy-bbp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:53:57Z", "scope_source_urls": [ "https://hackerone.com/privy-bbp/policy_scopes" ], "in_scope": [ { "name": "auth.privy.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dashboard.privy.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "home.privy.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "recovery.privy.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.privy.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.npmjs.com/package/@privy-io/react-auth", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.npmjs.com/package/@privy-io/js-sdk-core", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.npmjs.com/package/@privy-io/expo", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.npmjs.com/package/@privy-io/wagmi", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.npmjs.com/package/@privy-io/cross-app-connect", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.npmjs.com/package/@privy-io/cross-app-provider", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "@privy-io controlled namespace dependencies", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "privy.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "blog.privy.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "demo.privy.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "docs.privy.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-705a38fece1de806", "name": "Quora", "platform": "HackerOne", "program_url": "https://hackerone.com/quora?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:03Z", "scope_source_urls": [ "https://hackerone.com/quora/policy_scopes" ], "in_scope": [ { "name": "*.quora.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://poe.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.quora.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.quora.app.mobile", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-dfad3106c71f5614", "name": "Razorpay", "platform": "HackerOne", "program_url": "https://hackerone.com/razorpay?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:05Z", "scope_source_urls": [ "https://hackerone.com/razorpay/policy_scopes" ], "in_scope": [ { "name": "dashboard.razorpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.razorpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "checkout.razorpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "invoices.razorpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "payroll.razorpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "x.razorpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-b8aa4d7b6a909e14", "name": "Reddit", "platform": "HackerOne", "program_url": "https://hackerone.com/reddit?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:06Z", "scope_source_urls": [ "https://hackerone.com/reddit/policy_scopes" ], "in_scope": [ { "name": "*.snooguts.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.reddit.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.redditmedia.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.redditinc.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.redditblog.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.reddithelp.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.spiketrap.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "new.reddit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.reddit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mod.reddit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ads.reddit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gql.reddit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "accounts.reddit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gateway.reddit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "strapi.reddit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "m.reddit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "amp.reddit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sh.reddit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "matrix.redditspace.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developers.reddit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "business.reddithelp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "meta-api.reddit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "redditforbusiness.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Core Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Non-Core Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Android App", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "iOS App", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "reddit.secure.force.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "memorable.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-10502c04383ede18", "name": "Redox", "platform": "HackerOne", "program_url": "https://hackerone.com/redox_bbp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:08Z", "scope_source_urls": [ "https://hackerone.com/redox_bbp/policy_scopes" ], "in_scope": [ { "name": "test*.redoxengine.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "10x.redoxengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "testapp.redoxengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "testapi.redoxengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "docs.redoxengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fhir.redoxengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "explore.redoxengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.redoxengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "help.redoxengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "dashboard.redoxengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "candi.redoxengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api.redoxengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sso.redoxengine.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "redox.slack.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://redoxengine.atlassian.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-c216c38fbaf801c2", "name": "REI BBP", "platform": "HackerOne", "program_url": "https://hackerone.com/rei_bbp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:10Z", "scope_source_urls": [ "https://hackerone.com/rei_bbp/policy_scopes" ], "in_scope": [ { "name": "rei.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "login.rei.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://www.rei.com/learn/expert-advice", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://collaboration.rei.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Any public cloud resource or infrastructure operated and managed by REI.", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Android & iOS App for REI Customers", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.rentals.rei.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://rei.com/used", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://rei.com/blog", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://rei.com/rentals", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://rei.com/rei-garage", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "rei.jobs", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "reifund.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "destinations.rei.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "partners2.rei.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "greenvestrentals.rei.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "reicasting.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "engineering.rei.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "test-login.rei.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "wpvip.rei.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "vpn.rei.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "desktop.rei.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "foryourbenefit-rei.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "rei.gladly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://rei.com/lists", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-298c0611acddd5ba", "name": "Remitly", "platform": "HackerOne", "program_url": "https://hackerone.com/remitly?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:12Z", "scope_source_urls": [ "https://hackerone.com/remitly/policy_scopes" ], "in_scope": [ { "name": "*.int.remitly.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.dev.remitly.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "blog.remitly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.remitly.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cards.remitly.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "rewire.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.rewire.to", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cardpayments.remitly.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "access.remitly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "auth.remitly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "login.remitly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "media.remitly.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "partner-webhook.remitly.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ablink.info.remitly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ir.remitly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "news.remitly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "access-sandbox.remitly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "rates.rewire.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app3.rewire.to", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "careers.remitly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "metrics.int.remitly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "site.rewire.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "beamitmobile.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "getorigen.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "getsurenow.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "insuritly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "origenapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "origenbanking.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "origencard.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "origendebit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "origenfinance.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remilty.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remilty.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitir.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitiy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly-3pjs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly-vendor.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.cash", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.co.uk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.com.au", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.com.mx", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.de", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.es", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.eu", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.fr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.jp", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.me", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.mx", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.uk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitly.xyz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitlyapi.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitlycard.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitlycredit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitlydata.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitlyit.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitlypay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitlypayments.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitlytest.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitlywallet.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "remitresearch.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "travelcash.money", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "whyisend.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.remitly.androidapp", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "674258465", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "funding-webhooks.remitly.io", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true }, { "name": "hub-api-sandbox.remitly.io", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "https://www.remitly.com/blog", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-cfd05f8a66f49fb6", "name": "Ring", "platform": "HackerOne", "program_url": "https://hackerone.com/ring?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:16Z", "scope_source_urls": [ "https://hackerone.com/ring/policy_scopes" ], "in_scope": [ { "name": "https://*.immedia-semi.com/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://*.blinkforhome.com/*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "prd-ring-web-us.prd.rings.solutions", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "publicsafety.ring.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ring.com/*", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://api.ring.com/*", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://fw.ring.com/*", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://app.ring.com/*", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://admin.ring.com/*", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://nw.ring.com/*", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://oauth.ring.com/*", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://billing.ring.com/*", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Video Doorbell", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Peephole Cam", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Indoor Cam", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stickup Cam", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Chime", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Ring Alarm", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Ring Smart Lighting Bridge", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Blink Outdoor", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Blink Indoor", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Blink Sync Module 2", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Blink Mini", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Blink Video Doorbell", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.immediasemi.android.blink", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.ring.neighborhoods", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.ringapp", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1013961111", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1218902777", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "926252661", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "Devices", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Services, Apps, Mobile", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Anything not in scope", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-095c6b08f13df04b", "name": "Ripio", "platform": "HackerOne", "program_url": "https://hackerone.com/ripio?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:17Z", "scope_source_urls": [ "https://hackerone.com/ripio/policy_scopes" ], "in_scope": [ { "name": "*ripiotrade.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "trade.ripio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://app.ripio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://kyc.ripio.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://auth.ripio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "defi.ripio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sandbox-b2b.ripio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://bridge.ripio.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://etherscan.io/address/0x0DC4F92879B7670e5f4e4e6e3c801D229129D90D", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://etherscan.io/address/0x337E7456B420bD3481e7FA61fA9850343d610d34", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://etherscan.io/address/0xD76f5Faf6888e24D9F04Bf92a0c8B921FE4390e0", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://etherscan.io/address/0x8a1D45e102e886510e891d2Ec656a708991e2D76", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://etherscan.io/address/0x61D450a098b6a7f69fC4b98CE68198fe59768651", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://etherscan.io/address/0x4F34c8b3b5FB6D98Da888F0feA543d4d9C9F2eBE", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://etherscan.io/address/0xdcC340132740AD57E9Fc90C9BD08B00dBbc87986", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://etherscan.io/address/0x465e642387d3d73a57CDc1368fFA53A800bA5D47", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://etherscan.io/address/0x46167cB034feC6ceC46CaeD4f61281f5Aa0Eb0e6", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://etherscan.io/address/0xD168CFbBE260D48cd119497a9a2eE8482080C5E7", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://basescan.org/address/0xf469eC9dEBf7F0adEBA4d1Db2FF5c70707bEeB30", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://worldscan.org/address/0xDe7Ec97CFDeE9F20f9d256F4a0A0d694479fa2E0", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "Web3 - Smart Contracts Scope", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.ripio.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.ripio.ios", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "*ripio.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-3f6fca7559bb3b76", "name": "Robinhood Markets Bounty", "platform": "HackerOne", "program_url": "https://hackerone.com/robinhood?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:21Z", "scope_source_urls": [ "https://hackerone.com/robinhood/policy_scopes" ], "in_scope": [ { "name": "https://*.saytechnologies.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cashier.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "minerva.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "nummus.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identi.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.bitstamp.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.rhinternal.net", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.robinhood.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.robinhood.net", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier 3", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.say.rocks", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.saytechnologies.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.robinhood.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.robinhood.gateway", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.robinhood.money", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "net.bitstamp.app", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.robinhood.global Android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1634080733", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "6462308655", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "938003185", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Id1406825640", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "fusion.tradepmr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.tradepmr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "insight2.tradepmr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "auth-sandbox.tradepmr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "7671800.bitstamp.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "7671800.team.bitstamp.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "_16928ca3f53f40a48a751be40fa24e4c.bitstamp.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "_domainconnect.bitstamp.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "autodiscover.bitstamp.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "bounces.bitstamp.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "em1198.bitstamp.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "em4296.team.bitstamp.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "em9457.team.bitstamp.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "enterpriseenrollment.bitstamp.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "enterpriseregistration.bitstamp.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "status.bitstamp.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "url6884.team.bitstamp.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.saytechnologies.com/contact/sales", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "shop.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "fleet.infra.robinhood.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "content.research.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "events.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "affiliates.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "vgs-api.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "share.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "esg.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "startinvesting.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "go.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "underthehoodpod.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "press.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "roadshow.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "weareallinvestors.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "careers.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "earlytalent.robinhood.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api-sandbox.tradepmr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "fusion-demo.tradepmr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "fusion-demo.uat.tradepmr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "fusion-demo.uat2.tradepmr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "fusion.uat.tradepmr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "fusion.uat2.tradepmr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "fusion.uat3.tradepmr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "auth-validation.tradepmr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api-validation.tradepmr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "auth.tradepmr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "api.tradepmr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "sandbox.bitstamp.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-d5ff17df9da45ead", "name": "Roblox", "platform": "HackerOne", "program_url": "https://hackerone.com/roblox?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:22Z", "scope_source_urls": [ "https://hackerone.com/roblox/policy_scopes" ], "in_scope": [ { "name": "*.roblox.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.rbx.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.ra.roblox.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "blox.link", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Roblox Client", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Roblox Studio", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Roblox Engine", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.guilded.gg", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-339885df6b37d30f", "name": "Rockstar Games", "platform": "HackerOne", "program_url": "https://hackerone.com/rockstargames?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:23Z", "scope_source_urls": [ "https://hackerone.com/rockstargames/policy_scopes" ], "in_scope": [ { "name": "socialclub.rockstargames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "prod.ros.rockstargames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "support.rockstargames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.rockstargames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "store.rockstargames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.rockstargames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "rockstarnorth.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "circolocorecords.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Rockstar Games Launcher", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "faspex.rockstargames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "emailcontent.rockstargames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "bomgar.rockstargames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "lifeinvader.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "any-invalid-domains.rockstargames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "anomotion.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-a461a6e306e2ee1d", "name": "Ruby", "platform": "HackerOne", "program_url": "https://hackerone.com/ruby?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:24Z", "scope_source_urls": [ "https://hackerone.com/ruby/policy_scopes" ], "in_scope": [ { "name": "https://github.com/ruby/ruby", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "*.ruby-lang.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [ "No captured in-scope row is marked bounty eligible by HackerOne." ] }, { "id": "hackerone-45d61b1c047c9691", "name": "S-Pankki", "platform": "HackerOne", "program_url": "https://hackerone.com/s-pankki?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:27Z", "scope_source_urls": [ "https://hackerone.com/s-pankki/policy_scopes" ], "in_scope": [ { "name": "online.s-pankki.fi", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.s-pankki.fi", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://crosskey.io/stores/s-pankki/apis", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mobile.s-pankki.fi", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "extranet.s-pankki.fi", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "digili.s-cloud.fi", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fi.spankki", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "740514933", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-48ed906fb7a2881a", "name": "Scopely", "platform": "HackerOne", "program_url": "https://hackerone.com/scopely?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:28Z", "scope_source_urls": [ "https://hackerone.com/scopely/policy_scopes" ], "in_scope": [ { "name": "*.scopely.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.scopely.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.withbuddies.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "Games Tier 1", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Games Tier 2", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Games Tier 3", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.foxnextgames.m3", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.scopely.monopolygo", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.scopely.startrek", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.foxnextgames.m3", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "id1427744264", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "id1621328561", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.pieyel.scrabble", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.withbuddies.dice.free", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.scopely.yux", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.kitkagames.fallbuddies", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.gsn.android.casino", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.gsn.grandcasino", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "air.com.bitrhymes.bingo", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.gsn.android.tripeaks", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.pieyel.scrabble", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.withbuddies.dice.free", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.scopely.yux", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "id1541153375", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "confluence.scopely.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "jira.scopely.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "scopely.okta.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "bamboo.scopely.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-b883a2de21ea0333", "name": "Semrush", "platform": "HackerOne", "program_url": "https://hackerone.com/semrush?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:29Z", "scope_source_urls": [ "https://hackerone.com/semrush/policy_scopes" ], "in_scope": [ { "name": "*.semrush.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.semrush.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.seoquake.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.seoab.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.scatec.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.myinsights.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.sellzone.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.semrush.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Other Semrush Related Asset", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Leaked/Сompromised Employee accounts", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.prowly.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.berush.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "workflows.semrush.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "investors.semrush.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "advocates.semrush.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "email.semrush.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-14f59f804cd5df6d", "name": "Sheer", "platform": "HackerOne", "program_url": "https://hackerone.com/sheer_bbp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:32Z", "scope_source_urls": [ "https://hackerone.com/sheer_bbp/policy_scopes" ], "in_scope": [ { "name": "www.sheer.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "my.sheer.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-0cee8a293a0871cc", "name": "SHEIN", "platform": "HackerOne", "program_url": "https://hackerone.com/shein?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:33Z", "scope_source_urls": [ "https://hackerone.com/shein/policy_scopes" ], "in_scope": [ { "name": "*.shein.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.romwe.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.sheingsp.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.zzkko", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.romwe", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "878577184", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1080248000", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-3debf79c9e794a10", "name": "Shopify", "platform": "HackerOne", "program_url": "https://hackerone.com/shopify?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:34Z", "scope_source_urls": [ "https://hackerone.com/shopify/policy_scopes" ], "in_scope": [ { "name": "*.shopifycs.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.pci.shopifyinc.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.shopify.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.shopify.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.shopifykloud.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.shopifycloud.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "your-store.myshopify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "partners.shopify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "accounts.shopify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "shop.app", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "shopify.plus", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "arrive-server.shopifycloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "admin.shopify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "linkpop.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "shopifyinbox.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/Shopify/*", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Shopify Mobile Applications", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Authentication & ATO", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Shopify Developed Apps", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Shopify Third Party Apps", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Shopify Third Party Store", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "*.email.shopify.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "cdn.shopify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "livechat.shopify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.shopify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.shopify.dev", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "investors.shopify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "academy.shopify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Other", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "supplier-portal.shopifycloud.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-3a67b253f8de14ec", "name": "SIX Group", "platform": "HackerOne", "program_url": "https://hackerone.com/six-group?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:38Z", "scope_source_urls": [ "https://hackerone.com/six-group/policy_scopes" ], "in_scope": [ { "name": "www.six-group.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.bolsasymercados.es", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.sdx.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://secure-test.six-swiss-exchange.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://disclosure-test.six-exchange-regulation.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://ibt-test.six-group.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://fx-qa.np.bolsasymercados.es/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://web3.sdx.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/details?id=com.sixgroup.debixplus", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/details?id=com.sixgroup.id&hl=en_US&pli=1", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/details?id=es.grupobme.bmeconecta", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "153.46.96.0/20", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "193.110.154.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "193.109.229.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "153.46.240.0/20", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "153.46.108.0/22", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "62.192.20.16/29", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "153.46.111.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "153.46.104.0/22", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.8.0/22", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "194.209.121.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "153.46.30.0/23", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "153.46.32.0/23", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "153.46.34.0/23", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "174.44.253.152/29", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "153.46.0.0/16", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.2.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.3.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.4.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "185.210.32.0/22", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "153.46.162.0/23", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "212.95.227.64/26", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.1.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.8.0/21", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "153.46.176.0/22", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "153.46.48.0/22", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.64.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.65.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.66.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.68.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.67.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.140.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.141.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.142.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.143.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.148.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.149.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.150.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.151.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "146.109.161.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "193.5.66.0/23", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "193.8.251.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "194.35.79.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/ch/app/debix/id1581440132?l=en-GB", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/mx/app/debix/id1581440132", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/mx/app/six-id/id1620496931", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/us/app/bme-conecta/id6443938949", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.sixidmobile.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.six-structured-products.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://providerhub.six-group.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://ibt.six-group.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://bmefx.es/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "saferpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "193.109.229.71", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://disclosure.six-exchange-regulation.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "153.46.254.150", "asset_type": "IP_ADDRESS", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://play.google.com/store/search?q=Schweizer+Finanzmuseum&c=apps", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "213.41.106.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": false }, { "name": "194.98.112.0/24", "asset_type": "CIDR", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://apps.apple.com/mx/app/schweizer-finanzmuseum/id1225222871", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-f2861720b960bfb6", "name": "Slack", "platform": "HackerOne", "program_url": "https://hackerone.com/slack?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:39Z", "scope_source_urls": [ "https://hackerone.com/slack/policy_scopes" ], "in_scope": [ { "name": "slack.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.slack.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "slackb.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.slack.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "edgeapi.slack.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "slackatwork.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "slack-redir.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "slack-imgs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "spaces.pm", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.quip.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.quip.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "slack-status.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/slackhq/nebula", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Slack Desktop Application", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.Slack", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://salesforce.quip.com/blog/desktop", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.tinyspeck.chatlyio", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.slack.slackmdm", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/us/app/quip-docs-chat-sheets/id647922896", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "status.slack.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.glitchthegame.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "slackhq.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "3rd Party Quip Apps", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.Slack.intune", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.slack.slackintune", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-b6225b1e97d9cb91", "name": "SMTP2GO BBP", "platform": "HackerOne", "program_url": "https://hackerone.com/smtp2go?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:40Z", "scope_source_urls": [ "https://hackerone.com/smtp2go/policy_scopes" ], "in_scope": [ { "name": "smtp2go.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.smtp2go.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.smtp2go.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "support.smtp2go.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-47c0ed72a80250fc", "name": "Snapchat", "platform": "HackerOne", "program_url": "https://hackerone.com/snapchat?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:42Z", "scope_source_urls": [ "https://hackerone.com/snapchat/policy_scopes" ], "in_scope": [ { "name": "accounts.snapchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.snapchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.sc-core.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "business.snapchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "store.snapchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "web.snapchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "kit.snapchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "snappublisher.snapchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "geofilters.snapchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ads.snapchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "create.snapchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "my.snapchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "businesshelp.snapchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.bitmoji.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.bitstrips.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "blog.playcanvas.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "code.playcanvas.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developer.playcanvas.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "forum.playcanvas.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "launch.playcanvas.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "login.playcanvas.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "msg.playcanvas.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "playcanvas.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "relay.playcanvas.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "rt.playcanvas.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "store.playcanvas.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "playcanv.as", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "scan.snapchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "spectacles.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "map.snapchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "story.snapchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://lensstudio.snapchat.com/api/", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.sc-corp.net", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier A - Core Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tier B - Non Core (Bitmoji, Playcanvas)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.snapchat.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.bitstrips.imoji", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Lens Studio", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.toyopagroup.picaboo", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.bitstrips.imoji", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "http://dev*.playcanvas.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "returns.spectacles.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.snapchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dev.playcanv.as", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Spectacles charging case", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": false }, { "name": "Spectacles", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-76fc9eabadee5bb8", "name": "Sorare", "platform": "HackerOne", "program_url": "https://hackerone.com/sorare?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:45Z", "scope_source_urls": [ "https://hackerone.com/sorare/policy_scopes" ], "in_scope": [ { "name": "sorare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.sorare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ws.sorare.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-0bad3e7ce61c64ab", "name": "Spotify", "platform": "HackerOne", "program_url": "https://hackerone.com/spotify?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:46Z", "scope_source_urls": [ "https://hackerone.com/spotify/policy_scopes" ], "in_scope": [ { "name": "*.spotify.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.spotify.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.withspotify.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.byspotify.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.atspotify.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.avecspotify.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.enspotify.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.forspotify.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.fromspotify.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.tospotify.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "assets.spotify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.spotify.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.whosampled.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "backstage.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Spotify SDKs", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "iOS SDK", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Android SDK", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Web Playback SDK", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Core Backstage source code", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/backstage/backstage", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Other Spotify websites", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Anchor", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Megaphone", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Podsights", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Sonantic", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Core Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Non-Core Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "GHE", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Jira", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Okta", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "VPN", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Wrapped", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "DRM (Digital Rights Management) System", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.spotify.tv.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.spotify.s4a", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.spotify.music", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.spotify.kids", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "fm.anchor.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Spotify desktop application (Windows and Mac)", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Save to Spotify CLI", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.spotify.client", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.spotify.s4a", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.spotify.kids", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.anchorfminc.Anchor", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "api-partner.spotify.com", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "example.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "everynoise.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Preact", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Soundtrap", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "The Ringer", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Findaway", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Confidence Domains", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.soundtrap.studioapp", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.soundtrap.studioapp", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-7fd23ee449e142e0", "name": "Starbucks", "platform": "HackerOne", "program_url": "https://hackerone.com/starbucks?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:48Z", "scope_source_urls": [ "https://hackerone.com/starbucks/policy_scopes" ], "in_scope": [ { "name": "www.starbucksreserve.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.starbucks.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.starbucks.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.starbucks.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "openapi.starbucks.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "secureui.starbucks.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Subdomain Takeover (SDTO)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.starbucks.mobilecard", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.starbucks.mystarbucks", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Other assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "apply.starbucks.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "careers.starbucks.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "lsstar.starbucks.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "athome.starbucks.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "istarbucks.co.kr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Teavana", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-977a9a3eb5cf6e47", "name": "Starbucks China", "platform": "HackerOne", "program_url": "https://hackerone.com/starbucks_china?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:49Z", "scope_source_urls": [ "https://hackerone.com/starbucks_china/policy_scopes" ], "in_scope": [ { "name": "www.starbucks.com.cn/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Starbucks China Android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Starbucks China iOS", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "Teavana", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-15d8280983f43334", "name": "Starbucks Japan", "platform": "HackerOne", "program_url": "https://hackerone.com/starbucks_japan?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:50Z", "scope_source_urls": [ "https://hackerone.com/starbucks_japan/policy_scopes" ], "in_scope": [ { "name": "www.starbucks.co.jp", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.cart.starbucks.co.jp/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cart.starbucks.co.jp", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gift.starbucks.co.jp", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "login.starbucks.co.jp", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Starbucks Japan Android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Starbucks Japan iOS", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-31cfb48f4f24b986", "name": "Stripchat", "platform": "HackerOne", "program_url": "https://hackerone.com/stripchat?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:53Z", "scope_source_urls": [ "https://hackerone.com/stripchat/policy_scopes" ], "in_scope": [ { "name": "*.stripchat.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "go.stripchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "https://stripchat.com/page*", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "mta*.stripchat.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "pxl.stripchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.stripchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://stripchat.com/wiki", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "wiki.stripchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ext.stripchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "extensions.stripchat.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "websocket-apps.sc-apps.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-511dcd018ac31f8b", "name": "Stripe", "platform": "HackerOne", "program_url": "https://hackerone.com/stripe?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:54Z", "scope_source_urls": [ "https://hackerone.com/stripe/policy_scopes" ], "in_scope": [ { "name": "*.lemonsqueezy.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.bridge.xyz", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.metronome.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.stripe.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.stripe.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "js.stripe.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.taxjar.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.taxjar.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.recko.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.reckoproduction.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.reckostaging.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.link.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mcp.stripe.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Payments", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Checkout", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Connect", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Terminal", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Billing", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Elements", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Dashboard", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Issuing", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Radar", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Sigma", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Atlas", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe SDKs", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Open Source", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Apps", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Payment Links", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Invoicing", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Financial Connections", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Revenue Recognition", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Identity", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Climate", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Data Pipeline", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Tax", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Capital", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Treasury", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe for Visual Studio Code", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tap to Pay (Android)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Tap to Pay (iOS)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Sandboxes", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Organizations", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Smokescreen Open Source Project", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Munkisrv Open Source Project", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe CLI", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe Projects", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Stripe fiat-to-crypto onramp", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Global Payouts", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Customer Portal", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.stripe.android.dashboard", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "978516833", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.stripe.partners", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "*.getbouncer.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Stripe Third Party Apps and Integrations", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Onboarding Verification Link Crawling", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-2508ae1b5e96cf3e", "name": "Superbet", "platform": "HackerOne", "program_url": "https://hackerone.com/superbet?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:57Z", "scope_source_urls": [ "https://hackerone.com/superbet/policy_scopes" ], "in_scope": [ { "name": "*.superbet.ro", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.superbet.rs", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.superbet.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.spinaway.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.luckydays.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.luckydays.ca", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.napoleoncasino.be", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.napoleondice.be", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.napoleongames.be", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.napoleonsports.be", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.superbet.pl", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.happening.dev", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.superbet.gr", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.super.xyz", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "superbet.bet.br", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://napoleoncasino.be/en-be/game/hogamba-crash?demo=false", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://superbet.ro", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://superbet.pl", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://napoleoncasino.be", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://napoleonsports.be", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://napoleondice.be", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://napoleongames.be", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://superbet.rs", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://super.xyz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "WGP Slot Games", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://napoleoncasino.be/nl-be/game/plinko-napoleon?demo=false", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "ro.superbet.sport", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "ro.superbet.games", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.epic.superbet.ro", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://legacy-web.superbet.ro/session/login", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "affiliates.superbet.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "affiliates.superbet.rs", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "affiliate.napoleongames.be", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://retail.prod.incubator.superbet.ro/ssbt-api/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://surveys.superbet.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "lp.superbet.pl", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "lp.superbet.ro", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "lp.superbet.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "lp.superbet.rs", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "lp.superbet.bet.br", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "test.epic.superbet.ro", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "test-gw.epic.superbet.ro", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://abc.superbet.rs", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://afiliados.superbet.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-b72f75de28feb0fd", "name": "Superhuman (formerly Grammarly)", "platform": "HackerOne", "program_url": "https://hackerone.com/superhuman?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:58Z", "scope_source_urls": [ "https://hackerone.com/superhuman/policy_scopes" ], "in_scope": [ { "name": "*.grammarly.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.grammarlyaws.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.grammarly.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.superhuman.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.coda.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "superhuman.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "gateway.superhuman.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "id.superhuman.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "settings.superhuman.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "codacontent.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "codahosted.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "coda.grammarly.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "coda.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mail.superhuman.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "docs.superhuman.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Grammarly Browser Extensions", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Capture the Flag", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Superhuman Go", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Superhuman Mail Desktop App", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Superhuman Mail Chrome Extension", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Coda Chrome Extension", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Superhuman Mail", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.grammarly.android.keyboard", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "io.coda.codaapp", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.superhuman.mail", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Grammarly Desktop for Windows", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Grammarly Desktop for macOS", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.grammarly.keyboard", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "io.coda", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.superhuman.mail", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "status.coda.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Third party external services", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-a9e7d05ce0502050", "name": "Syfe", "platform": "HackerOne", "program_url": "https://hackerone.com/syfe_bbp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:54:59Z", "scope_source_urls": [ "https://hackerone.com/syfe_bbp/policy_scopes" ], "in_scope": [ { "name": "uat-bugbounty.nonprod.syfe.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api-uat-bugbounty.nonprod.syfe.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.syfe.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.syfe.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "alfred.syfe.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mark8.syfe.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.syfe", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/sg/app/syfe-stay-invested/id1497156434", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-4c387951bfbc9b93", "name": "Temu", "platform": "HackerOne", "program_url": "https://hackerone.com/temu?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:03Z", "scope_source_urls": [ "https://hackerone.com/temu/policy_scopes" ], "in_scope": [ { "name": "www.temu.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "seller.temu.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ads.temu.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "partner.temu.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.einnovation.temu", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1641486558", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-1c6388c9199b6308", "name": "The Browser Company of NYC", "platform": "HackerOne", "program_url": "https://hackerone.com/bcny?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:06Z", "scope_source_urls": [ "https://hackerone.com/bcny/policy_scopes" ], "in_scope": [ { "name": "arc.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "thebrowser.company", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "bcny.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "diabrowser.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Dia Assistant", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "company.thebrowser.arc", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Arc on Mac", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Arc on Windows", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Dia on Windows", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "Dia on MacOS", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "id6472513080", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-b7411606785f28e7", "name": "TikTok", "platform": "HackerOne", "program_url": "https://hackerone.com/tiktok?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:10Z", "scope_source_urls": [ "https://hackerone.com/tiktok/policy_scopes" ], "in_scope": [ { "name": "*.pipopay.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.tiktokpublishers.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.tiktokcdn.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.soundon.global", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.tiktok.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "business.tiktok.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ads.tiktok.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "tiktok.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "careers.tiktok.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "creatormarketplace.tiktok.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.tiktokv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developers.tiktok.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "effecthouse.tiktok.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "partner.tiktokshop.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "shop.tiktok.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "live-backstage.tiktok.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "academy-outbound-ads.tiktok.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.pangleglobal.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fp-sg.tiktokv.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "affiliate-id.tokopedia.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "seller-id.tokopedia.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "shop-id.tokopedia.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pay.tokopediax.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.soundon.global", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Other Asset (Campaigns)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.zhiliaoapp.musically", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.ss.android.ugc.trill", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.ss.android.ugc.now", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.tiktok.tv", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.zhiliao.musically.livewallpaper", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.tiktokshop.seller", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "835599320", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1235601864", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "641062073", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1591003012", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*tiktokv.us", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*us.tiktokv.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://developers.tiktok.com/minis/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "p16-bg.tiktokcdn-us.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "p16-sign.tiktokcdn-us.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "p16-webcast.tiktokcdn-us.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "p19-sign.tiktokcdn-us.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "p19-webcast.tiktokcdn-us.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "usds.tiktok.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "shortdrama.tiktok.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "drama.tiktok.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "usdsjv.tiktok.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.ss.android.ttmd.video", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "6754134922", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-295545fd0cb601c5", "name": "Tinder", "platform": "HackerOne", "program_url": "https://hackerone.com/tinder?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:11Z", "scope_source_urls": [ "https://hackerone.com/tinder/policy_scopes" ], "in_scope": [ { "name": "*.tinder.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.gotinder.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.tinderops.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.tstaging.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.tstaging.tools", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.tinderwebstaging.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.tinder", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "547702041", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "go.tinder.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.help.tinder.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "gotinder.imgix.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "console.gotinder.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "AppsFlyer Subdomains", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-ee8b3018e41b8341", "name": "Tools for Humanity", "platform": "HackerOne", "program_url": "https://hackerone.com/toolsforhumanity?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:14Z", "scope_source_urls": [ "https://hackerone.com/toolsforhumanity/policy_scopes" ], "in_scope": [ { "name": "*.worldcoin.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.consumer.worldcoin.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.worldcoin-distributors.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.worldcoin.dev", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.toolsforhumanity.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "toolsforhumanity.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "worldcoin.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developer.worldcoin.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "world.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/worldcoin", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/worldcoin/orb-software", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/worldcoin/orb-firmware", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/worldcoin/orb-core", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/worldcoin/orb-messages", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/worldcoin/orb-secure-element", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/worldcoin/orb-relay-messages", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://github.com/worldcoin/orb-rustzone", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://docs.world.org/world-chain/reference/address-book", "asset_type": "SMART_CONTRACT", "location": null, "group": null, "bounty_eligible": true }, { "name": "Secondary Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Primary Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/details?id=com.worldcoin", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/no/app/world-app-worldcoin-wallet/id1560859847", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "support.worldcoin.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.world.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/worldcoin/orb-hardware", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-0f04a22510d4afeb", "name": "Tor", "platform": "HackerOne", "program_url": "https://hackerone.com/torproject?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:16Z", "scope_source_urls": [ "https://hackerone.com/torproject/policy_scopes" ], "in_scope": [ { "name": "Tor Browser", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-a817b6b76a06cd80", "name": "Trendyol", "platform": "HackerOne", "program_url": "https://hackerone.com/trendyol?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:21Z", "scope_source_urls": [ "https://hackerone.com/trendyol/policy_scopes" ], "in_scope": [ { "name": "www.trendyol.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dolap.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.trendyol-milla.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.tgoyemek.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "trendyol.com", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.dolap.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.trendyol.milla.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.trendyol.go", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "524362642", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1127881507", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "6467634418", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-c83bd9435f02861c", "name": "Trip.com", "platform": "HackerOne", "program_url": "https://hackerone.com/trip_com?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:22Z", "scope_source_urls": [ "https://hackerone.com/trip_com/policy_scopes" ], "in_scope": [ { "name": "*.trip.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.travix.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.travix.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.trainpal.com,*.mytrainpal.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.cheaptickets.nl", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.triplinkintl.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.tyo-masters.co.jp", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.budgetair.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.flugladen.de", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.vayama.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.vliegwinkel.nl", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.trip.biz", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": ".trip.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.trip.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.trip.ios", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.staging.travix.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "*.stg.travix.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.dev.travix.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.development.travix.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.playground.travix.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-10c3ed6c591eada2", "name": "TRON DAO", "platform": "HackerOne", "program_url": "https://hackerone.com/tron_dao?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:23Z", "scope_source_urls": [ "https://hackerone.com/tron_dao/policy_scopes" ], "in_scope": [ { "name": "https://github.com/tronprotocol/java-tron", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-8912ab2c0977be9a", "name": "Twilio", "platform": "HackerOne", "program_url": "https://hackerone.com/twilio?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:26Z", "scope_source_urls": [ "https://hackerone.com/twilio/policy_scopes" ], "in_scope": [ { "name": "*.sip.*.twilio.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "static*.twilio.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://tsock.us1.twilio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.twilio.com/login?g=%2fconsole%3f&t=2b1c98334b25c1a785ef15b6556396290e3c704a9b57fc40687cbccd79c46a8c", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://twilio.com/blog", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://help.twilio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sendgrid.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.sendgrid.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "signup.sendgrid.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.sendgrid.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mc.sendgrid.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.segment.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://segment.com/docs/connections/sources/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.twilio.com/en-us/blog/get-started-webrtc", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.twilio.com/docs/libraries", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "smtp.sendgrid.net", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Any host/web property verified to be owned by Twilio et al.", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.authy.com/download/", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.authy.com/download/", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.twilio.com", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true }, { "name": "Twilio APIs", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.twilio.com/docs/verify/api", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.twilio.com/docs/authy/api", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.segment.io", "asset_type": "API", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "signal.twilio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "status.twilio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "store.twilio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.twilio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "surveys.twilio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "talks.twilio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.segment.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "status.segment.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "webinars.segment.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "status.sendgrid.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.sendgrid.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "transform.twilio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "webinars.twilio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "lab.authy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "twil.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "twiliotraining.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "zipwhip.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://segment.com/contact", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://segment.com/jobs", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://twilio.com/en-us/company/jobs", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://twilio.com/labs", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://apjevents.twilio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://events.cdpweek.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "jobs.twilio.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "All Twilio acquisitions until explicitly noted under the in-scope targets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Ytica and its assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Electric Imp and its assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "TwimlBins", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "All Kurento domains", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Twilio Quest", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Twilio Wireless", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Third-party services", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-349032f1d4571d4a", "name": "Uber", "platform": "HackerOne", "program_url": "https://hackerone.com/uber?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:29Z", "scope_source_urls": [ "https://hackerone.com/uber/policy_scopes" ], "in_scope": [ { "name": "uber.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Recon Data", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.uberinternal.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "*ubereats.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*scaledsolutions.uber.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "scaledsolutions*.uber.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.uberscoot.us", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.ubertransit.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "merchants.ubereats.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "bizblog.uber.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "et.uber.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "newsroom.uber.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "eng.uber.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "people.uber.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "love.uber.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "drive.uber.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "uber.onelogin.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "uber.com.cn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://assets.uber.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://brand.uber.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "central-beta.uber.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "adsacademy.uber.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Fraud Reports", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.ubercarshare.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-5cc112a4979f3a8c", "name": "Ubiquiti Inc.", "platform": "HackerOne", "program_url": "https://hackerone.com/ui?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:30Z", "scope_source_urls": [ "https://hackerone.com/ui/policy_scopes" ], "in_scope": [ { "name": "*.ubnt.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.ui.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.uisp.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "store.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "community.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "account.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "fw-update.ubnt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "rma.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "design.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "uisp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "unifi.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "careers.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ispdesign.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "UniFi Cloud", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "UID", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "airMAX", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "UniFi", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "EdgeMAX", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "airFiber", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "UFiber", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "AmpliFi", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "UniFi Talk", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "UniFi Protect", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "UniFi Switches", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "UniFi Wireless Access Points", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "UniFi Gateways (UDM, UXG, USG)", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Cloudkey", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "UniFi LED", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "UniFi Access", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "UniFi Connect", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Enterprise Audio/Video", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "UniFi-Play", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.ubnt.easyunifi", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.ubnt.umobile", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.ubnt.discovery.app", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "UniFi Network Application", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "UCRM", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "UNMS", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "UISP", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "UniFi OS Server", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://*.ui.com/distributors/", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://*.ui.com/training/partners/", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "ir.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "help.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "blog.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "training.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dev-training.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "wiki.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://ui.com/distributors/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://ui.com/training/partners/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "help.uisp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.ubnt.ucrm", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "*.go.ubnt.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "forum-es.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "forum-pt.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "security.community.ui.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "UniFi Video Cloud", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "UniFi Video", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": false }, { "name": "mFi", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": false }, { "name": "UniFi Talk Conference Speaker - UT-Conference", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": false }, { "name": "UniFi Voip", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.ubnt.unifivideo", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.ubnt.unifi.edu", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.ubnt.mpower", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "AirControl", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false }, { "name": "UniFi Video Server", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-c16550dd976c192e", "name": "Udemy", "platform": "HackerOne", "program_url": "https://hackerone.com/udemy?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:31Z", "scope_source_urls": [ "https://hackerone.com/udemy/policy_scopes" ], "in_scope": [ { "name": "www.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "yourcompany.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "about.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "affiliates.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "blog.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "business.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "community.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "teach.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "research.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "mi.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "helpdesk.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "copyright.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "design.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "government.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "keeplearning.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "legalteam.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "people-innovators.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "theupskillingimperative.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "translate.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ufbsupport.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "coding-exercises.udemy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-87b3e665c8fafc1d", "name": "Unico IDtech", "platform": "HackerOne", "program_url": "https://hackerone.com/unico_idtech?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:32Z", "scope_source_urls": [ "https://hackerone.com/unico_idtech/policy_scopes" ], "in_scope": [ { "name": "*.uat.unico.app", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "accountshomolog.acesso.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identityhomolog.acesso.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "backend-sdk.uat.private.unico.run", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "idpay-uat.unico.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "issuer.idpay-uat.unico.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "idcash-uat.unico.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "openfinance.unico.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "secure.unico.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "unico.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://sdk-h1.unico.io/createprocess", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "blog.unico.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "devcenter.unico.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "[Unico] Liveness Bypass", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.cadastro.uat.unico.app", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "uconf.uat.unico.app", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-d3b51dae0c3f0eb6", "name": "Urban Company", "platform": "HackerOne", "program_url": "https://hackerone.com/urbancompany?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:35Z", "scope_source_urls": [ "https://hackerone.com/urbancompany/policy_scopes" ], "in_scope": [ { "name": "www.urbancompany.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.urbanclap.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.urbanclap.provider", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.urbanclap.urbanclap", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1032480595", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "982922982", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "Other urbancompany.com subdomains except for the ones in-scope", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-85918720d8eeefaf", "name": "Valve", "platform": "HackerOne", "program_url": "https://hackerone.com/valve?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:37Z", "scope_source_urls": [ "https://hackerone.com/valve/policy_scopes" ], "in_scope": [ { "name": "*.steamstatic.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.dota2.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "support.steampowered.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "partner.steampowered.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "store.steampowered.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.valvesoftware.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.steampowered.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "partner.steamgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "steamcommunity.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.teamfortress.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.counter-strike.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "playartifact.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "help.steampowered.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developer.valvesoftware.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Steam Servers", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Steam Client", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.valvesoftware.Steam", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.valvesoftware.Steam", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "storefront.steampowered.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "wiki.teamfortress.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/valvesoftware", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "valvestore.forfansbyfans.com,store.valvesoftware.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.steampowered.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "translation.steampowered.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.steamgames.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "list.valvesoftware.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-d1cb437e64fff5a7", "name": "Varonis", "platform": "HackerOne", "program_url": "https://hackerone.com/varonis?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:39Z", "scope_source_urls": [ "https://hackerone.com/varonis/policy_scopes" ], "in_scope": [ { "name": "*.varonis.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.varonis.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "licensemgmt.varonis.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "downloads.varonis.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "my.varonis.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "support.varonis.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.varonis-preprod.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.cyral.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "All other assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-4d6a13c23ed1da52", "name": "Vercel", "platform": "HackerOne", "program_url": "https://hackerone.com/vercel?type=team", "bounty_classification": "verified_policy", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "vercel-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:59:15Z", "scope_source_urls": [ "https://hackerone.com/vercel/policy_scopes" ], "in_scope": [ { "name": "*.vercel.live", "asset_type": "WILDCARD", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "*.vercel.com", "asset_type": "WILDCARD", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "vercel.app", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "vercel.com", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "v0.dev", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "v0.app", "asset_type": "URL", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/vercel", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/nitrojs/nitro", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/nuxt/nuxt", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/sveltejs/svelte", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/vercel-labs/agent-skills", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/vercel-labs/skills", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/vercel/ai", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/vercel/async-sema", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/vercel/chat", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/vercel/flags", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/vercel/next.js", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/vercel/swr", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/vercel/turborepo", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/vercel/vercel", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/vercel/workflow", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/vercel/eve", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "https://github.com/vercel/ms", "asset_type": "SOURCE_CODE", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true }, { "name": "Vercel sandbox", "asset_type": "OTHER", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.vercel.app", "asset_type": "WILDCARD", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ], "bounty_eligible": false } ], "limitations": [ "Published structured-scope rows were captured. Submission eligibility and bounty eligibility differ; program policy text may add restrictions." ], "review_flags": [] }, { "id": "hackerone-802a120c710a4141", "name": "Verily Life Sciences", "platform": "HackerOne", "program_url": "https://hackerone.com/verily_life_sciences?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:42Z", "scope_source_urls": [ "https://hackerone.com/verily_life_sciences/policy_scopes" ], "in_scope": [ { "name": "https://*.verily.com/", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://*.signalpath.com/", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://*.verilyme.com/", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://*.projectbaseline.com/", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://play.google.com/store/apps/details?id=com.verily.me", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://apps.apple.com/us/app/verily-me/id6448808133", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-c9db05e34bcf3c4b", "name": "Via", "platform": "HackerOne", "program_url": "https://hackerone.com/ridewithvia?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:46Z", "scope_source_urls": [ "https://hackerone.com/ridewithvia/policy_scopes" ], "in_scope": [ { "name": "global-api.citymapper.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "eu.remix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "platform.remix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://metroconnect.app.ridewithvia.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://pt-runner.app.ridewithvia.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "via.rider", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.citymapper.app.release", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "ridewithvia.neoridelittlerock", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "ridewithvia.par.piercetransit", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "657777015", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "469463298", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "6449737830", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "6464473474", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.drivewithvia.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.citymapper.com/", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "ridewithvia.okta.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "ridewithvia.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "citymapper.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "remix.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-e1f453b60fd3bf62", "name": "Vimeo", "platform": "HackerOne", "program_url": "https://hackerone.com/vimeo?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:47Z", "scope_source_urls": [ "https://hackerone.com/vimeo/policy_scopes" ], "in_scope": [ { "name": "*.cloud.vimeo.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.vimeo.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.vhx.tv", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.magisto.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.vimeo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "player.vimeo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.vimeo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vimeopro.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://vimeo.com/ondemand", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://vimeo.com/api", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "checkout.vimeo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://vimeo.com/create", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vimeo.magisto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vhx.tv", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "embed.vhx.tv", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.vhx.tv", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "magisto.com,www.magisto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "staging.magisto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "applause1.magisto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "channelstore.roku.com/details/48061/vhx", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "VHX Branded Customer iOS Apps", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "VHX Branded Customer Android Apps", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "VHX Branded Customer Roku Apps", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.vimeo.android.videoapp", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.vimeocreate.videoeditor.moviemaker", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.magisto", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "425194759", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1491791513", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "486781045", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "493086499", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "All", "asset_type": "WINDOWS_APP_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.email.vimeo.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.wirewax.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.wirewax.app", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.wibbitz.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.test.magisto.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.dev.magisto.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.cdn.magisto.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.livestream.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.new.livestream.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.boost.livestream.com,boost.livestream.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "vimeo.atlassian.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "applause2.magisto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "gamma.magisto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "delta.magisto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "int001.vimeo.magisto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "int002.vimeo.magisto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "int003.vimeo.magisto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "int004.vimeo.magisto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "int005vimeo.magisto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "eta.magisto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "epsilon.magisto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://www.magisto.com/blog", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "omega.magisto.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.livestream.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "donations.livestream.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "livestreamapis.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "store.livestream.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "publishing-api.livestream.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "help.livestream.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "status.livestream.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "billing-account.vimeo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Livestream software (Producer, Studio)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "s3://static.intercast-livestream.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "livestream.com/blog, *.livestream.com/blog, blog.livestream.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Any previously owned/sold hardware", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": false }, { "name": "tv.vhx", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "com.livestream.livestream", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "935740658", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-948ca6c9ff8f5ff6", "name": "Visa", "platform": "HackerOne", "program_url": "https://hackerone.com/visa?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:48Z", "scope_source_urls": [ "https://hackerone.com/visa/policy_scopes" ], "in_scope": [ { "name": "*.visamiddleeast.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "bd.visa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.br", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.mx", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.tw", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "visa.com.ru", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "visa.com.au", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.az", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.cy", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.ge", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.hk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.hr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "visa.com.jm", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.kh", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.kz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.lk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.my", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.ng", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.ph", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.sg", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.tr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.vn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.co.id", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.co.il", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.co.in", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.co.jp", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.co.ke", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.co.nz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.co.th", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.co.uk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.co.ve", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "visa.co.za", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.cybersource.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.authorize.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "usa.visa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.tink.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.practicalmoneyskills.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.practicalbusinessskills.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.practicalmoneyskills.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sandbox.secure.checkout.visa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://myvisainfinite.com/suntrust/en_us/home.html", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ebctest.cybersource.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developer.cybersource.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sandbox.authorize.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developer.authorize.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developer.visa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "test.payworks.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "console.tink.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "direct-demo.currencycloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/listmanager", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.visa.com.az/az_az/account/registration", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/merchant-mgmt/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/ums", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/cds/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "my.visa.fr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/CGK2", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/bin", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/boarding/v1/registrations", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/boarding/v1/templates", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/casemanagement", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/dmconfigapi", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/epcapi", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/identity", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/invoicing", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/jobs", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/merchantvelocity", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/mms", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/oms", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/partner", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/payerauthentication", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/payment", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/prcs", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/prefs", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/processorconfigapi", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/products/virtual-terminal", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/pts/v2", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/reporting", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/riskui", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/saconfig", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/sms", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/tms", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/tss", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/vdm", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/vts", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/pts/v1/transaction-batch-upload", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/tech-partner-integration", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/notification-subscriptions", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/kms/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.trialpay.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vwcm.visa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "capability.prod.innovexperiments.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "visasgic.api-xperience.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sap.api-xperience.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vasdemos.visa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "dwy.visa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "admin-portal.api-xperience.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "testbank.xs2a.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "askpeopleteam.visa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "releasor.payworks.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/pbl", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "survey.visa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.ru", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.co.cr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.co.ni", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.bo", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.myvisacardportal.com/enbd/en_ae/landing/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://usa.visa.com/gateway/api", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "africa.visa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "by.visa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "cis.visa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "myanmar.visa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "rs.visa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "visa.com.mx", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.jm", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visaeurope.at", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visaeurope.ch", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visaeurope.lu", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visaeurope.si", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visaitalia.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visakorea.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visasoutheasteurope.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.ca", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.cl", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.cn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.com.hn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.cz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.de", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.dk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.ee", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.es", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.fi", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.hu", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.gr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.ie", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.is", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.lt", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.lv", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.mn", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.nl", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.no", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.pt", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.ro", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.se", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.sk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visabg.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.pl", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.be", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.visa.com.ua/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/underwriting", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/bos", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://ebctest.cybersource.com/vroom", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developer.plus.authorize.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "sandbox.developer.plus.authorize.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.currencycloud.com/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developer.currencycloud.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.visa.fr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vgov.catalogue.digitalcontrolroom.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "myvu.visauniversity.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "codeofconduct.visa.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "visainnovationprogram.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "visaonchainanalytics.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "developers.pismo.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "forms.cybersource.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.prod.innovexperiments.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "images.demand.cybersource.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "app.demand.cybersource.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "info.authorize.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-9e8b2c50f8b891fb", "name": "Vodafone Oman", "platform": "HackerOne", "program_url": "https://hackerone.com/vodafone_oman?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:51Z", "scope_source_urls": [ "https://hackerone.com/vodafone_oman/policy_scopes" ], "in_scope": [ { "name": "www.vodafone.om", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "apix.vodafone.om", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vfo01.vodafone.om", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vfo02.vodafone.om", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "vfo03.vodafone.om", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "om.vodafone.mva", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1589071345", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-01350c382d147687", "name": "Walt.io", "platform": "HackerOne", "program_url": "https://hackerone.com/walt_io?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:53Z", "scope_source_urls": [ "https://hackerone.com/walt_io/policy_scopes" ], "in_scope": [ { "name": "walletbot.me", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wallettg.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wallettg.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "p2p.walletbot.me", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://t.me/wallet", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://t.me/walt", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pay.wallet.tg", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wallet.tg", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "walt.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Crypto infrastructure for cold and hot wallets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "wallet.helpscoutdocs.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "docs.wallet.tg", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "toncenter.walletbot.me", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-22f0beaf6ecd3a39", "name": "Wealthsimple", "platform": "HackerOne", "program_url": "https://hackerone.com/wealthsimple?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:54Z", "scope_source_urls": [ "https://hackerone.com/wealthsimple/policy_scopes" ], "in_scope": [ { "name": "*.wealthsimple.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.simpletax.ca", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.wealthsimple", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.wealthsimple.predict", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.wealthsimple.wealthsimple", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.wealthsimple.predict", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "help.wealthsimple.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "support.wealthsimple.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "work.wealthsimple.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "status.wealthsimple.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "trust.wealthsimple.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "start.wealthsimple.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "groove.wealthsimple.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "schedule.wealthsimple.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "shop.wealthsimple.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "newsroom.wealthsimple.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "app.wealthsimple.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "gifts.wealthsimple.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "tldr-archive.wealthsimple.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-138ac4fca16a5da5", "name": "Wells Fargo Bounty", "platform": "HackerOne", "program_url": "https://hackerone.com/wellsfargo-bbp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:57Z", "scope_source_urls": [ "https://hackerone.com/wellsfargo-bbp/policy_scopes" ], "in_scope": [ { "name": "*.wellsfargo.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "connect.secure.wellsfargo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "http://wellsfargo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.wellsfargo.ceomobile", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.wf.wellsfargomobile", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.wf.mobilebanking", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.wf.ceomobile", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.wf.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "http://wf.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "homeloans.wellsfargo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "accountoffers.wellsfargo.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.advisor-connection.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.mworld.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "*.wellsfargoadvisors.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-d6751b75144820e2", "name": "Whatnot", "platform": "HackerOne", "program_url": "https://hackerone.com/whatnot?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:55:58Z", "scope_source_urls": [ "https://hackerone.com/whatnot/policy_scopes" ], "in_scope": [ { "name": "*.whatnot.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.whatnot.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.whatnot.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "live-service.whatnot.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "auction-service.whatnot.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.whatnot_mobile", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "Whatnot: Shop, Sell, Connect", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-a9717fdc8930b44c", "name": "Whoop Bug Bounty", "platform": "HackerOne", "program_url": "https://hackerone.com/whoop_bug_bounty?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:56:00Z", "scope_source_urls": [ "https://hackerone.com/whoop_bug_bounty/policy_scopes" ], "in_scope": [ { "name": "api.prod.whoop.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "app.whoop.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "shop.whoop.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "WHOOP 4.0 STRAP", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "join.whoop.com", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "WHOOP 5.0/MG STRAP", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.whoop.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.whoop.iphone", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "okta.whoop.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Support System", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Azure AD, Google Drive, Link Sharing Websites", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Credit/Debit Card Testing", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-19410716c93f3988", "name": "Wickr", "platform": "HackerOne", "program_url": "https://hackerone.com/wickr?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:56:01Z", "scope_source_urls": [ "https://hackerone.com/wickr/policy_scopes" ], "in_scope": [ { "name": "admin.wickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "Wickr Pro/Wickr Me (all related technical components) (up to)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Wickr Pro Android", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Wickr Pro iOS", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Wickr Pro Linux", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Wickr Me iOS", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Wickr Me Android", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Wickr Me Linux", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Wickr Me OS X", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Wickr Pro OS X", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Wickr Pro Windows", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Wickr Me Windows", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.wickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [ { "name": "support.wickr.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-066eed54718ea6a5", "name": "WisdomTree, Inc.", "platform": "HackerOne", "program_url": "https://hackerone.com/wisdomtree?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:56:02Z", "scope_source_urls": [ "https://hackerone.com/wisdomtree/policy_scopes" ], "in_scope": [ { "name": "api.wisdomtreeprimeapp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://app.wisdomtreeconnect.com/api/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://app.wisdomtreeconnect.com/o/token/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://app.wisdomtreeconnect.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.wisdomtree.wtprime", "asset_type": "TESTFLIGHT", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.wisdomtree.wtprime", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "wisdomtree.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "wisdomtree.eu", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "dataspanapi.wisdomtree.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-715873e15b2e87a2", "name": "Wolt", "platform": "HackerOne", "program_url": "https://hackerone.com/wolt?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:56:03Z", "scope_source_urls": [ "https://hackerone.com/wolt/policy_scopes" ], "in_scope": [ { "name": "*.wolt.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "authentication.wolt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "corporate.wolt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "drive.wolt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "merchant.wolt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ops.wolt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "restaurant-api.wolt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wolt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.wolt.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.wolt.courierapp", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "1477299281", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "943905271", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.pipedrive.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "gettest.wolt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://merchant.wolt.com/api/merchant-onboarding/merchant-admin/inbound-merchant", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://restaurant-api.wolt.com/v1/waw-api/corporate-leads", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://merchant-onboarding-service.wolt.com/merchant-admin/inbound-merchant", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://wolt.com/en/wolt-for-work-contact-request", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://merchant.wolt.com/app/partner-with-wolt", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://wolt.typeform.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "wolt.atlassian.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "press.wolt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "links.wolt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "blog.wolt.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-283069b8a0f4c015", "name": "WordPress", "platform": "HackerOne", "program_url": "https://hackerone.com/wordpress?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:56:04Z", "scope_source_urls": [ "https://hackerone.com/wordpress/policy_scopes" ], "in_scope": [ { "name": "*.wordpress.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.buddypress.org,bbpress.org,profiles.wordpress.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.wordcamp.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.wordpress.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.wordpress.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "planet.wordpress.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "doaction.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "codex.wordpress.org,codex.bbpress.org,codex.buddypress.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "mercantile.wordpress.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "wordpressfoundation.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "WordPress Core", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "BuddyPress Core", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "bbPress Core", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.trac.wordpress.org, *.svn.wordpress.org, *.git.wordpress.org", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Gutenberg", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "GlotPress", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "WP-CLI", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Official WordPress plugins", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Secure Custom Fields", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "SQLite Database Integration", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Create Block Theme", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "github.com/wordpress", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Playground", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.wordpress.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "munin-*.wordpress.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "status.wordpress.org,glotpress.blog,wordpress.tv", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "lists.wordpress.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "irclogs.wordpress.org", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://github.com/wordpress-mobile/", "asset_type": "SOURCE_CODE", "location": null, "group": null, "bounty_eligible": false }, { "name": "Digital Ocean, AWS, etc", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Archived GitHub repositories", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "org.wordpress.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": false }, { "name": "335703880", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-441cfdf2fe7aac5e", "name": "X / xAI", "platform": "HackerOne", "program_url": "https://hackerone.com/x?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:56:07Z", "scope_source_urls": [ "https://hackerone.com/x/policy_scopes" ], "in_scope": [ { "name": "*.twitter.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.vine.co", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.twimg.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.x.ai", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.x.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.grok.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "x.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "accounts.x.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "console.x.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "grok.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "chat.x.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "grokipedia.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "money.x.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "console.x.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "pscp.tv", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "x.ai", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "t.co", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "X Pixel Helper (Chrome Extension)", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.twitter.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "ai.x.grok", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "grok-build", "asset_type": "DOWNLOADABLE_EXECUTABLES", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.atebits.Tweetie2", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "ai.x.GrokApp", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "xadsacademy.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-12275be548221ef0", "name": "Xiaomi", "platform": "HackerOne", "program_url": "https://hackerone.com/xiaomi?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:56:08Z", "scope_source_urls": [ "https://hackerone.com/xiaomi/policy_scopes" ], "in_scope": [ { "name": "*.mi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.xiaomi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.miui.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.xiaomiyoupin.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.miwifi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.airstar-finance.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.airstar.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.airstarfinance.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.aleenote.cn", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.aleenote.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.baoliyun.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.duokan.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.hongyuanib.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mi.cn", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mifile.cn", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.migames.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.miinsurtech.cn", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.miinsurtech.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.miinsurtech.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mijiayoupin.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mioffice.cn", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mios.cn", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.miot-spec.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mipay.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.mipay.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.miui.cn", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.oktukids.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.openvela.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.wali.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.xiangkankeji.cn", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.xiangkankeji.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.xiangkannews.cn", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.xiaomi.net", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.xiaomi.org", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.xiaomiev.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.xiaomimobile.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.xiaomiprint.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.xiaomiwear.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.xunkid.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.xunkids.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.youpin.cn", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.zmifi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.xiaomimimo.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.miui.micloudsync", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.xiaomi.smarthome", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.xiaomi.market", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.mi.global.shop", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.xiaomi.mibrain.speech", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.xiaomi.account", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.xiaomi.payment", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.xiaomi.mipicks", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.xiaomi.micloud.sdk", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.miui.cloudbackup", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.miui.cloudservice", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.android.browser", "asset_type": "OTHER_APK", "location": null, "group": null, "bounty_eligible": true }, { "name": "Other Hardware Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "MIUI OS for Xiaomi Phone", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Other APK Assets", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "Mi/Redmi Phone", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Mi Band", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Mi Home Webcam", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Mi Robot Vacuum", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Mi TV Box", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Mi Laser Projector", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Mi TV", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true }, { "name": "Mi Electric Scooter", "asset_type": "HARDWARE", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-79c51c2e3a3d21d5", "name": "XVIDEOS", "platform": "HackerOne", "program_url": "https://hackerone.com/xvideos?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:56:09Z", "scope_source_urls": [ "https://hackerone.com/xvideos/policy_scopes" ], "in_scope": [ { "name": "www.xvideos.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.xvideos.red", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.xnxx.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "https://www.xvideos.net/app/", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.xnxx.gold", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "www.xvcams.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.xvlivecams.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-0500a6238c38ee02", "name": "Yelp", "platform": "HackerOne", "program_url": "https://hackerone.com/yelp?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:56:10Z", "scope_source_urls": [ "https://hackerone.com/yelp/policy_scopes" ], "in_scope": [ { "name": "*.yelp.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.yelpwifi.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "yelptop100.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.yelp.android.biz", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.yelp.android", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "284910350", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "936983378", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "542767785", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "*.yelp-support.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.yelp-ir.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "cloud.e.yelp-business.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "yelp-press.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "yelp.careers", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "blog.yelp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "engineeringblog.yelp.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-06ff1835f329622d", "name": "Yoti", "platform": "HackerOne", "program_url": "https://hackerone.com/yoti?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:56:11Z", "scope_source_urls": [ "https://hackerone.com/yoti/policy_scopes" ], "in_scope": [ { "name": "core.yoti.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "api.yoti.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "ccloud.yoti.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "code.yoti.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.yotisign.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "hub.yoti.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "identity.yoti.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "com.yoti.mobile.android.live", "asset_type": "GOOGLE_PLAY_APP_ID", "location": null, "group": null, "bounty_eligible": true }, { "name": "983980808", "asset_type": "APPLE_STORE_APP_ID", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "www.yoti.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "developers.yoti.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "Yoti Password Manager browser extension", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false }, { "name": "Yoti liveness detection campaign", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-f46392a06bbe04ba", "name": "Yuga Labs", "platform": "HackerOne", "program_url": "https://hackerone.com/yuga_labs?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:56:11Z", "scope_source_urls": [ "https://hackerone.com/yuga_labs/policy_scopes" ], "in_scope": [ { "name": "*.boredapeyachtclub.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.yuga.com", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.yugalabs.io", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "*.otherside.xyz", "asset_type": "WILDCARD", "location": null, "group": null, "bounty_eligible": true }, { "name": "831287358355275877", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true }, { "name": "961114489414094898", "asset_type": "OTHER", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "hackerone-43c6d3331c32744a", "name": "Zooplus", "platform": "HackerOne", "program_url": "https://hackerone.com/zooplus?type=team", "bounty_classification": "hackerone_program_flag", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:56:14Z", "scope_source_urls": [ "https://hackerone.com/zooplus/policy_scopes" ], "in_scope": [ { "name": "www.zooplus.de", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.zooplus.co.uk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "www.zooplus.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true }, { "name": "zooplus.net", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": true } ], "out_of_scope": [ { "name": "www.zooplus.be", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.dk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.fi", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.fr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.gr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.ie", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.it", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.hr", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.nl", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.no", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.at", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.pl", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.pt", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.ro", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zoochic-eu.ru", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.se", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.ch", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zoohit.sk", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zoohit.si", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.es", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zoohit.cz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.zooplus.hu", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.bitiba.de", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.matina-gmbh.de", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "zooplus.io", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "www.wolf-of-wilderness.com", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.zooplus.es/veterinarios", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.zooplus.de/tierarzt", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.zooplus.fr/veterinaire", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.zooplus.hu/allatorvos", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.zooplus.it/veterinari", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.zooplus.nl/dierenarts", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.zooplus.pl/weterynarz", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false }, { "name": "https://www.zoohit.cz/veterinari", "asset_type": "URL", "location": null, "group": null, "bounty_eligible": false } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-f80b2fe8a24e9060", "name": "12Build Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/onetwobuild/12build", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/onetwobuild/12build/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:48:44Z", "scope_source_urls": [ "https://app.intigriti.com/programs/onetwobuild/12build/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-3af054740d0c40d4", "name": "Adobe Public", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/adobe/adobepublic", "bounty_classification": "verified_policy", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "adobe-public-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:55:54Z", "scope_source_urls": [ "https://app.intigriti.com/programs/adobe/adobepublic/detail" ], "in_scope": [ { "name": "Acrobat PDF Spaces", "asset_type": "AI Model", "location": null, "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Acrobat Create Presentations", "asset_type": "AI Model", "location": null, "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Acrobat Create Podcast", "asset_type": "AI Model", "location": null, "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Acrobat AI Assistant", "asset_type": "AI Model", "location": null, "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Adobe Express AI Assistant", "asset_type": "AI Model", "location": null, "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Lightroom AI Features", "asset_type": "AI Model", "location": null, "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Adobe Firefly AI Features", "asset_type": "AI Model", "location": null, "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Photoshop AI Assistant", "asset_type": "AI Model", "location": null, "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Adobe Stock AI Studio", "asset_type": "AI Model", "location": null, "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Frame.io iOS Application", "asset_type": "iOS", "location": "https://apps.apple.com/gb/app/frame-io/id1056295002", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Adobe Fresco (iOS)", "asset_type": "iOS", "location": "https://apps.apple.com/us/app/adobe-fresco-draw-paint-app/id1458660369", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Adobe Photoshop Express Mobile App (iOS)", "asset_type": "iOS", "location": "https://apps.apple.com/us/app/photoshop-express-photo-editor/id331975235", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Lightroom Video & Photo Editor (IOS)", "asset_type": "iOS", "location": "https://apps.apple.com/gb/app/lightroom-video-photo-editor/id878783582", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Lightroom Video & Photo Editor (Android)", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.adobe.lrmobile&hl=en_GB", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Adobe Scan Mobile App (iOS)", "asset_type": "iOS", "location": "https://apps.apple.com/us/app/adobe-scan-pdf-ocr-scanner/id1199564834", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Adobe Scan Mobile App (Android)", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.adobe.scan.android&hl=en_GB", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Acrobat Reader Mobile App (iOS)", "asset_type": "iOS", "location": "https://apps.apple.com/us/app/acrobat-reader-pdf-editor/id469337564", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Acrobat Reader Mobile App (Android)", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.adobe.reader&hl=en", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.acrobat.adobe.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "stock.adobe.com", "asset_type": "URL", "location": "http://stock.adobe.com", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "firefly.adobe.com", "asset_type": "URL", "location": "http://firefly.adobe.com", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Adobe ColdFusion without ColdFusion Administrator", "asset_type": "Other", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "ColdFusion Administrator", "asset_type": "Other", "location": null, "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.lightroom.adobe.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "photoshop.adobe.com", "asset_type": "URL", "location": "http://photoshop.adobe.com", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Adobe Commerce, Adobe Commerce B2B and Magento Open Source", "asset_type": "Other", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "account.magento.com", "asset_type": "URL", "location": "http://account.magento.com", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "commercemarketplace.adobe.com", "asset_type": "URL", "location": "http://commercemarketplace.adobe.com", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "repo.magento.com", "asset_type": "URL", "location": "http://repo.magento.com", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "magento.com", "asset_type": "URL", "location": "http://magento.com", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "learningmanagerstage4.adobe.com", "asset_type": "URL", "location": "http://learningmanagerstage4.adobe.com", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "net.s2stagehance.com", "asset_type": "URL", "location": "http://net.s2stagehance.com", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "new.express.adobe.com", "asset_type": "URL", "location": "http://new.express.adobe.com", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "portfolio.ccpsx.com", "asset_type": "URL", "location": "http://portfolio.ccpsx.com", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "fonts.adobe.com", "asset_type": "URL", "location": "http://fonts.adobe.com", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "account.adobe.com", "asset_type": "URL", "location": "http://account.adobe.com", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "auth.services.adobe.com", "asset_type": "URL", "location": "http://auth.services.adobe.com", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "adobeid-na1.services.adobe.com", "asset_type": "URL", "location": "http://adobeid-na1.services.adobe.com", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "ims-na1.adobelogin.com", "asset_type": "URL", "location": "http://ims-na1.adobelogin.com", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "federatedid-na1.services.adobe.com", "asset_type": "URL", "location": "http://federatedid-na1.services.adobe.com", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [], "limitations": [ "Published asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope.", "The published table repeated ColdFusion Administrator in the same tier; this snapshot deduplicates that identical row." ], "review_flags": [] }, { "id": "intigriti-78f5d4ac33ca017b", "name": "Aikido Security: Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/aikido/aikido", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:45Z", "scope_source_urls": [ "https://app.intigriti.com/programs/aikido/aikido/detail" ], "in_scope": [ { "name": "app.aikido.dev", "asset_type": "URL", "location": "http://app.aikido.dev", "group": "Tier 2" } ], "out_of_scope": [ { "name": "*.aikido.dev", "asset_type": "Wildcard", "location": null, "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-7d9777b80a650ca2", "name": "Algemeen Dagblad", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/dpgm/algemeendagblad", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:47Z", "scope_source_urls": [ "https://app.intigriti.com/programs/dpgm/algemeendagblad/detail" ], "in_scope": [ { "name": "myaccount.ad.nl", "asset_type": "URL", "location": "http://myaccount.ad.nl", "group": "Tier 2" }, { "name": "www.ad.nl", "asset_type": "URL", "location": "http://www.ad.nl", "group": "Tier 2" }, { "name": "www.ad.nl/abonnementen", "asset_type": "URL", "location": "http://www.ad.nl/abonnementen", "group": "Tier 2" }, { "name": "*.ad.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 3" } ], "out_of_scope": [ { "name": "actie.ad.nl", "asset_type": "URL", "location": "http://actie.ad.nl", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-ea436f180ddfd4ad", "name": "Allegro", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/allegro/allegrobugbounty", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:54Z", "scope_source_urls": [ "https://app.intigriti.com/programs/allegro/allegrobugbounty/detail" ], "in_scope": [ { "name": "*.allegro.cz.allegrosandbox.pl", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.allegro.pl.allegrosandbox.pl", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.allegro.sk.allegrosandbox.pl", "asset_type": "Wildcard", "location": null, "group": "Tier 2" } ], "out_of_scope": [ { "name": "*.allegro.cz", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*.allegro.pl", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*.allegro.sk", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*.allegrogroup.com", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "Any production website owned by Allegro not listed in Domains", "asset_type": "Other", "location": null, "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-0c5bec9f65e46eb9", "name": "Allekabels", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/rpip/allekabels", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/rpip/allekabels/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:48:56Z", "scope_source_urls": [ "https://app.intigriti.com/programs/rpip/allekabels/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-bb81fb899e41a887", "name": "Altera", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/altera/altera", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:58Z", "scope_source_urls": [ "https://app.intigriti.com/programs/altera/altera/detail" ], "in_scope": [ { "name": "Firmware", "asset_type": "Device", "location": null, "group": "Tier 1" }, { "name": "Hardware", "asset_type": "Device", "location": null, "group": "Tier 1" }, { "name": "FPGA Solution Development Tools and Utilities", "asset_type": "Other", "location": null, "group": "No bounty" }, { "name": "Software", "asset_type": "Other", "location": null, "group": "No bounty" }, { "name": "Non Altera Products", "asset_type": "Other", "location": null, "group": "No bounty" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-6a936ae77e6153a3", "name": "AMD Product Security Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/amd/amd", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:48:59Z", "scope_source_urls": [ "https://app.intigriti.com/programs/amd/amd/detail" ], "in_scope": [ { "name": "Hardware", "asset_type": "Other", "location": null, "group": "Tier 1" }, { "name": "Firmware", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Software", "asset_type": "Other", "location": null, "group": "Tier 3" }, { "name": "No Bounty", "asset_type": "Other", "location": null, "group": "No bounty" } ], "out_of_scope": [ { "name": "Out of Scope", "asset_type": "Other", "location": null, "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-bc5107b94ac916be", "name": "Arm", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/arm/arm", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:01Z", "scope_source_urls": [ "https://app.intigriti.com/programs/arm/arm/detail" ], "in_scope": [ { "name": "Firmware: Mali Command Stream Frontend (CSF) Firmware", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Software: Mali GPU Kernel Driver", "asset_type": "Other", "location": null, "group": "Tier 3" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-42afa90b3827da99", "name": "Axel Springer National Media & Tech", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/axelspringerse/nmt", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:03Z", "scope_source_urls": [ "https://app.intigriti.com/programs/axelspringerse/nmt/detail" ], "in_scope": [ { "name": "emarketer.com", "asset_type": "URL", "location": "http://emarketer.com", "group": "Tier 2" }, { "name": "newsos.com", "asset_type": "URL", "location": "http://newsos.com", "group": "Tier 2" }, { "name": "politico.eu", "asset_type": "URL", "location": "http://politico.eu", "group": "Tier 1" }, { "name": "adtechnology.axelspringer.com", "asset_type": "URL", "location": "http://adtechnology.axelspringer.com", "group": "Tier 1" }, { "name": "*.asadcdn.com", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "bild.de", "asset_type": "URL", "location": "http://bild.de", "group": "Tier 1" }, { "name": "welt.de", "asset_type": "URL", "location": "http://welt.de", "group": "Tier 1" }, { "name": "epaper.welt.de", "asset_type": "URL", "location": "http://epaper.welt.de", "group": "Tier 1" }, { "name": "cancellation.prod.ps.welt.de", "asset_type": "URL", "location": "http://cancellation.prod.ps.welt.de", "group": "Tier 1" }, { "name": "digital.welt.de", "asset_type": "URL", "location": "http://digital.welt.de", "group": "Tier 1" }, { "name": "signin.auth.welt.de", "asset_type": "URL", "location": "http://signin.auth.welt.de", "group": "Tier 1" }, { "name": "m.bild.de", "asset_type": "URL", "location": "http://m.bild.de", "group": "Tier 1" }, { "name": "*.hey.bild.de", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "go.welt.de", "asset_type": "URL", "location": "http://go.welt.de", "group": "Tier 1" }, { "name": "*.auth.bild.de", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "*.sportbild.de", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "meinkonto.bild.de", "asset_type": "URL", "location": "http://meinkonto.bild.de", "group": "Tier 1" }, { "name": "*.bild.tv", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "*.computerbild.de", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "18.184.198.198, 18.185.214.59, 18.194.109.179, 3.121.117.72, 3.121.138.10, 3.121.138.128, 3.121.138.134, 3.121.138.170, 3.121.138.33, 3.121.138.43, 3.124.248.208, 35.156.137.39", "asset_type": "IP Range", "location": null, "group": "Tier 1" }, { "name": "dealer.prod.ps.axelspringer.de/purchases/*", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "*.germany.politico.eu", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.welt.de", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.bild.de", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.bild.design", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.autobild.de", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.bz-berlin.de", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.spring-media.de", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.springtools.de", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "editorial.one", "asset_type": "URL", "location": "http://editorial.one", "group": "Tier 2" }, { "name": "*.as-nmt.de", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.ein-herz-fuer-kinder.de", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.fitbook.de", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.myhomebook.de", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.petbook-magazine.com/", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.petbook.de", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.stylebook.de", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.techbook.de", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.travelbook.de", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.wissen-sie-mehr.de", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "technik.autobild.de", "asset_type": "URL", "location": "http://technik.autobild.de", "group": "Tier 3" }, { "name": "technik.beta.autobild.de", "asset_type": "URL", "location": "http://technik.beta.autobild.de", "group": "Tier 3" } ], "out_of_scope": [ { "name": "*.axelspringer.com", "asset_type": "Wildcard", "location": null, "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-aa34891c6a4d965a", "name": "Belfius", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/belfius/belfius", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/belfius/belfius/tac/detail", "http_status": 200, "result": "terms_login_gate", "note": "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "terms_only", "scope_captured_at": "2026-10-03T15:49:05Z", "scope_source_urls": [ "https://app.intigriti.com/programs/belfius/belfius/tac/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." ], "review_flags": [] }, { "id": "intigriti-91226fb5a2d63d42", "name": "BMW Group", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/bmw/bmwgroup", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:07Z", "scope_source_urls": [ "https://app.intigriti.com/programs/bmw/bmwgroup/detail" ], "in_scope": [ { "name": "www.bmw-motorrad.de", "asset_type": "URL", "location": "http://www.bmw-motorrad.de", "group": "Tier 1" }, { "name": "www.bmw.de", "asset_type": "URL", "location": "http://www.bmw.de", "group": "Tier 1" }, { "name": "www.mini.de", "asset_type": "URL", "location": "http://www.mini.de", "group": "Tier 1" }, { "name": "configure.bmw.de", "asset_type": "URL", "location": "http://configure.bmw.de", "group": "Tier 2" }, { "name": "configure.mini.de", "asset_type": "URL", "location": "http://configure.mini.de", "group": "Tier 2" }, { "name": "konfigurator.bmw-motorrad.de", "asset_type": "URL", "location": "http://konfigurator.bmw-motorrad.de", "group": "Tier 2" }, { "name": "Other BMW Domains", "asset_type": "Other", "location": null, "group": "No bounty" } ], "out_of_scope": [ { "name": "Automotive Security", "asset_type": "Other", "location": null, "group": null }, { "name": "Domains from independent BMW Dealers, Resellers or Fanclubs", "asset_type": "Other", "location": null, "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-5bab61afe0c2dd07", "name": "BMW Group Automotive", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/bmw/bmwgroup-automotive", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:08Z", "scope_source_urls": [ "https://app.intigriti.com/programs/bmw/bmwgroup-automotive/detail" ], "in_scope": [ { "name": "Functions dealing with vehicle access and immobilizer", "asset_type": "Device", "location": null, "group": "Tier 1" }, { "name": "1519034860", "asset_type": "iOS", "location": "https://apps.apple.com/app/1519034860", "group": "Tier 2" }, { "name": "de.bmw.connected.mobile20.row", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=de.bmw.connected.mobile20.row", "group": "Tier 2" }, { "name": "Remaining functions", "asset_type": "Device", "location": null, "group": "Tier 2" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-f6f7221a746d596f", "name": "Bpost", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/bpost/dummy", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:10Z", "scope_source_urls": [ "https://app.intigriti.com/programs/bpost/dummy/detail" ], "in_scope": [ { "name": "www.bpost2.be", "asset_type": "URL", "location": "http://www.bpost2.be", "group": "No bounty" }, { "name": "imove.bpost.cloud", "asset_type": "URL", "location": "http://imove.bpost.cloud", "group": "No bounty" }, { "name": "*.acbpost.be", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "*.bpost.be", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "*.bpost.cloud", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "*.landmarkglobal-group.com", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "*.stbpost.be", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "be.bpost.mobilecard", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=be.bpost.mobilecard", "group": "No bounty" }, { "name": "be.bpost.mybpost", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=be.bpost.mybpost", "group": "No bounty" }, { "name": "bpost Parcel Lockers", "asset_type": "Device", "location": null, "group": "No bounty" }, { "name": "career.bpost.be", "asset_type": "URL", "location": "http://career.bpost.be", "group": "No bounty" }, { "name": "dmm.bpost.be", "asset_type": "URL", "location": "http://dmm.bpost.be", "group": "No bounty" }, { "name": "eshop.bpost.be", "asset_type": "URL", "location": "http://eshop.bpost.be", "group": "No bounty" }, { "name": "maxiresponse.bpost.be", "asset_type": "URL", "location": "http://maxiresponse.bpost.be", "group": "No bounty" }, { "name": "my.bpost.be", "asset_type": "URL", "location": "http://my.bpost.be", "group": "No bounty" }, { "name": "procuration.bpost.be", "asset_type": "URL", "location": "http://procuration.bpost.be", "group": "No bounty" }, { "name": "quickstamp-gb.bpost.be", "asset_type": "URL", "location": "http://quickstamp-gb.bpost.be", "group": "No bounty" }, { "name": "register.bpost.be", "asset_type": "URL", "location": "http://register.bpost.be", "group": "No bounty" }, { "name": "validationlist.bpost.be", "asset_type": "URL", "location": "http://validationlist.bpost.be", "group": "No bounty" }, { "name": "www.bpost.be", "asset_type": "URL", "location": "http://www.bpost.be", "group": "No bounty" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [ "Program URL contains a dummy path segment; production-program identity needs review.", "Every captured in-scope row is labeled No bounty by the platform." ] }, { "id": "intigriti-b89f92cb496b8747", "name": "Brazzers Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/aylo/brazzers-bbp", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/aylo/brazzers-bbp/tac/detail", "http_status": 200, "result": "terms_login_gate", "note": "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "terms_only", "scope_captured_at": "2026-10-03T15:49:12Z", "scope_source_urls": [ "https://app.intigriti.com/programs/aylo/brazzers-bbp/tac/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." ], "review_flags": [] }, { "id": "intigriti-3455bc1c56793e22", "name": "Capital.com", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/capitalcom/capitalcom", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:14Z", "scope_source_urls": [ "https://app.intigriti.com/programs/capitalcom/capitalcom/detail" ], "in_scope": [ { "name": "payment.backend-capital.com", "asset_type": "URL", "location": "http://payment.backend-capital.com", "group": "Tier 1" }, { "name": "*.backend-capital.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "capital.com/*", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "com.capital.trading", "asset_type": "iOS", "location": null, "group": "Tier 2" }, { "name": "com.capital.trading", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.capital.trading", "group": "Tier 2" }, { "name": "open-api.capital.com", "asset_type": "URL", "location": "http://open-api.capital.com", "group": "Tier 2" }, { "name": "*.capital.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.itcapital.io", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "aff.capital.com", "asset_type": "URL", "location": "http://aff.capital.com", "group": "No bounty" }, { "name": "go.capital.com", "asset_type": "URL", "location": "http://go.capital.com", "group": "No bounty" }, { "name": "register.capital.com", "asset_type": "URL", "location": "http://register.capital.com", "group": "No bounty" }, { "name": "careers.capital.com", "asset_type": "URL", "location": "http://careers.capital.com", "group": "No bounty" } ], "out_of_scope": [ { "name": "*affiliates.backend-capital.com", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*eduapp.backend-capital.com", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*education.backend-capital.com", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "help.capital.com", "asset_type": "URL", "location": "http://help.capital.com", "group": null }, { "name": "relocate-with-us.capital.com", "asset_type": "URL", "location": "http://relocate-with-us.capital.com", "group": null }, { "name": "3cxby.itcapital.io", "asset_type": "URL", "location": "http://3cxby.itcapital.io", "group": null }, { "name": "texis.itcapital.io", "asset_type": "URL", "location": "http://texis.itcapital.io", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-2310f52431fb92bd", "name": "Capture Our Flag", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/intigriti/captureourflag", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/intigriti/captureourflag/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:49:15Z", "scope_source_urls": [ "https://app.intigriti.com/programs/intigriti/captureourflag/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-470709229eebc322", "name": "Cloudways by DigitalOcean", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/digitalocean/cloudways", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:17Z", "scope_source_urls": [ "https://app.intigriti.com/programs/digitalocean/cloudways/detail" ], "in_scope": [ { "name": "*.cloudways.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "api.cloudways.com", "asset_type": "URL", "location": "http://api.cloudways.com", "group": "Tier 2" }, { "name": "developers.cloudways.com", "asset_type": "URL", "location": "http://developers.cloudways.com", "group": "Tier 2" }, { "name": "platform.cloudways.com", "asset_type": "URL", "location": "http://platform.cloudways.com", "group": "Tier 2" }, { "name": "unified.cloudways.com", "asset_type": "URL", "location": "http://unified.cloudways.com", "group": "Tier 2" }, { "name": "www.cloudways.com", "asset_type": "URL", "location": "http://www.cloudways.com", "group": "Tier 2" }, { "name": "css-tricks.com", "asset_type": "URL", "location": "http://css-tricks.com", "group": "Tier 3" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-21feb0f6bec3be88", "name": "CM.com", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/cmcom/cmcom", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:19Z", "scope_source_urls": [ "https://app.intigriti.com/programs/cmcom/cmcom/detail" ], "in_scope": [ { "name": "login.cm.com", "asset_type": "URL", "location": "http://login.cm.com", "group": "Tier 1" }, { "name": "*.ticketing.cm.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "api.cm.com", "asset_type": "URL", "location": "http://api.cm.com", "group": "Tier 2" }, { "name": "api.cmtelecom.com", "asset_type": "URL", "location": "http://api.cmtelecom.com", "group": "Tier 2" }, { "name": "cm.com/[locale]/app/*", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "cm.com/[locale]/register", "asset_type": "URL", "location": "http://cm.com/[locale]/register", "group": "Tier 2" }, { "name": "appmiral.com", "asset_type": "URL", "location": "http://appmiral.com", "group": "Tier 3" }, { "name": "building-blocks.com", "asset_type": "URL", "location": "http://building-blocks.com", "group": "Tier 3" }, { "name": "cm.com/app/messagingtrial/", "asset_type": "URL", "location": "http://cm.com/app/messagingtrial/", "group": "Tier 3" }, { "name": "cmcom.atlassian.net", "asset_type": "URL", "location": "http://cmcom.atlassian.net", "group": "Tier 3" }, { "name": "https://github.com/cmdotcom", "asset_type": "Other", "location": null, "group": "Tier 3" }, { "name": "www.cm.com", "asset_type": "URL", "location": "http://www.cm.com", "group": "Tier 3" }, { "name": "*.appmiral.com", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "*.cm.com", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "*.cmtelecom.com", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "1199521324", "asset_type": "iOS", "location": "https://apps.apple.com/app/1199521324", "group": "No bounty" }, { "name": "1579530451", "asset_type": "iOS", "location": "https://apps.apple.com/app/1579530451", "group": "No bounty" }, { "name": "com.cm.cashregister", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.cm.cashregister", "group": "No bounty" }, { "name": "com.ticketflow.ticketscanner", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.ticketflow.ticketscanner", "group": "No bounty" }, { "name": "demo.globalticket.com/*", "asset_type": "Wildcard", "location": null, "group": "No bounty" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-a36852fc9ef38048", "name": "Colruyt Group", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/colruyt/colruytgroupidcheck", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/colruyt/colruytgroupidcheck/tac/detail", "http_status": 200, "result": "terms_login_gate", "note": "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "terms_only", "scope_captured_at": "2026-10-03T15:49:21Z", "scope_source_urls": [ "https://app.intigriti.com/programs/colruyt/colruytgroupidcheck/tac/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." ], "review_flags": [] }, { "id": "intigriti-e01da94530cd8bf0", "name": "Coveo Public Bug Bounty", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/coveo/coveopublicbugbounty", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/coveo/coveopublicbugbounty/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:49:23Z", "scope_source_urls": [ "https://app.intigriti.com/programs/coveo/coveopublicbugbounty/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-97eafb499da2fdb9", "name": "DataCamp", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/datacamp/datacamp", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:25Z", "scope_source_urls": [ "https://app.intigriti.com/programs/datacamp/datacamp/detail" ], "in_scope": [ { "name": "profiles-api.datacamp.com", "asset_type": "URL", "location": "http://profiles-api.datacamp.com", "group": "Tier 2" }, { "name": "app.datacamp.com/certification", "asset_type": "URL", "location": "http://app.datacamp.com/certification", "group": "Tier 2" }, { "name": "app.datacamp.com/groups", "asset_type": "URL", "location": "http://app.datacamp.com/groups", "group": "Tier 2" }, { "name": "app.datacamp.com/learn", "asset_type": "URL", "location": "http://app.datacamp.com/learn", "group": "Tier 2" }, { "name": "assessment-api.datacamp.com", "asset_type": "URL", "location": "http://assessment-api.datacamp.com", "group": "Tier 2" }, { "name": "assessment-v2.datacamp.com", "asset_type": "URL", "location": "http://assessment-v2.datacamp.com ", "group": "Tier 2" }, { "name": "assessment.datacamp.com", "asset_type": "URL", "location": "http://assessment.datacamp.com", "group": "Tier 2" }, { "name": "campus.datacamp.com", "asset_type": "URL", "location": "http://campus.datacamp.com", "group": "Tier 2" }, { "name": "com.datacamp", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.datacamp", "group": "Tier 2" }, { "name": "https://apps.apple.com/au/app/datacamp-learn-data-science/id1263413087", "asset_type": "iOS", "location": "https://apps.apple.com/au/app/datacamp-learn-data-science/id1263413087", "group": "Tier 2" }, { "name": "practice.datacamp.com", "asset_type": "URL", "location": "http://practice.datacamp.com", "group": "Tier 2" }, { "name": "projects.datacamp.com", "asset_type": "URL", "location": "http://projects.datacamp.com", "group": "Tier 2" }, { "name": "www.datacamp.com", "asset_type": "URL", "location": "http://www.datacamp.com", "group": "Tier 2" }, { "name": "www.datacamp.com/datalab", "asset_type": "URL", "location": "http://www.datacamp.com/datalab", "group": "Tier 2" }, { "name": "*.datacamp.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" } ], "out_of_scope": [ { "name": "*.it.datacamp.com", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "app.datacamp.com/recruit", "asset_type": "URL", "location": "http://app.datacamp.com/recruit", "group": null }, { "name": "ast-viewer.datacamp.com", "asset_type": "URL", "location": "http://ast-viewer.datacamp.com", "group": null }, { "name": "confluence.datacamp.com", "asset_type": "URL", "location": "http://confluence.datacamp.com", "group": null }, { "name": "dccertified.datacamp.com", "asset_type": "URL", "location": "http://dccertified.datacamp.com", "group": null }, { "name": "intranet.datacamp.com", "asset_type": "URL", "location": "http://intranet.datacamp.com", "group": null }, { "name": "jira.datacamp.com", "asset_type": "URL", "location": "http://jira.datacamp.com", "group": null }, { "name": "links.datacamp.com", "asset_type": "URL", "location": "http://links.datacamp.com", "group": null }, { "name": "rdocumentation.datacamp.com", "asset_type": "URL", "location": "http://rdocumentation.datacamp.com", "group": null }, { "name": "signature.datacamp.com", "asset_type": "URL", "location": "http://signature.datacamp.com", "group": null }, { "name": "status.datacamp.com", "asset_type": "URL", "location": "http://status.datacamp.com", "group": null }, { "name": "support.datacamp.com", "asset_type": "URL", "location": "http://support.datacamp.com", "group": null }, { "name": "talent-jobs-api.datacamp.com", "asset_type": "URL", "location": "http://talent-jobs-api.datacamp.com", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-e4396437b33f824f", "name": "Daytona Bug Bounty", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/daytona/daytonabugbounty", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/daytona/daytonabugbounty/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:49:27Z", "scope_source_urls": [ "https://app.intigriti.com/programs/daytona/daytonabugbounty/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-3910db8612daa791", "name": "De Morgen", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/dpgm/demorgen", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:29Z", "scope_source_urls": [ "https://app.intigriti.com/programs/dpgm/demorgen/detail" ], "in_scope": [ { "name": "myaccount.demorgen.be", "asset_type": "URL", "location": "http://myaccount.demorgen.be", "group": "Tier 2" }, { "name": "www.demorgen.be", "asset_type": "URL", "location": "http://www.demorgen.be", "group": "Tier 2" }, { "name": "www.demorgen.be/abonnementen", "asset_type": "URL", "location": "http://www.demorgen.be/abonnementen", "group": "Tier 2" }, { "name": "*.demorgen.be", "asset_type": "Wildcard", "location": null, "group": "Tier 3" } ], "out_of_scope": [ { "name": "actie.demorgen.be", "asset_type": "URL", "location": "http://actie.demorgen.be", "group": null }, { "name": "demorgen.be/inloggen", "asset_type": "URL", "location": "http://demorgen.be/inloggen", "group": null }, { "name": "demorgen.be/login", "asset_type": "URL", "location": "http://demorgen.be/login", "group": null }, { "name": "demorgen.be/registreren", "asset_type": "URL", "location": "http://demorgen.be/registreren", "group": null }, { "name": "demorgen.be/service", "asset_type": "URL", "location": "http://demorgen.be/service", "group": null }, { "name": "abonnement.demorgen.be", "asset_type": "URL", "location": "http://abonnement.demorgen.be", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-c825fcbd13fba543", "name": "De Volkskrant", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/dpgm/devolkskrant", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:30Z", "scope_source_urls": [ "https://app.intigriti.com/programs/dpgm/devolkskrant/detail" ], "in_scope": [ { "name": "myaccount.volkskrant.nl", "asset_type": "URL", "location": "http://myaccount.volkskrant.nl", "group": "Tier 2" }, { "name": "www.volkskrant.nl", "asset_type": "URL", "location": "http://www.volkskrant.nl", "group": "Tier 2" }, { "name": "www.volkskrant.nl/abonnementen", "asset_type": "URL", "location": "http://www.volkskrant.nl/abonnementen", "group": "Tier 2" }, { "name": "*.volkskrant.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 3" } ], "out_of_scope": [ { "name": "actie.volkskrant.nl", "asset_type": "URL", "location": "http://actie.volkskrant.nl", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-6720415fe466096d", "name": "Delen Private Bank", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/delenprivatebank/privatebankdelen", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:32Z", "scope_source_urls": [ "https://app.intigriti.com/programs/delenprivatebank/privatebankdelen/detail" ], "in_scope": [ { "name": "api.digital.delen.be", "asset_type": "URL", "location": "http://api.digital.delen.be ", "group": "Tier 2" }, { "name": "api.digital.delen.lu", "asset_type": "URL", "location": "http://api.digital.delen.lu ", "group": "Tier 2" }, { "name": "app.delen.be", "asset_type": "URL", "location": "http://app.delen.be ", "group": "Tier 2" }, { "name": "app.delen.ch", "asset_type": "URL", "location": "http://app.delen.ch ", "group": "Tier 2" }, { "name": "app.delen.lu", "asset_type": "URL", "location": "http://app.delen.lu ", "group": "Tier 2" }, { "name": "auth.digital.delen.be", "asset_type": "URL", "location": "http://auth.digital.delen.be ", "group": "Tier 2" }, { "name": "auth.digital.delen.lu", "asset_type": "URL", "location": "http://auth.digital.delen.lu ", "group": "Tier 2" }, { "name": "be.delen.digital", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=be.delen.digital", "group": "Tier 2" }, { "name": "delen/id1064839588", "asset_type": "iOS", "location": "https://apps.apple.com/app/delen/id1064839588", "group": "Tier 2" }, { "name": "login.delen.be", "asset_type": "URL", "location": "http://login.delen.be ", "group": "Tier 2" }, { "name": "login.delen.ch", "asset_type": "URL", "location": "http://login.delen.ch ", "group": "Tier 2" }, { "name": "login.delen.lu", "asset_type": "URL", "location": "http://login.delen.lu ", "group": "Tier 2" }, { "name": "login.oyens.com", "asset_type": "URL", "location": "http://login.oyens.com", "group": "Tier 2" }, { "name": "status.delen.be", "asset_type": "URL", "location": "http://status.delen.be ", "group": "Tier 2" }, { "name": "sts.delen.be", "asset_type": "URL", "location": "http://sts.delen.be ", "group": "Tier 2" }, { "name": "www.cadelam.be", "asset_type": "URL", "location": "http://www.cadelam.be ", "group": "Tier 2" }, { "name": "www.cadelux.lu/en", "asset_type": "URL", "location": "http://www.cadelux.lu/en ", "group": "Tier 2" }, { "name": "www.delen.bank", "asset_type": "URL", "location": "http://www.delen.bank", "group": "Tier 2" }, { "name": "www.delen.be/en", "asset_type": "URL", "location": "http://www.delen.be/en ", "group": "Tier 2" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-828a6d2b7d8511ec", "name": "DigitalOcean", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/digitalocean/digitalocean", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:34Z", "scope_source_urls": [ "https://app.intigriti.com/programs/digitalocean/digitalocean/detail" ], "in_scope": [ { "name": "*.digitalocean.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "169.254.169.254", "asset_type": "IP Range", "location": null, "group": "Tier 2" }, { "name": "api.digitalocean.com", "asset_type": "URL", "location": "http://api.digitalocean.com", "group": "Tier 2" }, { "name": "cloud.digitalocean.com", "asset_type": "URL", "location": "http://cloud.digitalocean.com", "group": "Tier 2" }, { "name": "amd.digitalocean.com", "asset_type": "URL", "location": "http://amd.digitalocean.com", "group": "Tier 2" }, { "name": "inference.do-ai.run", "asset_type": "URL", "location": "http://inference.do-ai.run", "group": "Tier 2" }, { "name": "marketplace.digitalocean.com", "asset_type": "URL", "location": "http://marketplace.digitalocean.com", "group": "Tier 2" }, { "name": "www.digitalocean.com", "asset_type": "URL", "location": "http://www.digitalocean.com", "group": "Tier 3" }, { "name": "digitaloceanmirrors.com", "asset_type": "URL", "location": "http://digitaloceanmirrors.com", "group": "Tier 3" }, { "name": "digitaloceanpartners.com", "asset_type": "URL", "location": "http://digitaloceanpartners.com", "group": "Tier 3" }, { "name": "digitaloceanstatus.com", "asset_type": "URL", "location": "http://digitaloceanstatus.com", "group": "Tier 3" }, { "name": "digitaloceantest.com", "asset_type": "URL", "location": "http://digitaloceantest.com", "group": "Tier 3" }, { "name": "do.co", "asset_type": "URL", "location": "http://do.co", "group": "Tier 3" }, { "name": "hackathon-tracker.digitalocean.com", "asset_type": "URL", "location": "http://hackathon-tracker.digitalocean.com", "group": "Tier 3" }, { "name": "hacktoberfest.com", "asset_type": "URL", "location": "http://hacktoberfest.com", "group": "Tier 3" }, { "name": "paperspace.com", "asset_type": "URL", "location": "http://paperspace.com", "group": "No bounty" }, { "name": "https://github.com/digitalocean/do-agent", "asset_type": "Source code", "location": "https://github.com/digitalocean/do-agent", "group": "No bounty" }, { "name": "https://github.com/digitalocean/droplet-agent", "asset_type": "Source code", "location": "https://github.com/digitalocean/droplet-agent", "group": "No bounty" }, { "name": "https://github.com/digitalocean/doctl", "asset_type": "Source code", "location": "https://github.com/digitalocean/doctl", "group": "No bounty" }, { "name": "https://github.com/digitalocean/terraform-provider-digitalocean", "asset_type": "Source code", "location": "https://github.com/digitalocean/terraform-provider-digitalocean", "group": "No bounty" } ], "out_of_scope": [ { "name": "*.snapshooter.com", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "https://github.com/digitalocean/action-doctl", "asset_type": "Source code", "location": "https://github.com/digitalocean/action-doctl", "group": null }, { "name": "https://github.com/digitalocean/godo", "asset_type": "Source code", "location": "https://github.com/digitalocean/godo", "group": null }, { "name": "https://github.com/digitalocean/pydo", "asset_type": "Source code", "location": "https://github.com/digitalocean/pydo", "group": null }, { "name": "https://github.com/digitalocean/go-nbd", "asset_type": "Source code", "location": "https://github.com/digitalocean/go-nbd", "group": null }, { "name": "https://github.com/digitalocean/do-markdownit", "asset_type": "Source code", "location": "https://github.com/digitalocean/do-markdownit", "group": null }, { "name": "anchor.digitalocean.com", "asset_type": "URL", "location": "http://anchor.digitalocean.com", "group": null }, { "name": "brand.digitalocean.com", "asset_type": "URL", "location": "http://brand.digitalocean.com", "group": null }, { "name": "cloudsupport.digitalocean.com", "asset_type": "URL", "location": "http://cloudsupport.digitalocean.com", "group": null }, { "name": "deploy.digitalocean.com", "asset_type": "URL", "location": "http://deploy.digitalocean.com", "group": null }, { "name": "email.digitalocean.com", "asset_type": "URL", "location": "http://email.digitalocean.com", "group": null }, { "name": "events.digitalocean.com", "asset_type": "URL", "location": "http://events.digitalocean.com", "group": null }, { "name": "go.digitalocean.com", "asset_type": "URL", "location": "http://go.digitalocean.com", "group": null }, { "name": "groove.digitalocean.com", "asset_type": "URL", "location": "http://groove.digitalocean.com", "group": null }, { "name": "helpdesk.digitalocean.com", "asset_type": "URL", "location": "http://helpdesk.digitalocean.com", "group": null }, { "name": "ideas.digitalocean.com", "asset_type": "URL", "location": "http://ideas.digitalocean.com", "group": null }, { "name": "investor.digitalocean.com", "asset_type": "URL", "location": "http://investor.digitalocean.com", "group": null }, { "name": "investors.digitalocean.com", "asset_type": "URL", "location": "http://investors.digitalocean.com", "group": null }, { "name": "ir.digitalocean.com", "asset_type": "URL", "location": "http://ir.digitalocean.com", "group": null }, { "name": "mirrors.digitalocean.com", "asset_type": "URL", "location": "http://mirrors.digitalocean.com", "group": null }, { "name": "pilot.digitalocean.com", "asset_type": "URL", "location": "http://pilot.digitalocean.com", "group": null }, { "name": "rewards.digitalocean.com", "asset_type": "URL", "location": "http://rewards.digitalocean.com", "group": null }, { "name": "segment.digitalocean.com", "asset_type": "URL", "location": "http://segment.digitalocean.com", "group": null }, { "name": "status.digitalocean.com", "asset_type": "URL", "location": "http://status.digitalocean.com", "group": null }, { "name": "tracking.digitalocean.com", "asset_type": "URL", "location": "http://tracking.digitalocean.com", "group": null }, { "name": "waves.digitalocean.com", "asset_type": "URL", "location": "http://waves.digitalocean.com", "group": null }, { "name": "*.db.ondigitalocean.com", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*.db1.ondigitalocean.com", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*.digitaloceanspaces.com", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*.doserverless.co", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*.k8s.ondigitalocean.com", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*.ondigitalocean.app", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "registry.digitalocean.com/*", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "Assets created by other DigitalOcean customers", "asset_type": "Other", "location": null, "group": null }, { "name": "*.doserverless-dev3.io", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*.ondbaasdev.com", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*.onstagingocean.app", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "Marketplace Apps and Add-Ons", "asset_type": "Other", "location": null, "group": null }, { "name": "Other DigitalOcean open source projects not listed", "asset_type": "Other", "location": null, "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-247b5b0bf0908a57", "name": "Doccle Bug Bounty program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/doccle/doccle", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/doccle/doccle/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:49:36Z", "scope_source_urls": [ "https://app.intigriti.com/programs/doccle/doccle/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-a9d9849de0a71f23", "name": "DPG Media", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/dpgm/dpgmedia", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:38Z", "scope_source_urls": [ "https://app.intigriti.com/programs/dpgm/dpgmedia/detail" ], "in_scope": [ { "name": "*.dpgmedia.be", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.dpgmedia.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "Any related DPG media domain", "asset_type": "Other", "location": null, "group": "Tier 3" } ], "out_of_scope": [ { "name": "visitors.dpgmedia.be", "asset_type": "URL", "location": "http://visitors.dpgmedia.be", "group": null }, { "name": "Qualifio Subdomains", "asset_type": "Other", "location": null, "group": null }, { "name": "actie.*.*", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "cadeau.videoland.com", "asset_type": "URL", "location": "http://cadeau.videoland.com", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-91b2b9c5cf81d988", "name": "Dropbox Bug Bounty", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/dropbox/dropbox", "bounty_classification": "verified_policy", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "dropbox-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:55:58Z", "scope_source_urls": [ "https://app.intigriti.com/programs/dropbox/dropbox/detail" ], "in_scope": [ { "name": "Dropbox.com", "asset_type": "URL", "location": "http://Dropbox.com", "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "sign.dropbox.com", "asset_type": "URL", "location": "http://sign.dropbox.com", "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "HelloSign.com", "asset_type": "URL", "location": "http://HelloSign.com", "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "dash.ai", "asset_type": "URL", "location": "http://dash.ai", "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "dash.dropbox.com", "asset_type": "Other", "location": null, "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "api.dropbox.com", "asset_type": "URL", "location": "http://api.dropbox.com", "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Dropbox Desktop Application", "asset_type": "Other", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "327630330", "asset_type": "iOS", "location": "https://apps.apple.com/app/327630330", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "6450553960", "asset_type": "iOS", "location": "https://apps.apple.com/app/6450553960", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "1080074001", "asset_type": "iOS", "location": "https://apps.apple.com/app/1080074001", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "com.dropbox.dash", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.dropbox.dash", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "com.dropbox.android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.dropbox.android", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "HelloFax.com", "asset_type": "URL", "location": "http://HelloFax.com", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "docsend.com", "asset_type": "URL", "location": "http://docsend.com", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "app.Reclaim.ai", "asset_type": "URL", "location": "http://app.Reclaim.ai", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "dropbox.com/paper", "asset_type": "URL", "location": "http://dropbox.com/paper", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.dropbox.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.dropboxer.net", "asset_type": "Wildcard", "location": null, "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.dropboxforum.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.dropboxpartners.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.hellofax.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.docsend.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.reclaim.ai", "asset_type": "Wildcard", "location": null, "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.helloworks.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.hellosign.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.dash.ai", "asset_type": "Wildcard", "location": null, "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "community.dropbox.com", "asset_type": "URL", "location": "http://community.dropbox.com", "group": null, "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "replay.dropbox.com", "asset_type": "URL", "location": "http://replay.dropbox.com", "group": null, "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Boxcryptor", "asset_type": "Other", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Formswift", "asset_type": "Other", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Dropbox Passwords", "asset_type": "Other", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Dropbox Capture Windows Desktop App", "asset_type": "Other", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Dropbox Capture macOS Desktop App", "asset_type": "Other", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "com.dropbox.paper", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.dropbox.paper", "group": null, "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "1126623662", "asset_type": "iOS", "location": "https://apps.apple.com/app/1126623662", "group": null, "source_ids": [ "assets-scope-2026-10-03" ] } ], "limitations": [ "Published asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope." ], "review_flags": [] }, { "id": "intigriti-beabd2ad0581e1a0", "name": "Dstny", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/dstny/dstnybugbounty", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:39Z", "scope_source_urls": [ "https://app.intigriti.com/programs/dstny/dstnybugbounty/detail" ], "in_scope": [ { "name": "https://docs.google.com/spreadsheets/d/1CzscF67guNFMy-L_v79ng2mW36dQWb2rQSbK540j-ys/edit?gid=1208823298#gid=1208823298", "asset_type": "Other", "location": null, "group": "Tier 1" }, { "name": "https://docs.google.com/spreadsheets/d/1CzscF67guNFMy-L_v79ng2mW36dQWb2rQSbK540j-ys/edit?gid=1281087877#gid=1281087877", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "https://docs.google.com/spreadsheets/d/1CzscF67guNFMy-L_v79ng2mW36dQWb2rQSbK540j-ys/edit?gid=1767553194#gid=1767553194", "asset_type": "Other", "location": null, "group": "Tier 3" }, { "name": "https://docs.google.com/spreadsheets/d/1CzscF67guNFMy-L_v79ng2mW36dQWb2rQSbK540j-ys/edit?gid=1817816238#gid=1817816238", "asset_type": "Other", "location": null, "group": "No bounty" } ], "out_of_scope": [ { "name": "https://docs.google.com/spreadsheets/d/1CzscF67guNFMy-L_v79ng2mW36dQWb2rQSbK540j-ys/edit?gid=1370437389#gid=1370437389", "asset_type": "Other", "location": null, "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-74e2d3d36d7b75ef", "name": "eHealth Hub VZN KUL", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/uz%20leuven/ehealthhub&meta-hubvznkul", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:41Z", "scope_source_urls": [ "https://app.intigriti.com/programs/uz%20leuven/ehealthhub&meta-hubvznkul/detail" ], "in_scope": [ { "name": "hub.vznkul.be/*", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "hub.vznkul.be/services/interhub/InterHubService", "asset_type": "URL", "location": "http://hub.vznkul.be/services/interhub/InterHubService", "group": "Tier 2" }, { "name": "hub.vznkul.be/services/intrahub/IntraHubService", "asset_type": "URL", "location": "http://hub.vznkul.be/services/intrahub/IntraHubService", "group": "Tier 2" }, { "name": "hubacc.vznkul.be/*", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "hubacc.vznkul.be/services/acceptance/interhub/InterHubService", "asset_type": "URL", "location": "http://hubacc.vznkul.be/services/acceptance/interhub/InterHubService", "group": "Tier 2" }, { "name": "hubacc.vznkul.be/services/acceptance/intrahub/IntraHubService", "asset_type": "URL", "location": "http://hubacc.vznkul.be/services/acceptance/intrahub/IntraHubService", "group": "Tier 2" } ], "out_of_scope": [ { "name": "www.vznkul.be", "asset_type": "URL", "location": "http://www.vznkul.be", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-0ca8029dcf9778cb", "name": "EURid", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/eurid/eurid", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:43Z", "scope_source_urls": [ "https://app.intigriti.com/programs/eurid/eurid/detail" ], "in_scope": [ { "name": "my.eurid.eu", "asset_type": "URL", "location": "http://my.eurid.eu", "group": "Tier 2" }, { "name": "*.das.eu", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.dns.eu", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.eurid.eu", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.nic.eu", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.registry.eu", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.whois.eu", "asset_type": "Wildcard", "location": null, "group": "Tier 2" } ], "out_of_scope": [ { "name": "www.20years.eurid.eu", "asset_type": "URL", "location": "http://www.20years.eurid.eu", "group": null }, { "name": "*.yadifa.eu", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "YADIFA authoritative name server", "asset_type": "Other", "location": null, "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-499c24019a091619", "name": "Exoscale Bug Bounty", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/exoscale/excoscalebugbounty", "bounty_classification": "verified_policy", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "exoscale-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:02Z", "scope_source_urls": [ "https://app.intigriti.com/programs/exoscale/excoscalebugbounty/detail" ], "in_scope": [ { "name": "https://portal.exoscale.com/", "asset_type": "URL", "location": "https://portal.exoscale.com/", "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://api-*exoscale.com/v2", "asset_type": "Wildcard", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://sos-*.exo.io", "asset_type": "Wildcard", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://sks-*.exo.io", "asset_type": "Wildcard", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "*.internal.exoscale.ch", "asset_type": "Wildcard", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://www.exoscale.com/", "asset_type": "URL", "location": "https://www.exoscale.com/", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://community.exoscale.com/", "asset_type": "URL", "location": "https://community.exoscale.com/", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [ { "name": "https://changelog.exoscale.com/", "asset_type": "URL", "location": "https://changelog.exoscale.com/", "group": null, "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://exoscalestatus.com/", "asset_type": "URL", "location": "https://exoscalestatus.com/", "group": null, "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://academy.exoscale.com/", "asset_type": "URL", "location": "https://academy.exoscale.com/", "group": null, "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "https://jobs.exoscale.com/", "asset_type": "URL", "location": "https://jobs.exoscale.com/", "group": null, "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "CDN service", "asset_type": "Other", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Marketplace products", "asset_type": "Other", "location": null, "group": null, "source_ids": [ "assets-scope-2026-10-03" ] } ], "limitations": [ "Published asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope." ], "review_flags": [] }, { "id": "intigriti-1c92df8e83902323", "name": "Farfetch Bug Bounty", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/farfetch/farfetchbugbounty", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/farfetch/farfetchbugbounty/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:49:45Z", "scope_source_urls": [ "https://app.intigriti.com/programs/farfetch/farfetchbugbounty/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-158f7f944718a82f", "name": "Fing Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/lansweeper/fing", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:47Z", "scope_source_urls": [ "https://app.intigriti.com/programs/lansweeper/fing/detail" ], "in_scope": [ { "name": "service.fing.com", "asset_type": "URL", "location": "http://service.fing.com", "group": "Tier 2" }, { "name": "app.fing.com", "asset_type": "URL", "location": "http://app.fing.com", "group": "Tier 3" }, { "name": "Fing desktop", "asset_type": "URL", "location": "http://Fing desktop", "group": "Tier 3" }, { "name": "www.fing.com*", "asset_type": "Wildcard", "location": null, "group": "No bounty" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-e2f3e3ddec74de2c", "name": "Fortnox Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/fortnox/fortnox", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/fortnox/fortnox/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:49:49Z", "scope_source_urls": [ "https://app.intigriti.com/programs/fortnox/fortnox/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-771e6e682c937142", "name": "Grafana Labs", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/grafanalabs/grafanaossbbp", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:50Z", "scope_source_urls": [ "https://app.intigriti.com/programs/grafanalabs/grafanaossbbp/detail" ], "in_scope": [ { "name": "https://github.com/grafana/loki", "asset_type": "Source code", "location": "https://github.com/grafana/loki", "group": "Tier 1" }, { "name": "https://github.com/grafana/mimir", "asset_type": "Source code", "location": "https://github.com/grafana/mimir", "group": "Tier 1" }, { "name": "https://github.com/grafana/grafana", "asset_type": "Source code", "location": "https://github.com/grafana/grafana", "group": "Tier 1" }, { "name": "https://github.com/grafana/pyroscope", "asset_type": "Source code", "location": "https://github.com/grafana/pyroscope", "group": "Tier 1" }, { "name": "https://github.com/grafana/tempo", "asset_type": "Source code", "location": "https://github.com/grafana/tempo", "group": "Tier 1" }, { "name": "https://github.com/grafana/*", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "Public Preview feature toggles in Tier 1 products", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Reports utilising feature toggles", "asset_type": "Other", "location": null, "group": "No bounty" }, { "name": "Non-Core Grafana Plugins", "asset_type": "Other", "location": null, "group": "No bounty" } ], "out_of_scope": [ { "name": "*.grafana.com", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*.grafana.net", "asset_type": "Wildcard", "location": null, "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-a3ffa1f1256a691e", "name": "Here Technologies", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/heretechnologies/heretechnologies", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:52Z", "scope_source_urls": [ "https://app.intigriti.com/programs/heretechnologies/heretechnologies/detail" ], "in_scope": [ { "name": "*.account.api.here.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.account.here.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.mobilitygraph.hereapi.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.router.hereapi.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.scbe.api.here.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.subp-router.hereapi.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "955837609", "asset_type": "iOS", "location": "https://apps.apple.com/app/955837609", "group": "Tier 2" }, { "name": "com.here.app.maps", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.here.app.maps", "group": "Tier 2" }, { "name": "https://jaguar.here.com", "asset_type": "URL", "location": "https://jaguar.here.com", "group": "Tier 2" }, { "name": "https://landrover.here.com", "asset_type": "URL", "location": "https://landrover.here.com", "group": "Tier 2" }, { "name": "Leaked/compromised employee accounts *.here.com", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "*.here.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.hereapi.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-297bce59fcbb3886", "name": "Het Laatste Nieuws", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/dpgm/hetlaatstenieuws", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:54Z", "scope_source_urls": [ "https://app.intigriti.com/programs/dpgm/hetlaatstenieuws/detail" ], "in_scope": [ { "name": "hln.be/inloggen", "asset_type": "URL", "location": "http://hln.be/inloggen", "group": "Tier 2" }, { "name": "hln.be/login", "asset_type": "URL", "location": "http://hln.be/login", "group": "Tier 2" }, { "name": "hln.be/registreren", "asset_type": "URL", "location": "http://hln.be/registreren", "group": "Tier 2" }, { "name": "hln.be", "asset_type": "URL", "location": "http://hln.be", "group": "Tier 2" }, { "name": "myaccount.hln.be", "asset_type": "URL", "location": "http://myaccount.hln.be", "group": "Tier 2" }, { "name": "www.hln.be", "asset_type": "URL", "location": "http://www.hln.be", "group": "Tier 2" }, { "name": "*.hln.be", "asset_type": "Wildcard", "location": null, "group": "Tier 3" } ], "out_of_scope": [ { "name": "actie.hln.be", "asset_type": "URL", "location": "http://actie.hln.be", "group": null }, { "name": "hln.be/service", "asset_type": "URL", "location": "http://hln.be/service", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-5bfd84aa5993ae61", "name": "Het Parool", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/dpgm/hetparool", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:56Z", "scope_source_urls": [ "https://app.intigriti.com/programs/dpgm/hetparool/detail" ], "in_scope": [ { "name": "myaccount.parool.nl", "asset_type": "URL", "location": "http://myaccount.parool.nl", "group": "Tier 2" }, { "name": "shop.parool.nl", "asset_type": "URL", "location": "http://shop.parool.nl", "group": "Tier 2" }, { "name": "webwinkel.parool.nl", "asset_type": "URL", "location": "http://webwinkel.parool.nl", "group": "Tier 2" }, { "name": "www.parool.nl", "asset_type": "URL", "location": "http://www.parool.nl", "group": "Tier 2" }, { "name": "www.parool.nl/abonnementen", "asset_type": "URL", "location": "http://www.parool.nl/abonnementen", "group": "Tier 2" }, { "name": "*.parool.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 3" } ], "out_of_scope": [ { "name": "actie.parool.nl", "asset_type": "URL", "location": "http://actie.parool.nl", "group": null }, { "name": "parool.nl/inloggen", "asset_type": "URL", "location": "http://parool.nl/inloggen", "group": null }, { "name": "parool.nl/login", "asset_type": "URL", "location": "http://parool.nl/login", "group": null }, { "name": "parool.nl/registreren", "asset_type": "URL", "location": "http://parool.nl/registreren", "group": null }, { "name": "parool.nl/service", "asset_type": "URL", "location": "http://parool.nl/service", "group": null }, { "name": "abonnement.parool.nl", "asset_type": "URL", "location": "http://abonnement.parool.nl", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-4a06d3848424d3ea", "name": "Housing Application (huisvestingsapp) Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/kuleuven/huisvesting", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:57Z", "scope_source_urls": [ "https://app.intigriti.com/programs/kuleuven/huisvesting/detail" ], "in_scope": [ { "name": "https://www.kuleuven.be/sapredir/huisvesting", "asset_type": "URL", "location": "https://www.kuleuven.be/sapredir/huisvesting", "group": "Tier 2" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-84d7a98b220b8a42", "name": "Humo", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/dpgm/humo", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:49:59Z", "scope_source_urls": [ "https://app.intigriti.com/programs/dpgm/humo/detail" ], "in_scope": [ { "name": "humo.be/registreren", "asset_type": "URL", "location": "http://humo.be/registreren", "group": "Tier 2" }, { "name": "myaccount.humo.be", "asset_type": "URL", "location": "http://myaccount.humo.be", "group": "Tier 2" }, { "name": "shop.humo.be", "asset_type": "URL", "location": "http://shop.humo.be", "group": "Tier 2" }, { "name": "www.humo.be", "asset_type": "URL", "location": "http://www.humo.be", "group": "Tier 2" }, { "name": "www.humo.be/abonnementen", "asset_type": "URL", "location": "http://www.humo.be/abonnementen", "group": "Tier 2" }, { "name": "*.humo.be", "asset_type": "Wildcard", "location": null, "group": "Tier 3" } ], "out_of_scope": [ { "name": "humo.be/inloggen", "asset_type": "URL", "location": "http://humo.be/inloggen", "group": null }, { "name": "humo.be/login", "asset_type": "URL", "location": "http://humo.be/login", "group": null }, { "name": "humo.be/service", "asset_type": "URL", "location": "http://humo.be/service", "group": null }, { "name": "abonnement.humo.be", "asset_type": "URL", "location": "http://abonnement.humo.be", "group": null }, { "name": "actie.humo.be", "asset_type": "URL", "location": "http://actie.humo.be", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-d32f03c94f468710", "name": "ICI PARIS XL", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/aswatson/iciparisxl", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:01Z", "scope_source_urls": [ "https://app.intigriti.com/programs/aswatson/iciparisxl/detail" ], "in_scope": [ { "name": "www.iciparisxl.nl", "asset_type": "URL", "location": "http://www.iciparisxl.nl", "group": "Tier 1" }, { "name": "www.iciparisxl.be", "asset_type": "URL", "location": "http://www.iciparisxl.be", "group": "Tier 1" }, { "name": "www.iciparisxl.lu", "asset_type": "URL", "location": "http://www.iciparisxl.lu", "group": "Tier 1" }, { "name": "ICI Paris XL Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.iciparisxl.app", "group": "Tier 1" }, { "name": "ICI Paris XL iOS", "asset_type": "iOS", "location": "https://apps.apple.com/nl/app/ici-paris-xl-beauty/id1061895392", "group": "Tier 1" }, { "name": "app.iciparisxl.be", "asset_type": "URL", "location": "http://app.iciparisxl.be", "group": "Tier 1" }, { "name": "app.iciparisxl.lu", "asset_type": "URL", "location": "http://app.iciparisxl.lu", "group": "Tier 1" }, { "name": "app.iciparisxl.nl", "asset_type": "URL", "location": "http://app.iciparisxl.nl", "group": "Tier 1" }, { "name": "media.iciparisxl.lu", "asset_type": "URL", "location": "http://media.iciparisxl.lu", "group": "Tier 1" }, { "name": "media.iciparisxl.nl", "asset_type": "URL", "location": "http://media.iciparisxl.nl", "group": "Tier 1" }, { "name": "media.iciparisxl.be", "asset_type": "URL", "location": "http://media.iciparisxl.be", "group": "Tier 1" }, { "name": "api.iciparisxl.lu", "asset_type": "URL", "location": "http://api.iciparisxl.lu", "group": "Tier 1" }, { "name": "api.iciparisxl.nl", "asset_type": "URL", "location": "http://api.iciparisxl.nl", "group": "Tier 1" }, { "name": "api.iciparisxl.be", "asset_type": "URL", "location": "http://api.iciparisxl.be", "group": "Tier 1" }, { "name": "www.iciparisxl.com", "asset_type": "URL", "location": "http://www.iciparisxl.com", "group": "Tier 4" }, { "name": "xlence.iciparisxl.nl", "asset_type": "URL", "location": "http://xlence.iciparisxl.nl", "group": "Tier 4" }, { "name": "newsletter.iciparisxl.nl", "asset_type": "URL", "location": "http://newsletter.iciparisxl.nl", "group": "Tier 4" }, { "name": "newsletter-feedback.iciparisxl.nl", "asset_type": "URL", "location": "http://newsletter-feedback.iciparisxl.nl", "group": "Tier 4" }, { "name": "beauty-and-you.iciparisxl.nl", "asset_type": "URL", "location": "http://beauty-and-you.iciparisxl.nl", "group": "Tier 4" }, { "name": "folder.iciparisxl.nl", "asset_type": "URL", "location": "http://folder.iciparisxl.nl", "group": "Tier 4" }, { "name": "folders.iciparisxl.nl", "asset_type": "URL", "location": "http://folders.iciparisxl.nl", "group": "Tier 4" }, { "name": "edition.iciparisxl.nl", "asset_type": "URL", "location": "http://edition.iciparisxl.nl", "group": "Tier 4" }, { "name": "servicefr.iciparisxl.be", "asset_type": "URL", "location": "http://servicefr.iciparisxl.be", "group": "Tier 4" }, { "name": "wifi-in-store.iciparisxl.nl", "asset_type": "URL", "location": "http://wifi-in-store.iciparisxl.nl", "group": "Tier 4" }, { "name": "wifi-in-store.iciparisxl.lu", "asset_type": "URL", "location": "http://wifi-in-store.iciparisxl.lu", "group": "Tier 4" }, { "name": "wifi-in-store.iciparisxl.be", "asset_type": "URL", "location": "http://wifi-in-store.iciparisxl.be", "group": "Tier 4" }, { "name": "service.iciparisxl.nl", "asset_type": "URL", "location": "http://service.iciparisxl.nl", "group": "Tier 4" }, { "name": "servicefr.iciparisxl.lu", "asset_type": "URL", "location": "http://servicefr.iciparisxl.lu", "group": "Tier 4" }, { "name": "campagne.iciparisxl.nl", "asset_type": "URL", "location": "http://campagne.iciparisxl.nl", "group": "Tier 4" }, { "name": "campagne.iciparisxl.lu", "asset_type": "URL", "location": "http://campagne.iciparisxl.lu", "group": "Tier 4" }, { "name": "campagne.iciparisxl.be", "asset_type": "URL", "location": "http://campagne.iciparisxl.be", "group": "Tier 4" }, { "name": "servicenl.iciparisxl.be", "asset_type": "URL", "location": "http://servicenl.iciparisxl.be", "group": "Tier 4" }, { "name": "*.iciparisxl.lu", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "*.iciparisxl.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "*.iciparisxl.be", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.pourvous.nl", "asset_type": "URL", "location": "http://www.pourvous.nl", "group": "Tier 4" }, { "name": "*.pourvous.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 5" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-b179780cc1d1f514", "name": "Ideals Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/ideals/ideals", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/ideals/ideals/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:50:03Z", "scope_source_urls": [ "https://app.intigriti.com/programs/ideals/ideals/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-ab40d9046879fe60", "name": "InnoGames", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/innogames/innogames", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:05Z", "scope_source_urls": [ "https://app.intigriti.com/programs/innogames/innogames/detail" ], "in_scope": [ { "name": "Backend/Non-Game", "asset_type": "Other", "location": null, "group": "Tier 1" }, { "name": "Elvenar", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Forge of Empires", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Grepolis", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Tribal Wars", "asset_type": "Other", "location": null, "group": "Tier 2" } ], "out_of_scope": [ { "name": "autodiscover.innogames.de", "asset_type": "URL", "location": "http://autodiscover.innogames.de", "group": null }, { "name": "exchange.innogames.de", "asset_type": "URL", "location": "http://exchange.innogames.de", "group": null }, { "name": "igjam.eu", "asset_type": "URL", "location": "http://igjam.eu", "group": null }, { "name": "jamf.innogames.com", "asset_type": "URL", "location": "http://jamf.innogames.com", "group": null }, { "name": "mail.innogames.com", "asset_type": "URL", "location": "http://mail.innogames.com", "group": null }, { "name": "newsroom.innogames.com", "asset_type": "URL", "location": "http://newsroom.innogames.com", "group": null }, { "name": "pn.innogames.com", "asset_type": "URL", "location": "http://pn.innogames.com", "group": null }, { "name": "slack.innogames.de", "asset_type": "URL", "location": "http://slack.innogames.de", "group": null }, { "name": "typingmind.innogames.de", "asset_type": "URL", "location": "http://typingmind.innogames.de", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-31a3459c141c4946", "name": "Intergamma", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/intergamma/intergamma", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:07Z", "scope_source_urls": [ "https://app.intigriti.com/programs/intergamma/intergamma/detail" ], "in_scope": [ { "name": "www.gamma.nl/*", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "www.gamma.be/*", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "www.karwei.nl/*", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "kassa.gamma.nl/*", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "kassa.gamma.be/*", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "kassa.karwei.nl/*", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "mijn.gamma.nl/*", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "mijn.gamma.be/*", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "mijn.karwei.nl/*", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "949829216", "asset_type": "iOS", "location": "https://apps.apple.com/app/949829216", "group": "Tier 1" }, { "name": "950693949", "asset_type": "iOS", "location": "https://apps.apple.com/app/950693949", "group": "Tier 1" }, { "name": "950680989", "asset_type": "iOS", "location": "https://apps.apple.com/app/950680989", "group": "Tier 1" }, { "name": "1558129454", "asset_type": "iOS", "location": "https://apps.apple.com/app/1558129454", "group": "Tier 2" }, { "name": "nl.gamma.app.android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=nl.gamma.app.android", "group": "Tier 1" }, { "name": "be.gamma.app.android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=be.gamma.app.android", "group": "Tier 1" }, { "name": "nl.karwei.app.android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=nl.karwei.app.android", "group": "Tier 1" }, { "name": "*.gamma.nl/*", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.gamma.be/*", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.karwei.nl/*", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.intergamma.cloud", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.intergamma.nl/*", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.restintergamma.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.intergamma-test.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*werkenbij.intergamma.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.werkenbijgamma.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.werkenbijgamma.be", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.werkenbijkarwei.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "irmg.nl", "asset_type": "URL", "location": "http://irmg.nl", "group": "Tier 3" }, { "name": "gammacademy.be", "asset_type": "URL", "location": "http://gammacademy.be", "group": "No bounty" }, { "name": "karwei-promotiepunt.nl", "asset_type": "URL", "location": "http://karwei-promotiepunt.nl", "group": "No bounty" }, { "name": "gammalokaal.nl", "asset_type": "URL", "location": "http://gammalokaal.nl", "group": "No bounty" }, { "name": "*.karweioutletstore.nl", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "nl.gamma.verf", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=nl.gamma.verf", "group": "No bounty" } ], "out_of_scope": [ { "name": "*.configuratoren.nl/*", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "afspraakmaken.gamma.nl", "asset_type": "URL", "location": "http://afspraakmaken.gamma.nl", "group": null }, { "name": "api.afspraakmaken.gamma.be", "asset_type": "URL", "location": "http://api.afspraakmaken.gamma.be", "group": null }, { "name": "api.afspraakmaken.gamma.nl", "asset_type": "URL", "location": "http://api.afspraakmaken.gamma.nl", "group": null }, { "name": "api.maakafspraak.karwei.nl", "asset_type": "URL", "location": "http://api.maakafspraak.karwei.nl", "group": null }, { "name": "Everything related to configurators, both on primary as other domains", "asset_type": "Other", "location": null, "group": null }, { "name": "horrenconfigurator-fr.gamma.be", "asset_type": "URL", "location": "http://horrenconfigurator-fr.gamma.be", "group": null }, { "name": "horrenconfigurator-nl.gamma.be", "asset_type": "URL", "location": "http://horrenconfigurator-nl.gamma.be", "group": null }, { "name": "horrenconfigurator.karwei.nl", "asset_type": "URL", "location": "http://horrenconfigurator.karwei.nl", "group": null }, { "name": "karwei-2018.hetmooistegordijn.nl", "asset_type": "URL", "location": "http://karwei-2018.hetmooistegordijn.nl", "group": null }, { "name": "maakafspraak.karwei.nl", "asset_type": "URL", "location": "http://maakafspraak.karwei.nl", "group": null }, { "name": "mail.gamma.be", "asset_type": "URL", "location": "http://mail.gamma.be", "group": null }, { "name": "mail.gamma.nl", "asset_type": "URL", "location": "http://mail.gamma.nl", "group": null }, { "name": "mail.karwei.nl", "asset_type": "URL", "location": "http://mail.karwei.nl", "group": null }, { "name": "https://*.zoofy.nl", "asset_type": "Wildcard", "location": null, "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-c2b0db1b0d386293", "name": "Intertoys", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/intertoys/intertoys", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/intertoys/intertoys/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:50:09Z", "scope_source_urls": [ "https://app.intigriti.com/programs/intertoys/intertoys/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-2c2dabee89176699", "name": "intigriti", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/intigriti/intigriti", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:11Z", "scope_source_urls": [ "https://app.intigriti.com/programs/intigriti/intigriti/detail" ], "in_scope": [ { "name": "*.pwn.intigriti.rocks", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "www.intigriti.com", "asset_type": "URL", "location": "http://www.intigriti.com", "group": "Tier 3" }, { "name": "*.intigriti.me", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "https://vpn.intigriti.rocks/*", "asset_type": "Wildcard", "location": null, "group": "Tier 4" }, { "name": "https://metabase.pwn.intigriti.rocks/", "asset_type": "URL", "location": "https://metabase.pwn.intigriti.rocks/", "group": "Tier 4" } ], "out_of_scope": [ { "name": "*.intigriti.io", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*.intigriti.net", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "any intigriti CTF or challenge", "asset_type": "Other", "location": null, "group": null }, { "name": "*.intercom.io", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "autodiscover.intigriti.com", "asset_type": "URL", "location": "http://autodiscover.intigriti.com", "group": null }, { "name": "careers.intigriti.com", "asset_type": "URL", "location": "http://careers.intigriti.com", "group": null }, { "name": "click.intigriti.com", "asset_type": "URL", "location": "http://click.intigriti.com", "group": null }, { "name": "go.intigriti.com", "asset_type": "URL", "location": "http://go.intigriti.com", "group": null }, { "name": "kb.intigriti.com", "asset_type": "URL", "location": "http://kb.intigriti.com", "group": null }, { "name": "mail.intigriti.com", "asset_type": "URL", "location": "http://mail.intigriti.com", "group": null }, { "name": "newsletter.intigriti.com", "asset_type": "URL", "location": "http://newsletter.intigriti.com", "group": null }, { "name": "status.intigriti.com", "asset_type": "URL", "location": "http://status.intigriti.com", "group": null }, { "name": "swag.intigriti.com", "asset_type": "URL", "location": "http://swag.intigriti.com", "group": null }, { "name": "trust.intigriti.com", "asset_type": "URL", "location": "http://trust.intigriti.com", "group": null }, { "name": "posthog.intigriti.com", "asset_type": "URL", "location": "http://posthog.intigriti.com", "group": null }, { "name": "our hubspot pages (/hs-fs/, /hubfs/, /hs/, /_hcms/, landing/, report/, webinar/, /datasheet, /customer/, /video/...)", "asset_type": "Other", "location": null, "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-75e73143438d2023", "name": "Kahoot Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/kahoot/kahoot", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/kahoot/kahoot/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:50:13Z", "scope_source_urls": [ "https://app.intigriti.com/programs/kahoot/kahoot/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-db015fcfa248d8c2", "name": "Kinepolis Group", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/kinepolis/website", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:14Z", "scope_source_urls": [ "https://app.intigriti.com/programs/kinepolis/website/detail" ], "in_scope": [ { "name": "*.klubcinema.fr", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "*.megatix.be", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "booking.mjrtheatres.com", "asset_type": "URL", "location": "http://booking.mjrtheatres.com", "group": "Tier 1" }, { "name": "extras.landmarkcinemas.com", "asset_type": "URL", "location": "http://extras.landmarkcinemas.com", "group": "Tier 1" }, { "name": "identityserver.landmarkcinemas.com", "asset_type": "URL", "location": "http://identityserver.landmarkcinemas.com", "group": "Tier 1" }, { "name": "kinepolis.megatix.be", "asset_type": "URL", "location": "http://kinepolis.megatix.be", "group": "Tier 1" }, { "name": "luxfilmfestfilms.megatix.be", "asset_type": "URL", "location": "http://luxfilmfestfilms.megatix.be", "group": "Tier 1" }, { "name": "luxfilmfestproducts.megatix.be", "asset_type": "URL", "location": "http://luxfilmfestproducts.megatix.be", "group": "Tier 1" }, { "name": "luxfilmfesttickets.megatix.be", "asset_type": "URL", "location": "http://luxfilmfesttickets.megatix.be", "group": "Tier 1" }, { "name": "movieapi.kinepolis.megatix.be", "asset_type": "URL", "location": "http://movieapi.kinepolis.megatix.be", "group": "Tier 1" }, { "name": "tickets.kinepolis.be", "asset_type": "URL", "location": "http://tickets.kinepolis.be", "group": "Tier 1" }, { "name": "tickets.kinepolis.ch", "asset_type": "URL", "location": "http://tickets.kinepolis.ch", "group": "Tier 1" }, { "name": "tickets.kinepolis.es", "asset_type": "URL", "location": "http://tickets.kinepolis.es", "group": "Tier 1" }, { "name": "tickets.kinepolis.fr", "asset_type": "URL", "location": "http://tickets.kinepolis.fr", "group": "Tier 1" }, { "name": "tickets.kinepolis.lu", "asset_type": "URL", "location": "http://tickets.kinepolis.lu", "group": "Tier 1" }, { "name": "tickets.kinepolis.nl", "asset_type": "URL", "location": "http://tickets.kinepolis.nl", "group": "Tier 1" }, { "name": "userprofile-ui.landmarkcinemas.com", "asset_type": "URL", "location": "http://userprofile-ui.landmarkcinemas.com", "group": "Tier 1" }, { "name": "www.kinepolis.be", "asset_type": "URL", "location": "http://www.kinepolis.be ", "group": "Tier 1" }, { "name": "www.kinepolis.ch", "asset_type": "URL", "location": "http://www.kinepolis.ch ", "group": "Tier 1" }, { "name": "www.kinepolis.com", "asset_type": "URL", "location": "http://www.kinepolis.com ", "group": "Tier 1" }, { "name": "www.kinepolis.es", "asset_type": "URL", "location": "http://www.kinepolis.es ", "group": "Tier 1" }, { "name": "www.kinepolis.fr", "asset_type": "URL", "location": "http://www.kinepolis.fr ", "group": "Tier 1" }, { "name": "www.kinepolis.lu", "asset_type": "URL", "location": "http://www.kinepolis.lu ", "group": "Tier 1" }, { "name": "www.kinepolis.nl", "asset_type": "URL", "location": "http://www.kinepolis.nl ", "group": "Tier 1" }, { "name": "www.landmarkcinemas.com", "asset_type": "URL", "location": "http://www.landmarkcinemas.com", "group": "Tier 1" }, { "name": "www.mjrtheatres.com", "asset_type": "URL", "location": "http://www.mjrtheatres.com", "group": "Tier 1" }, { "name": "business.kinepolis.be", "asset_type": "URL", "location": "http://business.kinepolis.be", "group": "Tier 2" }, { "name": "business.kinepolis.lu", "asset_type": "URL", "location": "http://business.kinepolis.lu", "group": "Tier 2" }, { "name": "business.kinepolis.nl", "asset_type": "URL", "location": "http://business.kinepolis.nl", "group": "Tier 2" }, { "name": "com.inthepocket.kinepolis", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.inthepocket.kinepolis", "group": "Tier 2" }, { "name": "extras-acc.landmarkcinemas.com", "asset_type": "URL", "location": "http://extras-acc.landmarkcinemas.com", "group": "Tier 2" }, { "name": "https://movieclub-int.kinepolis.com", "asset_type": "URL", "location": "https://movieclub-int.kinepolis.com", "group": "Tier 2" }, { "name": "https://movienow-int.kinepolis.be/admin", "asset_type": "URL", "location": "https://movienow-int.kinepolis.be/admin", "group": "Tier 2" }, { "name": "https://shop-acc.kinepolis.be/", "asset_type": "URL", "location": "https://shop-acc.kinepolis.be/", "group": "Tier 2" }, { "name": "identityserver-acc.landmarkcinemas.com", "asset_type": "URL", "location": "http://identityserver-acc.landmarkcinemas.com", "group": "Tier 2" }, { "name": "kinepolis-studio.be", "asset_type": "URL", "location": "http://kinepolis-studio.be", "group": "Tier 2" }, { "name": "kinepolis/id368204284", "asset_type": "iOS", "location": "https://apps.apple.com/app/kinepolis/id368204284", "group": "Tier 2" }, { "name": "nz.co.vista.android.movie.mjrtheatres", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=nz.co.vista.android.movie.mjrtheatres", "group": "Tier 2" }, { "name": "stage.landmarkcinemas.com", "asset_type": "URL", "location": "http://stage.landmarkcinemas.com", "group": "Tier 2" }, { "name": "userprofile-acc.landmarkcinemas.com", "asset_type": "URL", "location": "http://userprofile-acc.landmarkcinemas.com", "group": "Tier 2" }, { "name": "www.kinepolis.biz", "asset_type": "URL", "location": "http://www.kinepolis.biz", "group": "Tier 2" }, { "name": "*.kinepolis.be", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.kinepolis.ch", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.kinepolis.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.kinepolis.fr", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.kinepolis.lu", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.kinepolis.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.landmarkcinemas.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.mjrtheatres.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "522089287", "asset_type": "iOS", "location": "https://apps.apple.com/app/522089287", "group": "Tier 3" }, { "name": "egaming.kinepolis.es", "asset_type": "URL", "location": "http://egaming.kinepolis.es", "group": "No bounty" } ], "out_of_scope": [ { "name": "*.cineramabios.nl", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "dev.kinepolis.com", "asset_type": "URL", "location": "http://dev.kinepolis.com", "group": null }, { "name": "helpdesk.landmarkcinemas.com", "asset_type": "URL", "location": "http://helpdesk.landmarkcinemas.com", "group": null }, { "name": "jobs.kinepolis.com", "asset_type": "URL", "location": "http://jobs.kinepolis.com", "group": null }, { "name": "l.kinepolis.com", "asset_type": "URL", "location": "http://l.kinepolis.com", "group": null }, { "name": "openx.kinepolis.com", "asset_type": "URL", "location": "http://openx.kinepolis.com", "group": null }, { "name": "shop.kinepolis.be", "asset_type": "URL", "location": "http://shop.kinepolis.be ", "group": null }, { "name": "shop.kinepolis.es", "asset_type": "URL", "location": "http://shop.kinepolis.es", "group": null }, { "name": "shop.kinepolis.fr", "asset_type": "URL", "location": "http://shop.kinepolis.fr ", "group": null }, { "name": "shop.kinepolis.lu", "asset_type": "URL", "location": "http://shop.kinepolis.lu", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-488ae04eb94bb38f", "name": "Kruidvat", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/aswatson/kruidvat", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:16Z", "scope_source_urls": [ "https://app.intigriti.com/programs/aswatson/kruidvat/detail" ], "in_scope": [ { "name": "www.kruidvat.nl", "asset_type": "URL", "location": "http://www.kruidvat.nl", "group": "Tier 1" }, { "name": "www.kruidvat.be", "asset_type": "URL", "location": "http://www.kruidvat.be", "group": "Tier 1" }, { "name": "Kruidvat BE iOS", "asset_type": "iOS", "location": "https://apps.apple.com/be/app/kruidvat/id1151434781", "group": "Tier 1" }, { "name": "Kruidvat NL iOS", "asset_type": "iOS", "location": "https://itunes.apple.com/nl/app/kruidvat-mobiele-app/id531631058", "group": "Tier 1" }, { "name": "Kruidvat BE Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=be.kruidvat.voordeelkaart", "group": "Tier 1" }, { "name": "Kruidvat NL Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=nl.kruidvat.voordeelkaart", "group": "Tier 1" }, { "name": "api.kruidvat.nl", "asset_type": "URL", "location": "http://api.kruidvat.nl", "group": "Tier 1" }, { "name": "api.kruidvat.be", "asset_type": "URL", "location": "http://api.kruidvat.be", "group": "Tier 1" }, { "name": "app.kruidvat.nl", "asset_type": "URL", "location": "http://app.kruidvat.nl", "group": "Tier 1" }, { "name": "app.kruidvat.be", "asset_type": "URL", "location": "http://app.kruidvat.be", "group": "Tier 1" }, { "name": "media.kruidvat.nl", "asset_type": "URL", "location": "http://media.kruidvat.nl", "group": "Tier 1" }, { "name": "media.kruidvat.be", "asset_type": "URL", "location": "http://media.kruidvat.be", "group": "Tier 1" }, { "name": "www.kruidvatkids.nl", "asset_type": "URL", "location": "http://www.kruidvatkids.nl", "group": "Tier 4" }, { "name": "speelgoedfolder.kruidvat.nl", "asset_type": "URL", "location": "http://speelgoedfolder.kruidvat.nl", "group": "Tier 4" }, { "name": "depliantdejouets.kruidvat.be", "asset_type": "URL", "location": "http://depliantdejouets.kruidvat.be", "group": "Tier 4" }, { "name": "folder.kruidvat.be", "asset_type": "URL", "location": "http://folder.kruidvat.be", "group": "Tier 4" }, { "name": "folder.kruidvat.nl", "asset_type": "URL", "location": "http://folder.kruidvat.nl", "group": "Tier 4" }, { "name": "speelgoedfolder.kruidvat.be", "asset_type": "URL", "location": "http://speelgoedfolder.kruidvat.be", "group": "Tier 4" }, { "name": "ecom-static.kruidvat.be", "asset_type": "URL", "location": "http://ecom-static.kruidvat.be", "group": "Tier 4" }, { "name": "ecom-static.kruidvat.nl", "asset_type": "URL", "location": "http://ecom-static.kruidvat.nl", "group": "Tier 4" }, { "name": "ecom-data.kruidvat.be", "asset_type": "URL", "location": "http://ecom-data.kruidvat.be", "group": "Tier 4" }, { "name": "magazine.kruidvat.be", "asset_type": "URL", "location": "http://magazine.kruidvat.be", "group": "Tier 4" }, { "name": "ecom-data.kruidvat.nl", "asset_type": "URL", "location": "http://ecom-data.kruidvat.nl", "group": "Tier 4" }, { "name": "campaign.kruidvat.nl", "asset_type": "URL", "location": "http://campaign.kruidvat.nl", "group": "Tier 4" }, { "name": "campaign.kruidvat.be", "asset_type": "URL", "location": "http://campaign.kruidvat.be", "group": "Tier 4" }, { "name": "cewe.kruidvat.nl", "asset_type": "URL", "location": "http://cewe.kruidvat.nl", "group": "Tier 4" }, { "name": "cewe.kruidvat.be", "asset_type": "URL", "location": "http://cewe.kruidvat.be", "group": "Tier 4" }, { "name": "digital.kruidvat.be", "asset_type": "URL", "location": "http://digital.kruidvat.be", "group": "Tier 4" }, { "name": "digital.kruidvat.nl", "asset_type": "URL", "location": "http://digital.kruidvat.nl", "group": "Tier 4" }, { "name": "foto.kruidvat.be", "asset_type": "URL", "location": "http://foto.kruidvat.be", "group": "Tier 4" }, { "name": "foto.kruidvat.nl", "asset_type": "URL", "location": "http://foto.kruidvat.nl", "group": "Tier 4" }, { "name": "fotoservice.kruidvat.nl", "asset_type": "URL", "location": "http://fotoservice.kruidvat.nl", "group": "Tier 4" }, { "name": "fotoservice.kruidvat.be", "asset_type": "URL", "location": "http://fotoservice.kruidvat.be", "group": "Tier 4" }, { "name": "photo.kruidvat.be", "asset_type": "URL", "location": "http://photo.kruidvat.be", "group": "Tier 4" }, { "name": "service.kruidvat.be", "asset_type": "URL", "location": "http://service.kruidvat.be", "group": "Tier 4" }, { "name": "service.kruidvat.nl", "asset_type": "URL", "location": "http://service.kruidvat.nl", "group": "Tier 4" }, { "name": "servicefr.kruidvat.be", "asset_type": "URL", "location": "http://servicefr.kruidvat.be", "group": "Tier 4" }, { "name": "www.cewe.kruidvat.be", "asset_type": "URL", "location": "http://www.cewe.kruidvat.be", "group": "Tier 4" }, { "name": "www.cewe.kruidvat.nl", "asset_type": "URL", "location": "http://www.cewe.kruidvat.nl", "group": "Tier 4" }, { "name": "*.kruidvatkids.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "*.kruidvat.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "*.kruidvat.be", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.trekpleister.nl", "asset_type": "URL", "location": "http://www.trekpleister.nl", "group": "Tier 1" }, { "name": "campaign.trekpleister.nl", "asset_type": "URL", "location": "http://campaign.trekpleister.nl", "group": "Tier 4" }, { "name": "ecom-data.trekpleister.nl", "asset_type": "URL", "location": "http://ecom-data.trekpleister.nl", "group": "Tier 4" }, { "name": "service.trekpleister.nl", "asset_type": "URL", "location": "http://service.trekpleister.nl", "group": "Tier 4" }, { "name": "folder.trekpleister.nl", "asset_type": "URL", "location": "http://folder.trekpleister.nl", "group": "Tier 4" }, { "name": "*.trekpleister.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.prijsmepper.nl", "asset_type": "URL", "location": "http://www.prijsmepper.nl", "group": "Tier 4" }, { "name": "*.prijsmepper.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 5" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-d77b941b28bf7b97", "name": "Lansweeper Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/lansweeper/lansweeper1", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:18Z", "scope_source_urls": [ "https://app.intigriti.com/programs/lansweeper/lansweeper1/detail" ], "in_scope": [ { "name": "app.lansweeper.com", "asset_type": "URL", "location": "http://app.lansweeper.com", "group": "Tier 2" }, { "name": "fb.lansweeper.com", "asset_type": "URL", "location": "http://fb.lansweeper.com", "group": "Tier 2" }, { "name": "edge.lansweeper.com", "asset_type": "URL", "location": "http://edge.lansweeper.com", "group": "Tier 1" }, { "name": "api.lansweeper.com", "asset_type": "URL", "location": "http://api.lansweeper.com", "group": "Tier 2" }, { "name": "backoffice.lansweeper.com", "asset_type": "URL", "location": "http://backoffice.lansweeper.com", "group": "Tier 2" }, { "name": "app.lansweeper.com/trial", "asset_type": "URL", "location": "http://app.lansweeper.com/trial", "group": "Tier 3" }, { "name": "autoupdateapi.lansweeper.com", "asset_type": "URL", "location": "http://autoupdateapi.lansweeper.com", "group": "Tier 3" }, { "name": "docs.lansweeper.com", "asset_type": "URL", "location": "http://docs.lansweeper.com", "group": "Tier 3" }, { "name": "login.lansweeper.com", "asset_type": "URL", "location": "http://login.lansweeper.com", "group": "Tier 3" }, { "name": "www.lansweeper.com", "asset_type": "URL", "location": "http://www.lansweeper.com", "group": "Tier 3" }, { "name": "*.lansweeper.com", "asset_type": "Wildcard", "location": null, "group": "No bounty" } ], "out_of_scope": [ { "name": "Lansweeper Classic", "asset_type": "Other", "location": null, "group": null }, { "name": "Lansweeper Discovery", "asset_type": "URL", "location": "http://Lansweeper Discovery", "group": null }, { "name": "https://lsagentrelay.lansweeper.com/", "asset_type": "URL", "location": "https://lsagentrelay.lansweeper.com/", "group": null }, { "name": "lsrunase2.0 and lsencrypt2.0", "asset_type": "Other", "location": null, "group": null }, { "name": "careers.lansweeper.com", "asset_type": "URL", "location": "http://careers.lansweeper.com", "group": null }, { "name": "www.lansweeper.com/forum", "asset_type": "URL", "location": "http://www.lansweeper.com/forum", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-11ea6c34a5fc8e32", "name": "Leapsome", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/leapsome/leapsome", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/leapsome/leapsome/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:50:20Z", "scope_source_urls": [ "https://app.intigriti.com/programs/leapsome/leapsome/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-ce47061ed8e1ea9b", "name": "Libelle", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/dpgm/libelle", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:22Z", "scope_source_urls": [ "https://app.intigriti.com/programs/dpgm/libelle/detail" ], "in_scope": [ { "name": "www.libelle.nl", "asset_type": "URL", "location": "http://www.libelle.nl", "group": "Tier 2" }, { "name": "*.libelle.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 3" } ], "out_of_scope": [ { "name": "libelle.nl/inloggen", "asset_type": "URL", "location": "http://libelle.nl/inloggen", "group": null }, { "name": "libelle.nl/login", "asset_type": "URL", "location": "http://libelle.nl/login", "group": null }, { "name": "libelle.nl/registreren", "asset_type": "URL", "location": "http://libelle.nl/registreren", "group": null }, { "name": "libelle.nl/service", "asset_type": "URL", "location": "http://libelle.nl/service", "group": null }, { "name": "actie.libelle.nl", "asset_type": "URL", "location": "http://actie.libelle.nl", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-d53f4a5e29389737", "name": "Liferay DXP", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/liferay/liferaydxp", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:23Z", "scope_source_urls": [ "https://app.intigriti.com/programs/liferay/liferaydxp/detail" ], "in_scope": [ { "name": "Liferay DXP 2026.Q3", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Liferay DXP 2026.Q2", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Liferay DXP 2026.Q1", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Liferay DXP 2025.Q1", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Liferay DXP 2024.Q1", "asset_type": "Other", "location": null, "group": "Tier 2" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-3b4650952b890d2a", "name": "Liveperson Conversational Cloud", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/liveperson/livepersonconversationalcloud", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/liveperson/livepersonconversationalcloud/tac/detail", "http_status": 200, "result": "terms_login_gate", "note": "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "terms_only", "scope_captured_at": "2026-10-03T15:50:25Z", "scope_source_urls": [ "https://app.intigriti.com/programs/liveperson/livepersonconversationalcloud/tac/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." ], "review_flags": [] }, { "id": "intigriti-e94903c743cf5371", "name": "Marionnaud", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/aswatson/marionnaud", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:27Z", "scope_source_urls": [ "https://app.intigriti.com/programs/aswatson/marionnaud/detail" ], "in_scope": [ { "name": "www.marionnaud.fr", "asset_type": "URL", "location": "http://www.marionnaud.fr", "group": "Tier 1" }, { "name": "Marionnaud France Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.marionnaud.marionnaudfrance", "group": "Tier 1" }, { "name": "Marionnaud France iOS", "asset_type": "iOS", "location": "https://apps.apple.com/fr/app/marionnaud-france/id1127368763", "group": "Tier 1" }, { "name": "app.marionnaud.fr", "asset_type": "URL", "location": "http://app.marionnaud.fr", "group": "Tier 1" }, { "name": "media.marionnaud.fr", "asset_type": "URL", "location": "http://media.marionnaud.fr", "group": "Tier 1" }, { "name": "api.marionnaud.fr", "asset_type": "URL", "location": "http://api.marionnaud.fr", "group": "Tier 1" }, { "name": "ecom-data.marionnaud.fr", "asset_type": "URL", "location": "http://ecom-data.marionnaud.fr", "group": "Tier 4" }, { "name": "jeux-concours.marionnaud.fr", "asset_type": "URL", "location": "http://jeux-concours.marionnaud.fr", "group": "Tier 4" }, { "name": "bdes-api.marionnaud.fr", "asset_type": "URL", "location": "http://bdes-api.marionnaud.fr", "group": "Tier 4" }, { "name": "bdese.marionnaud.fr", "asset_type": "URL", "location": "http://bdese.marionnaud.fr", "group": "Tier 4" }, { "name": "*.marionnaud.fr", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "*.marionnaud.es", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "*.marionnaud.paris", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "*.marionnaud.com", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.marionnaud.at", "asset_type": "URL", "location": "http://www.marionnaud.at", "group": "Tier 1" }, { "name": "Marionnaud Austria iOS", "asset_type": "iOS", "location": "https://apps.apple.com/gb/app/marionnaud-%C3%B6sterreich/id1114541888", "group": "Tier 1" }, { "name": "Marionnaud Austria Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=at.marionnaud.customer", "group": "Tier 1" }, { "name": "app.marionnaud.at", "asset_type": "URL", "location": "http://app.marionnaud.at", "group": "Tier 1" }, { "name": "api.marionnaud.at", "asset_type": "URL", "location": "http://api.marionnaud.at", "group": "Tier 1" }, { "name": "media.marionnaud.at", "asset_type": "URL", "location": "http://media.marionnaud.at", "group": "Tier 1" }, { "name": "campaign.marionnaud.at", "asset_type": "URL", "location": "http://campaign.marionnaud.at", "group": "Tier 4" }, { "name": "ecom-data.marionnaud.at", "asset_type": "URL", "location": "http://ecom-data.marionnaud.at", "group": "Tier 4" }, { "name": "*.marionnaud.de", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "*.marionnaud.at", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.marionnaud.ch", "asset_type": "URL", "location": "http://www.marionnaud.ch", "group": "Tier 1" }, { "name": "Marionnaud Switzerland iOS", "asset_type": "iOS", "location": "https://apps.apple.com/ch/app/id1486316902", "group": "Tier 1" }, { "name": "Marionnaud Switzerland Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=ch.marionnaud.customer", "group": "Tier 1" }, { "name": "app.marionnaud.ch", "asset_type": "URL", "location": "http://app.marionnaud.ch", "group": "Tier 1" }, { "name": "api.marionnaud.ch", "asset_type": "URL", "location": "http://api.marionnaud.ch", "group": "Tier 1" }, { "name": "media.marionnaud.ch", "asset_type": "URL", "location": "http://media.marionnaud.ch", "group": "Tier 1" }, { "name": "campaign.marionnaud.ch", "asset_type": "URL", "location": "http://campaign.marionnaud.ch", "group": "Tier 4" }, { "name": "ecom-data.marionnaud.ch", "asset_type": "URL", "location": "http://ecom-data.marionnaud.ch", "group": "Tier 4" }, { "name": "extranet.marionnaud.ch", "asset_type": "URL", "location": "http://extranet.marionnaud.ch", "group": "Tier 4" }, { "name": "*.marionnaud.ch", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.marionnaud.it", "asset_type": "URL", "location": "http://www.marionnaud.it", "group": "Tier 1" }, { "name": "Marionnaud Italy iOS", "asset_type": "iOS", "location": "https://apps.apple.com/it/app/marionnaud/id883671274", "group": "Tier 1" }, { "name": "Marionnaud Italy Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=it.marionnaud.customer", "group": "Tier 1" }, { "name": "app.marionnaud.it", "asset_type": "URL", "location": "http://app.marionnaud.it", "group": "Tier 1" }, { "name": "api.marionnaud.it", "asset_type": "URL", "location": "http://api.marionnaud.it", "group": "Tier 1" }, { "name": "media.marionnaud.it", "asset_type": "URL", "location": "http://media.marionnaud.it", "group": "Tier 1" }, { "name": "campaign.marionnaud.it", "asset_type": "URL", "location": "http://campaign.marionnaud.it", "group": "Tier 4" }, { "name": "ecom-data.marionnaud.it", "asset_type": "URL", "location": "http://ecom-data.marionnaud.it", "group": "Tier 4" }, { "name": "*.marionnaud.it", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.marionnaud.hu", "asset_type": "URL", "location": "http://www.marionnaud.hu", "group": "Tier 2" }, { "name": "Marionnaud Hungary iOS", "asset_type": "iOS", "location": "https://apps.apple.com/hu/app/marionnaud-magyarorsz%C3%A1g/id1645840482", "group": "Tier 2" }, { "name": "Marionnaud Hungary Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=hu.marionnaud.customer", "group": "Tier 2" }, { "name": "media.marionnaud.hu", "asset_type": "URL", "location": "http://media.marionnaud.hu", "group": "Tier 2" }, { "name": "api.marionnaud.hu", "asset_type": "URL", "location": "http://api.marionnaud.hu", "group": "Tier 2" }, { "name": "app.marionnaud.hu", "asset_type": "URL", "location": "http://app.marionnaud.hu", "group": "Tier 2" }, { "name": "ecom-data.marionnaud.hu", "asset_type": "URL", "location": "http://ecom-data.marionnaud.hu", "group": "Tier 4" }, { "name": "campaign.marionnaud.hu", "asset_type": "URL", "location": "http://campaign.marionnaud.hu", "group": "Tier 4" }, { "name": "*.marionnaud.hu", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.marionnaud.cz", "asset_type": "URL", "location": "http://www.marionnaud.cz", "group": "Tier 2" }, { "name": "Marionnaud Czech Republic iOS", "asset_type": "iOS", "location": "https://apps.apple.com/cz/app/marionnaud-%C4%8Desko/id1641863747", "group": "Tier 2" }, { "name": "Marionnaud Czech Republic Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=cz.marionnaud.customer", "group": "Tier 2" }, { "name": "media.marionnaud.cz", "asset_type": "URL", "location": "http://media.marionnaud.cz", "group": "Tier 2" }, { "name": "api.marionnaud.cz", "asset_type": "URL", "location": "http://api.marionnaud.cz", "group": "Tier 2" }, { "name": "app.marionnaud.cz", "asset_type": "URL", "location": "http://app.marionnaud.cz", "group": "Tier 2" }, { "name": "campaign.marionnaud.cz", "asset_type": "URL", "location": "http://campaign.marionnaud.cz", "group": "Tier 4" }, { "name": "ecom-data.marionnaud.cz", "asset_type": "URL", "location": "http://ecom-data.marionnaud.cz", "group": "Tier 4" }, { "name": "*.marionnaud.cz", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.marionnaud.ro", "asset_type": "URL", "location": "http://www.marionnaud.ro", "group": "Tier 2" }, { "name": "Marionnaud Romania Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=ro.marionnaud.customer", "group": "Tier 2" }, { "name": "Marionnaud Romania iOS", "asset_type": "iOS", "location": "https://apps.apple.com/ro/app/marionnaud-romania/id1021924260", "group": "Tier 2" }, { "name": "api.marionnaud.ro", "asset_type": "URL", "location": "http://api.marionnaud.ro", "group": "Tier 2" }, { "name": "app.marionnaud.ro", "asset_type": "URL", "location": "http://app.marionnaud.ro", "group": "Tier 2" }, { "name": "media.marionnaud.ro", "asset_type": "URL", "location": "http://media.marionnaud.ro", "group": "Tier 2" }, { "name": "campaign.marionnaud.ro", "asset_type": "URL", "location": "http://campaign.marionnaud.ro", "group": "Tier 4" }, { "name": "*.marionnaud.ro", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.marionnaud.sk", "asset_type": "URL", "location": "http://www.marionnaud.sk", "group": "Tier 2" }, { "name": "Marionnaud Slovakia iOS", "asset_type": "iOS", "location": "https://apps.apple.com/gb/app/marionnaud-beaut%C3%A9-soins/id1127368763", "group": "Tier 2" }, { "name": "Marionnaud Slovakia Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=sk.marionnaud.customer", "group": "Tier 2" }, { "name": "media.marionnaud.sk", "asset_type": "URL", "location": "http://media.marionnaud.sk", "group": "Tier 2" }, { "name": "app.marionnaud.sk", "asset_type": "URL", "location": "http://app.marionnaud.sk", "group": "Tier 2" }, { "name": "api.marionnaud.sk", "asset_type": "URL", "location": "http://api.marionnaud.sk", "group": "Tier 2" }, { "name": "campaign.marionnaud.sk", "asset_type": "URL", "location": "http://campaign.marionnaud.sk", "group": "Tier 4" }, { "name": "*.marionnaud.sk", "asset_type": "Wildcard", "location": null, "group": "Tier 5" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-28c8c743c9f94ea7", "name": "Mobile Vikings", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/mv/mobilevikings", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:29Z", "scope_source_urls": [ "https://app.intigriti.com/programs/mv/mobilevikings/detail" ], "in_scope": [ { "name": "mobilevikings.be", "asset_type": "URL", "location": "http://mobilevikings.be", "group": "Tier 1" }, { "name": "api.unleashed.be", "asset_type": "URL", "location": "http://api.unleashed.be", "group": "Tier 1" }, { "name": "uwa.mobilevikings.be", "asset_type": "URL", "location": "http://uwa.mobilevikings.be", "group": "Tier 1" }, { "name": "jimmobile.be", "asset_type": "URL", "location": "http://jimmobile.be", "group": "Tier 2" }, { "name": "vpn.mobilevikings.be", "asset_type": "URL", "location": "http://vpn.mobilevikings.be", "group": "Tier 2" }, { "name": "*.mas.mobilevikings.be", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.mobilevikings.be", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.prd-pub.mobilevikings.be", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.prd.mobilevikings.be", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "mgm.mobilevikings.be", "asset_type": "URL", "location": "http://mgm.mobilevikings.be", "group": "Tier 3" }, { "name": "vikingco.be", "asset_type": "URL", "location": "http://vikingco.be", "group": "Tier 3" }, { "name": "vikingdeals.be", "asset_type": "URL", "location": "http://vikingdeals.be", "group": "Tier 3" }, { "name": "*.acc-pub.mobilevikings.be", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "*.acc.mobilevikings.be", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "*.dev-pub.mobilevikings.be", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "*.dev.mobilevikings.be", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "vikinglab.be", "asset_type": "URL", "location": "http://vikinglab.be", "group": "No bounty" }, { "name": "forms.mobilevikings.be", "asset_type": "URL", "location": "http://forms.mobilevikings.be", "group": "No bounty" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-878aaebced7e0cc3", "name": "Monzo Public Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/monzobank/monzopublicbugbountyprogram", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:31Z", "scope_source_urls": [ "https://app.intigriti.com/programs/monzobank/monzopublicbugbountyprogram/detail" ], "in_scope": [ { "name": "*.monzo.com", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "*.prod-ffs.io", "asset_type": "Wildcard", "location": null, "group": "Tier 1" }, { "name": "1052238659", "asset_type": "iOS", "location": "https://apps.apple.com/app/1052238659", "group": "Tier 2" }, { "name": "co.uk.getmondo", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=co.uk.getmondo", "group": "Tier 2" }, { "name": "www.monzo.com", "asset_type": "URL", "location": "http://www.monzo.com", "group": "Tier 3" }, { "name": "monzo.com", "asset_type": "URL", "location": "http://monzo.com", "group": "Tier 3" } ], "out_of_scope": [ { "name": "*/p2p/*", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*/contact-discovery/*", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*/inbound-p2p/*", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*.monzo.me", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "community.monzo.com", "asset_type": "URL", "location": "http://community.monzo.com", "group": null }, { "name": "login.internal.monzo.com", "asset_type": "URL", "location": "http://login.internal.monzo.com", "group": null }, { "name": "monzo.me", "asset_type": "URL", "location": "http://monzo.me", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-c1e7680283f3b791", "name": "My.sdworx.com", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/sdworx/myworkandme", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/sdworx/myworkandme/tac/detail", "http_status": 200, "result": "terms_login_gate", "note": "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "terms_only", "scope_captured_at": "2026-10-03T15:50:33Z", "scope_source_urls": [ "https://app.intigriti.com/programs/sdworx/myworkandme/tac/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." ], "review_flags": [] }, { "id": "intigriti-6c718f89002da960", "name": "MyDirtyHobby Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/aylo/mydirtyhobby-bbp", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/aylo/mydirtyhobby-bbp/tac/detail", "http_status": 200, "result": "terms_login_gate", "note": "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "terms_only", "scope_captured_at": "2026-10-03T15:50:35Z", "scope_source_urls": [ "https://app.intigriti.com/programs/aylo/mydirtyhobby-bbp/tac/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." ], "review_flags": [] }, { "id": "intigriti-faccd7a67d359b6c", "name": "Newpharma", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/colruyt/newpharma", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/colruyt/newpharma/tac/detail", "http_status": 200, "result": "terms_login_gate", "note": "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "terms_only", "scope_captured_at": "2026-10-03T15:50:37Z", "scope_source_urls": [ "https://app.intigriti.com/programs/colruyt/newpharma/tac/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." ], "review_flags": [] }, { "id": "intigriti-002fab24f790d839", "name": "Nexo", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/nexo/nexo", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:39Z", "scope_source_urls": [ "https://app.intigriti.com/programs/nexo/nexo/detail" ], "in_scope": [ { "name": "https://platform.nexo.com/api/1/create_recurring_payment", "asset_type": "URL", "location": "https://platform.nexo.com/api/1/create_recurring_payment", "group": "Tier 1" }, { "name": "https://platform.nexo.com/api/1/exchange_order", "asset_type": "URL", "location": "https://platform.nexo.com/api/1/exchange_order", "group": "Tier 1" }, { "name": "https://platform.nexo.com/api/1/exchange_request_quote", "asset_type": "URL", "location": "https://platform.nexo.com/api/1/exchange_request_quote", "group": "Tier 1" }, { "name": "https://platform.nexo.com/api/1/get_pay_to_card_fee", "asset_type": "URL", "location": "https://platform.nexo.com/api/1/get_pay_to_card_fee", "group": "Tier 1" }, { "name": "https://platform.nexo.com/api/1/request_bwc_quote", "asset_type": "URL", "location": "https://platform.nexo.com/api/1/request_bwc_quote", "group": "Tier 1" }, { "name": "https://platform.nexo.com/api/1/request_capture_payment", "asset_type": "URL", "location": "https://platform.nexo.com/api/1/request_capture_payment", "group": "Tier 1" }, { "name": "https://platform.nexo.com/api/1/request_crypto_withdrawal", "asset_type": "URL", "location": "https://platform.nexo.com/api/1/request_crypto_withdrawal", "group": "Tier 1" }, { "name": "https://platform.nexo.com/api/1/request_pay_to_card", "asset_type": "URL", "location": "https://platform.nexo.com/api/1/request_pay_to_card", "group": "Tier 1" }, { "name": "https://platform.nexo.com/api/1/term/deposits/user/create", "asset_type": "URL", "location": "https://platform.nexo.com/api/1/term/deposits/user/create", "group": "Tier 1" }, { "name": "https://platform.nexo.com/api/platform/exchange/v1/booster/quotes", "asset_type": "URL", "location": "https://platform.nexo.com/api/platform/exchange/v1/booster/quotes", "group": "Tier 1" }, { "name": "https://platform.nexo.com/api/platform/exchange/v2/booster/orders", "asset_type": "URL", "location": "https://platform.nexo.com/api/platform/exchange/v2/booster/orders", "group": "Tier 1" }, { "name": "https://platform.nexo.com/api/platform/exchange/v2/exchange/orders", "asset_type": "URL", "location": "https://platform.nexo.com/api/platform/exchange/v2/exchange/orders", "group": "Tier 1" }, { "name": "https://platform.nexo.com/api/trading/advanced/facade/api/v1/deposit", "asset_type": "URL", "location": "https://platform.nexo.com/api/trading/advanced/facade/api/v1/deposit", "group": "Tier 1" }, { "name": "https://platform.nexo.com/api/trading/advanced/facade/api/v1/fees", "asset_type": "URL", "location": "https://platform.nexo.com/api/trading/advanced/facade/api/v1/fees", "group": "Tier 1" }, { "name": "https://platform.nexo.com/api/trading/advanced/facade/api/v1/order/futures", "asset_type": "URL", "location": "https://platform.nexo.com/api/trading/advanced/facade/api/v1/order/futures", "group": "Tier 1" }, { "name": "https://platform.nexo.com/api/trading/advanced/facade/api/v1/withdraw", "asset_type": "URL", "location": "https://platform.nexo.com/api/trading/advanced/facade/api/v1/withdraw", "group": "Tier 1" }, { "name": "https://nexo.com/", "asset_type": "URL", "location": "https://nexo.com/", "group": "Tier 2" }, { "name": "https://platform.nexo.com/", "asset_type": "URL", "location": "https://platform.nexo.com/", "group": "Tier 2" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-496fe858682dfcad", "name": "Nexuzhealth", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/nexuzhealth/nexuzhealth", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:41Z", "scope_source_urls": [ "https://app.intigriti.com/programs/nexuzhealth/nexuzhealth/detail" ], "in_scope": [ { "name": "be.nexuzhealth.mobile.cpv", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=be.nexuzhealth.mobile.cpv", "group": "Tier 2" }, { "name": "be.nexuzhealth.mobile.kws", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=be.nexuzhealth.mobile.kws", "group": "Tier 2" }, { "name": "be.nexuzhealth.mobile.mynexuz", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=be.nexuzhealth.mobile.mynexuz", "group": "Tier 2" }, { "name": "kws-companion/id1342124012", "asset_type": "iOS", "location": "https://apps.apple.com/app/kws-companion/id1342124012", "group": "Tier 2" }, { "name": "mynexuz.be", "asset_type": "URL", "location": "http://mynexuz.be", "group": "Tier 2" }, { "name": "mynexuzhealth/id1459856321", "asset_type": "iOS", "location": "https://apps.apple.com/app/mynexuzhealth/id1459856321", "group": "Tier 2" }, { "name": "liquidfiles.nexuzhealth.com", "asset_type": "URL", "location": "http://liquidfiles.nexuzhealth.com", "group": "Tier 3" }, { "name": "*.nexuzhealth.*", "asset_type": "Wildcard", "location": null, "group": "No bounty" } ], "out_of_scope": [ { "name": "static.nexuzhealth.com", "asset_type": "URL", "location": "http://static.nexuzhealth.com", "group": null }, { "name": "pro.nexuzhealth.hn", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=pro.nexuzhealth.hn", "group": null }, { "name": "nexuzhealth.atlassian.net", "asset_type": "URL", "location": "http://nexuzhealth.atlassian.net", "group": null }, { "name": "nexuzhealth-pro/id1623165353", "asset_type": "iOS", "location": "https://apps.apple.com/app/nexuzhealth-pro/id1623165353", "group": null }, { "name": "media.nexuzhealth.be", "asset_type": "URL", "location": "http://media.nexuzhealth.be", "group": null }, { "name": "idp-contact.nexuzhealth.be", "asset_type": "URL", "location": "http://idp-contact.nexuzhealth.be", "group": null }, { "name": "*.nexuzhealth.pro", "asset_type": "Wildcard", "location": null, "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-1bcc010eacd4c9da", "name": "Nexuzhealth Web PACS", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/uz%20leuven/nexuzhealthwebpacs", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:43Z", "scope_source_urls": [ "https://app.intigriti.com/programs/uz%20leuven/nexuzhealthwebpacs/detail" ], "in_scope": [ { "name": "idp-contact.nexuzhealth.be", "asset_type": "URL", "location": "http:// idp-contact.nexuzhealth.be", "group": "Tier 2" }, { "name": "media.nexuzhealth.be/patient/", "asset_type": "URL", "location": "http://media.nexuzhealth.be/patient/ ", "group": "Tier 2" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-d346f2c3e002e82e", "name": "Ninja Kiwi Games Bug Bounty program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/ninjakiwigames/ninjakiwigames", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:44Z", "scope_source_urls": [ "https://app.intigriti.com/programs/ninjakiwigames/ninjakiwigames/detail" ], "in_scope": [ { "name": "analytics.ninjakiwi.com", "asset_type": "URL", "location": "http://analytics.ninjakiwi.com", "group": "Tier 1" }, { "name": "api.ninjakiwi.com", "asset_type": "URL", "location": "http://api.ninjakiwi.com", "group": "Tier 1" }, { "name": "guts.ninjakiwi.com", "asset_type": "URL", "location": "http://guts.ninjakiwi.com", "group": "Tier 1" }, { "name": "*.ninjakiwi.me", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.nkstatic.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "battles.tv", "asset_type": "URL", "location": "http://battles.tv", "group": "Tier 2" }, { "name": "data.ninjakiwi.com", "asset_type": "URL", "location": "http://data.ninjakiwi.com", "group": "Tier 2" }, { "name": "ninja.kiwi", "asset_type": "URL", "location": "http://ninja.kiwi", "group": "Tier 2" }, { "name": "ninjakiwi.com", "asset_type": "URL", "location": "http://ninjakiwi.com", "group": "Tier 2" }, { "name": "alerts.ninjakiwi.com", "asset_type": "URL", "location": "http://alerts.ninjakiwi.com", "group": "Tier 3" }, { "name": "boomer2.ninjakiwi.com", "asset_type": "URL", "location": "http://boomer2.ninjakiwi.com", "group": "Tier 3" }, { "name": "ct.ninjakiwi.com", "asset_type": "URL", "location": "http://ct.ninjakiwi.com", "group": "Tier 3" }, { "name": "mynk-dash.ninjakiwi.com", "asset_type": "URL", "location": "http://mynk-dash.ninjakiwi.com", "group": "Tier 3" }, { "name": "mynk.ninjakiwi.com", "asset_type": "URL", "location": "http://mynk.ninjakiwi.com", "group": "Tier 3" }, { "name": "*.souparea.com", "asset_type": "Wildcard", "location": null, "group": "No bounty" } ], "out_of_scope": [ { "name": "rancher.ninjakiwi.com", "asset_type": "URL", "location": "http://rancher.ninjakiwi.com", "group": null }, { "name": "rancher.ninjakiwi.me", "asset_type": "URL", "location": "http://rancher.ninjakiwi.me", "group": null }, { "name": "store.ninjakiwi.com", "asset_type": "URL", "location": "http://store.ninjakiwi.com", "group": null }, { "name": "support.ninjakiwi.com", "asset_type": "URL", "location": "http://support.ninjakiwi.com", "group": null }, { "name": "icarusadmin.ninjakiwi.com", "asset_type": "URL", "location": "http://icarusadmin.ninjakiwi.com", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-ae62addf0fe136d2", "name": "Nutaku Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/aylo/nutaku-bbp", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/aylo/nutaku-bbp/tac/detail", "http_status": 200, "result": "terms_login_gate", "note": "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "terms_only", "scope_captured_at": "2026-10-03T15:50:46Z", "scope_source_urls": [ "https://app.intigriti.com/programs/aylo/nutaku-bbp/tac/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." ], "review_flags": [] }, { "id": "intigriti-7aa05d09059a0c26", "name": "NVIDIA Public Bug Bounty", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/nvidia/nvidiapublicbugbounty", "bounty_classification": "verified_policy", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "nvidia-public-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:15Z", "scope_source_urls": [ "https://app.intigriti.com/programs/nvidia/nvidiapublicbugbounty/detail" ], "in_scope": [ { "name": "new CDI-based architecture", "asset_type": "Other", "location": null, "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "All Other NVIDIA Container Toolkit Assets", "asset_type": "Other", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "libNVVM API", "asset_type": "Other", "location": null, "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "Nsight Systems", "asset_type": "Other", "location": null, "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "NVIDIA Nsight Developer Tools", "asset_type": "Other", "location": null, "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "NVRTC library", "asset_type": "Other", "location": null, "group": "Tier 1", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "CUDA Libraries", "asset_type": "Other", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "NVCC", "asset_type": "Other", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "nvJitLink APIs", "asset_type": "Other", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "CUDA Runtime APIs", "asset_type": "URL", "location": "http://CUDA Runtime APIs", "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "CUDA Driver APIs", "asset_type": "Other", "location": null, "group": "Tier 3", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [], "limitations": [ "Published asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope." ], "review_flags": [] }, { "id": "intigriti-70430e00f2feb4a3", "name": "Online enrollment for students Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/kuleuven/onlineinschrijvingenbetalingstoepassing", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:48Z", "scope_source_urls": [ "https://app.intigriti.com/programs/kuleuven/onlineinschrijvingenbetalingstoepassing/detail" ], "in_scope": [ { "name": "https://associatie.kuleuven.be/inschrijvingen/oli_login_50000050", "asset_type": "URL", "location": "https://associatie.kuleuven.be/inschrijvingen/oli_login_50000050", "group": "Tier 2" }, { "name": "https://webwsp.aps.kuleuven.be/sap/bc/ui5_ui5/sap/zc_oi_appl/", "asset_type": "URL", "location": "https://webwsp.aps.kuleuven.be/sap/bc/ui5_ui5/sap/zc_oi_appl/", "group": "Tier 2" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-e2cf6e416bbf0ab4", "name": "PDQ bug bounty program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/pdq/pdqcomprivate", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:50Z", "scope_source_urls": [ "https://app.intigriti.com/programs/pdq/pdqcomprivate/detail" ], "in_scope": [ { "name": "https://auth2.pdq.com/", "asset_type": "URL", "location": "https://auth2.pdq.com/", "group": "Tier 2" }, { "name": "https://library.pdq.com/", "asset_type": "URL", "location": "https://library.pdq.com/", "group": "Tier 2" }, { "name": "https://portal.pdq.com/", "asset_type": "URL", "location": "https://portal.pdq.com/", "group": "Tier 3" }, { "name": "https://app.pdq.com/", "asset_type": "URL", "location": "https://app.pdq.com/", "group": "Tier 3" } ], "out_of_scope": [ { "name": "https://a.simplemdm.com/", "asset_type": "URL", "location": "https://a.simplemdm.com/", "group": null }, { "name": "https://*.pdq.com/", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "https://*.pdq.tools/", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "https://*.simplemdm.com/", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "https://*.smartdeploy.com/", "asset_type": "Wildcard", "location": null, "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-f67fd7e02341ee40", "name": "Personio", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/personio/personio", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:51Z", "scope_source_urls": [ "https://app.intigriti.com/programs/personio/personio/detail" ], "in_scope": [ { "name": "*.app.personio-dev.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.app.personio.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.personio-internal.de", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.personio.tools", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "api.personio-dev.com", "asset_type": "URL", "location": "http://api.personio-dev.com", "group": "Tier 2" }, { "name": "api.personio.com", "asset_type": "URL", "location": "http://api.personio.com", "group": "Tier 2" }, { "name": "https://*.personio.de", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "https://*.personiowhistleblowing.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "https://community.personio.com", "asset_type": "URL", "location": "https://community.personio.com", "group": "Tier 3" }, { "name": "https://hug.personio.com", "asset_type": "URL", "location": "https://hug.personio.com", "group": "Tier 2" }, { "name": "https://sec-test--.personio.de", "asset_type": "URL", "location": "https://sec-test--.personio.de", "group": "Tier 2" }, { "name": "https://www.personio.com/free-trial/", "asset_type": "URL", "location": "https://www.personio.com/free-trial/", "group": "Tier 3" }, { "name": "https://www.personio.de/kostenlos-testen/", "asset_type": "URL", "location": "https://www.personio.de/kostenlos-testen/", "group": "Tier 3" }, { "name": "Other assets owned by Personio", "asset_type": "URL", "location": "http://Other assets owned by Personio", "group": "Tier 3" } ], "out_of_scope": [ { "name": "www.personio.de", "asset_type": "URL", "location": "http:// www.personio.de", "group": null }, { "name": "personio.slack.com", "asset_type": "URL", "location": "http://personio.slack.com", "group": null }, { "name": "statuspage.personio.de", "asset_type": "URL", "location": "http://statuspage.personio.de", "group": null }, { "name": "support.personio.de", "asset_type": "URL", "location": "http://support.personio.de", "group": null }, { "name": "www.personio.com", "asset_type": "URL", "location": "http://www.personio.com", "group": null }, { "name": "www.personio.es", "asset_type": "URL", "location": "http://www.personio.es", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-fa268c09399b222d", "name": "Pornhub Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/aylo/pornhub-bbp", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/aylo/pornhub-bbp/tac/detail", "http_status": 200, "result": "terms_login_gate", "note": "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "terms_only", "scope_captured_at": "2026-10-03T15:50:53Z", "scope_source_urls": [ "https://app.intigriti.com/programs/aylo/pornhub-bbp/tac/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." ], "review_flags": [] }, { "id": "intigriti-a92fe9ae2d52c86d", "name": "Port of Antwerp-Bruges", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/portofantwerp/portofantwerp", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 1, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:55Z", "scope_source_urls": [ "https://app.intigriti.com/programs/portofantwerp/portofantwerp/detail" ], "in_scope": [ { "name": "188.118.8.0/25", "asset_type": "IP Range", "location": null, "group": "Tier 2" }, { "name": "94.107.237.192/26", "asset_type": "IP Range", "location": null, "group": "Tier 2" }, { "name": "login-test.portofantwerpbruges.com/", "asset_type": "URL", "location": "http:// login-test.portofantwerpbruges.com/", "group": "Tier 2" }, { "name": "api-accpt.portofantwerp.com", "asset_type": "URL", "location": "http://api-accpt.portofantwerp.com", "group": "Tier 2" }, { "name": "api-accpt.portofantwerpbruges.com", "asset_type": "URL", "location": "http://api-accpt.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "api.portofantwerp.com", "asset_type": "URL", "location": "http://api.portofantwerp.com", "group": "Tier 2" }, { "name": "api.portofantwerpbruges.com", "asset_type": "URL", "location": "http://api.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "apps-accpt.portofantwerp.com", "asset_type": "URL", "location": "http://apps-accpt.portofantwerp.com", "group": "Tier 2" }, { "name": "apps-accpt.portofantwerpbruges.com", "asset_type": "URL", "location": "http://apps-accpt.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "apps.portofantwerp.com", "asset_type": "URL", "location": "http://apps.portofantwerp.com", "group": "Tier 2" }, { "name": "apps.portofantwerpbruges.com", "asset_type": "URL", "location": "http://apps.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "digitalspecs.portofantwerpbruges.com", "asset_type": "URL", "location": "http://digitalspecs.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "login-accpt.portofantwerpbruges.com", "asset_type": "URL", "location": "http://login-accpt.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "maximo-accpt.portofantwerp.com", "asset_type": "URL", "location": "http://maximo-accpt.portofantwerp.com", "group": "Tier 2" }, { "name": "maximo-accpt.portofantwerpbruges.com", "asset_type": "URL", "location": "http://maximo-accpt.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "maximo.portofantwerp.com", "asset_type": "URL", "location": "http://maximo.portofantwerp.com", "group": "Tier 2" }, { "name": "maximo.portofantwerpbruges.com", "asset_type": "URL", "location": "http://maximo.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "my-accpt.portofantwerp.com", "asset_type": "URL", "location": "http://my-accpt.portofantwerp.com", "group": "Tier 2" }, { "name": "my-accpt.portofantwerpbruges.com", "asset_type": "URL", "location": "http://my-accpt.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "my.portofantwerp.com", "asset_type": "URL", "location": "http://my.portofantwerp.com", "group": "Tier 2" }, { "name": "my.portofantwerpbruges.com", "asset_type": "URL", "location": "http://my.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "notula-accpt.portofantwerpbruges.com", "asset_type": "URL", "location": "http://notula-accpt.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "oprc.portofantwerpbruges.com", "asset_type": "URL", "location": "http://oprc.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "register-accpt.portofantwerp.com", "asset_type": "URL", "location": "http://register-accpt.portofantwerp.com", "group": "Tier 2" }, { "name": "register-accpt.portofantwerpbruges.com", "asset_type": "URL", "location": "http://register-accpt.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "servicedesk-accpt.portofantwerp.com", "asset_type": "URL", "location": "http://servicedesk-accpt.portofantwerp.com", "group": "Tier 2" }, { "name": "servicedesk-accpt.portofantwerpbruges.com", "asset_type": "URL", "location": "http://servicedesk-accpt.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "servicedesk.portofantwerp.com", "asset_type": "URL", "location": "http://servicedesk.portofantwerp.com", "group": "Tier 2" }, { "name": "servicedesk.portofantwerpbruges.com", "asset_type": "URL", "location": "http://servicedesk.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "share-accpt.portofantwerp.com", "asset_type": "URL", "location": "http://share-accpt.portofantwerp.com", "group": "Tier 2" }, { "name": "share-accpt.portofantwerpbruges.com", "asset_type": "URL", "location": "http://share-accpt.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "share.portofantwerp.com", "asset_type": "URL", "location": "http://share.portofantwerp.com", "group": "Tier 2" }, { "name": "share.portofantwerpbruges.com", "asset_type": "URL", "location": "http://share.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "webapps-accpt.portofantwerp.com", "asset_type": "URL", "location": "http://webapps-accpt.portofantwerp.com", "group": "Tier 2" }, { "name": "webapps-accpt.portofantwerpbruges.com", "asset_type": "URL", "location": "http://webapps-accpt.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "webapps-test.portofantwerpbruges.com/xui", "asset_type": "URL", "location": "http://webapps-test.portofantwerpbruges.com/xui", "group": "Tier 2" }, { "name": "webapps.portofantwerp.com", "asset_type": "URL", "location": "http://webapps.portofantwerp.com", "group": "Tier 2" }, { "name": "webapps.portofantwerpbruges.com", "asset_type": "URL", "location": "http://webapps.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "wiki-accpt.portofantwerp.com", "asset_type": "URL", "location": "http://wiki-accpt.portofantwerp.com", "group": "Tier 2" }, { "name": "wiki-accpt.portofantwerpbruges.com", "asset_type": "URL", "location": "http://wiki-accpt.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "wiki.portofantwerp.com", "asset_type": "URL", "location": "http://wiki.portofantwerp.com", "group": "Tier 2" }, { "name": "wiki.portofantwerpbruges.com", "asset_type": "URL", "location": "http://wiki.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "www.portofantwerpbruges.com", "asset_type": "URL", "location": "http://www.portofantwerpbruges.com", "group": "Tier 2" }, { "name": "erpx.unit4cloud.com/u4erx_pab_acp1", "asset_type": "URL", "location": "http://erpx.unit4cloud.com/u4erx_pab_acp1", "group": "Tier 3" }, { "name": "erpx.unit4cloud.com/u4erx_pab_prev", "asset_type": "URL", "location": "http://erpx.unit4cloud.com/u4erx_pab_prev", "group": "Tier 3" }, { "name": "erpx.unit4cloud.com/u4erx_pab_prod", "asset_type": "URL", "location": "http://erpx.unit4cloud.com/u4erx_pab_prod", "group": "Tier 3" }, { "name": "*.portofantwerp.com", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "*.portofantwerpbruges.com", "asset_type": "Wildcard", "location": null, "group": "No bounty" } ], "out_of_scope": [ { "name": "future.portofantwerp.com", "asset_type": "URL", "location": "http://future.portofantwerp.com", "group": null }, { "name": "future.portofantwerpbruges.com", "asset_type": "URL", "location": "http://future.portofantwerpbruges.com", "group": null }, { "name": "jobs.portofantwerp.com", "asset_type": "URL", "location": "http://jobs.portofantwerp.com", "group": null }, { "name": "jobs.portofantwerpbruges.com", "asset_type": "URL", "location": "http://jobs.portofantwerpbruges.com", "group": null }, { "name": "media.portofantwerp.com", "asset_type": "URL", "location": "http://media.portofantwerp.com", "group": null }, { "name": "media.portofantwerpbruges.com", "asset_type": "URL", "location": "http://media.portofantwerpbruges.com", "group": null }, { "name": "register.portofantwerp.com", "asset_type": "URL", "location": "http://register.portofantwerp.com", "group": null }, { "name": "register.portofantwerpbruges.com", "asset_type": "URL", "location": "http://register.portofantwerpbruges.com", "group": null }, { "name": "www.oursustainableport.com", "asset_type": "URL", "location": "http://www.oursustainableport.com", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review.", "1 repeated rows in the published table were collapsed in this catalog." ], "review_flags": [] }, { "id": "intigriti-6880eb71eafb4af7", "name": "Posti Bug Bounty", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/posti/postibugbounty", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:50:57Z", "scope_source_urls": [ "https://app.intigriti.com/programs/posti/postibugbounty/detail" ], "in_scope": [ { "name": "postikuori.posti.fi", "asset_type": "URL", "location": "http://postikuori.posti.fi", "group": "Tier 2" }, { "name": "logout.id.posti.fi", "asset_type": "URL", "location": "http://logout.id.posti.fi", "group": "Tier 2" }, { "name": "mfa.posti.fi", "asset_type": "URL", "location": "http://mfa.posti.fi", "group": "Tier 2" }, { "name": "id.posti.fi", "asset_type": "URL", "location": "http://id.posti.fi", "group": "Tier 2" }, { "name": "orgadmin-ext.prd.account.posticloud.fi", "asset_type": "URL", "location": "http://orgadmin-ext.prd.account.posticloud.fi", "group": "Tier 2" }, { "name": "developer.posti.com", "asset_type": "URL", "location": "http://developer.posti.com", "group": "Tier 2" }, { "name": "www.posti.se", "asset_type": "URL", "location": "http://www.posti.se", "group": "Tier 2" }, { "name": "yritysmuutto.posti.fi", "asset_type": "URL", "location": "http://yritysmuutto.posti.fi", "group": "Tier 2" }, { "name": "410789057", "asset_type": "iOS", "location": "https://apps.apple.com/app/410789057", "group": "Tier 2" }, { "name": "api.posti.fi", "asset_type": "URL", "location": "http://api.posti.fi", "group": "Tier 2" }, { "name": "auth-service.posti.fi", "asset_type": "URL", "location": "http://auth-service.posti.fi", "group": "Tier 2" }, { "name": "cdn.posti.fi", "asset_type": "URL", "location": "http://cdn.posti.fi", "group": "Tier 2" }, { "name": "connect.posti.fi", "asset_type": "URL", "location": "http://connect.posti.fi", "group": "Tier 2" }, { "name": "console.posti.com", "asset_type": "URL", "location": "http://console.posti.com", "group": "Tier 2" }, { "name": "elma.elma.fi", "asset_type": "URL", "location": "http://elma.elma.fi", "group": "Tier 2" }, { "name": "fi.itella.posti.android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=fi.itella.posti.android", "group": "Tier 2" }, { "name": "gateway.posti.fi", "asset_type": "URL", "location": "http://gateway.posti.fi", "group": "Tier 2" }, { "name": "https://kontakti.posti.fi", "asset_type": "URL", "location": "https://kontakti.posti.fi", "group": "Tier 2" }, { "name": "https://my.account.posti.fi", "asset_type": "URL", "location": "https://my.account.posti.fi", "group": "Tier 2" }, { "name": "https://my.smartposti.ee/", "asset_type": "URL", "location": "https://my.smartposti.ee/", "group": "Tier 2" }, { "name": "https://my.smartposti.lt", "asset_type": "URL", "location": "https://my.smartposti.lt", "group": "Tier 2" }, { "name": "https://my.smartposti.lv", "asset_type": "URL", "location": "https://my.smartposti.lv", "group": "Tier 2" }, { "name": "https://oma.posti.fi/", "asset_type": "URL", "location": "https://oma.posti.fi/", "group": "Tier 2" }, { "name": "https://printerdriver.posti.com/", "asset_type": "URL", "location": "https://printerdriver.posti.com/", "group": "Tier 2" }, { "name": "https://pro.posti.fi", "asset_type": "URL", "location": "https://pro.posti.fi", "group": "Tier 2" }, { "name": "https://quicksight.aws.amazon.com", "asset_type": "URL", "location": "https://quicksight.aws.amazon.com", "group": "Tier 2" }, { "name": "https://shop.posti.fi", "asset_type": "URL", "location": "https://shop.posti.fi", "group": "Tier 2" }, { "name": "https://tuleasiakkaaksi.posti.fi", "asset_type": "URL", "location": "https://tuleasiakkaaksi.posti.fi", "group": "Tier 2" }, { "name": "https://www.posti.fi", "asset_type": "URL", "location": "https://www.posti.fi", "group": "Tier 2" }, { "name": "https://www.smartposti.ee", "asset_type": "URL", "location": "https://www.smartposti.ee", "group": "Tier 2" }, { "name": "https://www.smartposti.lt", "asset_type": "URL", "location": "https://www.smartposti.lt", "group": "Tier 2" }, { "name": "https://www.smartposti.lv", "asset_type": "URL", "location": "https://www.smartposti.lv", "group": "Tier 2" }, { "name": "https://www.webproteus.com/lpro-web/login", "asset_type": "URL", "location": "https://www.webproteus.com/lpro-web/login", "group": "Tier 2" }, { "name": "https://yrityksennoutopiste.posti.fi", "asset_type": "URL", "location": "https://yrityksennoutopiste.posti.fi", "group": "Tier 2" }, { "name": "jakelu.posti.fi", "asset_type": "URL", "location": "http://jakelu.posti.fi", "group": "Tier 2" }, { "name": "netposti.fi", "asset_type": "URL", "location": "http://netposti.fi", "group": "Tier 2" }, { "name": "nextshipping.posti.fi", "asset_type": "URL", "location": "http://nextshipping.posti.fi", "group": "Tier 2" }, { "name": "partnerselfservice.posti.fi", "asset_type": "URL", "location": "http://partnerselfservice.posti.fi", "group": "Tier 2" }, { "name": "picc.posti.fi", "asset_type": "URL", "location": "http://picc.posti.fi", "group": "Tier 2" }, { "name": "posti.com", "asset_type": "URL", "location": "http://posti.com", "group": "Tier 2" }, { "name": "tnt.posti.com", "asset_type": "URL", "location": "http://tnt.posti.com", "group": "Tier 2" }, { "name": "todentaminen.posti.fi", "asset_type": "URL", "location": "http://todentaminen.posti.fi", "group": "Tier 2" }, { "name": "yhteystietoni.posti.fi", "asset_type": "URL", "location": "http://yhteystietoni.posti.fi", "group": "Tier 2" } ], "out_of_scope": [ { "name": "https://developer.posti.com/support-request", "asset_type": "URL", "location": "https://developer.posti.com/support-request", "group": null }, { "name": "www.posti.fi/henkiloasiakkaat/lomakkeet/tuotantohairiot.html", "asset_type": "URL", "location": "http://www.posti.fi/henkiloasiakkaat/lomakkeet/tuotantohairiot.html", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-9b1c87de2b2d754c", "name": "Probiller Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/aylo/probiller-bbp", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/aylo/probiller-bbp/tac/detail", "http_status": 200, "result": "terms_login_gate", "note": "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "terms_only", "scope_captured_at": "2026-10-03T15:50:59Z", "scope_source_urls": [ "https://app.intigriti.com/programs/aylo/probiller-bbp/tac/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." ], "review_flags": [] }, { "id": "intigriti-50368e0e356572c8", "name": "RAMPF Bug Bounty", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/rampf/rampfbugbounty", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/rampf/rampfbugbounty/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:51:01Z", "scope_source_urls": [ "https://app.intigriti.com/programs/rampf/rampfbugbounty/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-6e7c18751a748f03", "name": "RIPE NCC", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/ripencc/ripencc", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:03Z", "scope_source_urls": [ "https://app.intigriti.com/programs/ripencc/ripencc/detail" ], "in_scope": [ { "name": "access.ripe.net", "asset_type": "URL", "location": "http://access.ripe.net", "group": "Tier 1" }, { "name": "https://github.com/RIPE-NCC/rpki-commons", "asset_type": "Other", "location": null, "group": "Tier 1" }, { "name": "https://github.com/RIPE-NCC/rpki-core", "asset_type": "Other", "location": null, "group": "Tier 1" }, { "name": "https://github.com/RIPE-NCC/whois", "asset_type": "Other", "location": null, "group": "Tier 1" }, { "name": "lirportal.ripe.net", "asset_type": "URL", "location": "http://lirportal.ripe.net", "group": "Tier 1" }, { "name": "*.ripe.net", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "193.0.0.0/19 and 2001:67c:2e8::/48", "asset_type": "IP Range", "location": null, "group": "Tier 2" }, { "name": "https://github.com/RIPE-NCC/rpki-monitoring", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "https://github.com/RIPE-NCC/rpki-ta-0", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Assets owned by RIPE NCC", "asset_type": "URL", "location": "http://Assets owned by RIPE NCC", "group": "No bounty" } ], "out_of_scope": [ { "name": "*.anchors.atlas.ripe.net", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*.probes.atlas.ripe.net", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*aso*ripe.net", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "*nro*ripe.net", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "193.0.0.160/27", "asset_type": "URL", "location": "http://193.0.0.160/27", "group": null }, { "name": "2001:67c:2e8:3::/64", "asset_type": "URL", "location": "http://2001:67c:2e8:3::/64", "group": null }, { "name": "Any *.ripe.net host that is located outside of the in-scope IP ranges", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "exams.ripe.net", "asset_type": "URL", "location": "http://exams.ripe.net", "group": null }, { "name": "https://github.com/RIPE-NCC/rpki-publication-server", "asset_type": "Other", "location": null, "group": null }, { "name": "https://github.com/RIPE-NCC/rsyncit", "asset_type": "Other", "location": null, "group": null }, { "name": "https://labs.ripe.net", "asset_type": "URL", "location": "https://labs.ripe.net", "group": null }, { "name": "RIPE Meeting network (2001:67c:64::/48 and 193.0.24.0/21)", "asset_type": "URL", "location": "http://RIPE Meeting network (2001:67c:64::/48 and 193.0.24.0/21)", "group": null }, { "name": "ripe(1to87).ripe.net", "asset_type": "URL", "location": "http://ripe(1to87).ripe.net", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-b88cdb7491448c6e", "name": "Rivian Bug Bounty", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/rivian/rivianbugbounty", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:04Z", "scope_source_urls": [ "https://app.intigriti.com/programs/rivian/rivianbugbounty/detail" ], "in_scope": [ { "name": "https://business.rivian.com/api", "asset_type": "URL", "location": "https://business.rivian.com/api", "group": "Tier 1" }, { "name": "https://rivian.com/api/gql/content/graphql", "asset_type": "URL", "location": "https://rivian.com/api/gql/content/graphql", "group": "Tier 1" }, { "name": "https://rivian.com/api/gql/gateway/graphql", "asset_type": "URL", "location": "https://rivian.com/api/gql/gateway/graphql", "group": "Tier 1" }, { "name": "https://rivian.com/api/gql/orders/graphql", "asset_type": "URL", "location": "https://rivian.com/api/gql/orders/graphql", "group": "Tier 1" }, { "name": "*.rivian.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "Rivian iOS Application", "asset_type": "iOS", "location": "https://apps.apple.com/app/1570215232", "group": "Tier 2" }, { "name": "basecamp.rivian.com", "asset_type": "URL", "location": "http://basecamp.rivian.com", "group": "Tier 2" }, { "name": "Rivian Android Application", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.rivian.android.consumer", "group": "Tier 2" }, { "name": "rivian.com", "asset_type": "URL", "location": "http://rivian.com", "group": "Tier 2" } ], "out_of_scope": [ { "name": "assets.rivian.com", "asset_type": "URL", "location": "http://assets.rivian.com", "group": null }, { "name": "careers.rivian.com", "asset_type": "URL", "location": "http://careers.rivian.com", "group": null }, { "name": "cloud.e.rivian.com", "asset_type": "URL", "location": "http://cloud.e.rivian.com", "group": null }, { "name": "demovehicles.rivian.com", "asset_type": "URL", "location": "http://demovehicles.rivian.com", "group": null }, { "name": "feedback.rivian.com", "asset_type": "URL", "location": "http://feedback.rivian.com", "group": null }, { "name": "internalshop.rivian.com", "asset_type": "URL", "location": "http://internalshop.rivian.com", "group": null }, { "name": "media.rivian.com", "asset_type": "URL", "location": "http://media.rivian.com", "group": null }, { "name": "stories.rivian.com", "asset_type": "URL", "location": "http://stories.rivian.com", "group": null }, { "name": "view.e.rivian.com", "asset_type": "URL", "location": "http://view.e.rivian.com", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-53e89133e9571255", "name": "SBB - Swiss Federal Railways", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/sbb/sbbglobal", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:06Z", "scope_source_urls": [ "https://app.intigriti.com/programs/sbb/sbbglobal/detail" ], "in_scope": [ { "name": "Mobile Apps", "asset_type": "Other", "location": null, "group": "Tier 1" }, { "name": "*.swisspass.ch", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "www.sbb.ch", "asset_type": "URL", "location": "http://www.sbb.ch", "group": "Tier 2" }, { "name": "*.sbb.ch", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "Mobile Apps", "asset_type": "Other", "location": null, "group": "Tier 3" }, { "name": "www.elvetino.ch", "asset_type": "URL", "location": "http://www.elvetino.ch", "group": "Tier 3" }, { "name": "*elvetino.ch", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "www.sbbcargo.com", "asset_type": "URL", "location": "http://www.sbbcargo.com", "group": "Tier 3" }, { "name": "*sbbcargo.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "www.transsicura.ch", "asset_type": "URL", "location": "http://www.transsicura.ch", "group": "Tier 3" }, { "name": "*transsicura.ch", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "All other Web and mobile APPs owned by SBB", "asset_type": "Other", "location": null, "group": "Tier 4" }, { "name": "All other SBB owned IT assets", "asset_type": "Other", "location": null, "group": "No bounty" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-27539c66a2b5fa2a", "name": "SimScale", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/simscale/simscale", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:08Z", "scope_source_urls": [ "https://app.intigriti.com/programs/simscale/simscale/detail" ], "in_scope": [ { "name": "SimScale API", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "SimScale Platform", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "SimScale Forum", "asset_type": "Other", "location": null, "group": "No bounty" }, { "name": "SimScale Website", "asset_type": "Other", "location": null, "group": "No bounty" } ], "out_of_scope": [ { "name": "https://www.simscale.com/api/v1/projects/*", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "www.simscale.com/forum/users/*.json", "asset_type": "Wildcard", "location": null, "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-2a050558aa4f54b0", "name": "Skoda Auto Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/skodaauto/skodaautoprivatebugbountyprogram", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:09Z", "scope_source_urls": [ "https://app.intigriti.com/programs/skodaauto/skodaautoprivatebugbountyprogram/detail" ], "in_scope": [ { "name": "https://apps.apple.com/cz/app/my%C5%A1koda/id1632202810", "asset_type": "iOS", "location": null, "group": "Tier 2" }, { "name": "cz.skodaauto.myskoda", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=cz.skodaauto.myskoda", "group": "Tier 2" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-5c2f8a1fd693afa1", "name": "Social Deal", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/socialdeal/socialdeal", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:11Z", "scope_source_urls": [ "https://app.intigriti.com/programs/socialdeal/socialdeal/detail" ], "in_scope": [ { "name": "910898851", "asset_type": "iOS", "location": "https://apps.apple.com/app/910898851", "group": "Tier 2" }, { "name": "app.nl.socialdeal", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=app.nl.socialdeal", "group": "Tier 2" }, { "name": "http://socialdeal.nl/inspirations/bluemonday/", "asset_type": "URL", "location": "http://socialdeal.nl/inspirations/bluemonday/", "group": "Tier 2" }, { "name": "http://www.whynot.com/", "asset_type": "URL", "location": "http://www.whynot.com/", "group": "Tier 2" }, { "name": "https://www.socialdeal.nl/orderlist/5e834ae0bed5c/63d772e2ed277/", "asset_type": "URL", "location": "https://www.socialdeal.nl/orderlist/5e834ae0bed5c/63d772e2ed277/", "group": "Tier 2" }, { "name": "www.socialdeal.nl", "asset_type": "URL", "location": "http://www.socialdeal.nl", "group": "Tier 2" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-bf5627ed97dc18ea", "name": "Soundtrack Technologies", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/syb/soundtrackyourbrand", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:13Z", "scope_source_urls": [ "https://app.intigriti.com/programs/syb/soundtrackyourbrand/detail" ], "in_scope": [ { "name": "https://soundtrack.io", "asset_type": "URL", "location": "https://soundtrack.io", "group": "Tier 1" }, { "name": "1114799709", "asset_type": "iOS", "location": "https://apps.apple.com/app/1114799709", "group": "Tier 1" }, { "name": "1114800186", "asset_type": "iOS", "location": "https://apps.apple.com/app/1114800186", "group": "Tier 1" }, { "name": "api.soundtrackyourbrand.com", "asset_type": "URL", "location": "http://api.soundtrackyourbrand.com", "group": "Tier 1" }, { "name": "billing.api.soundtrackyourbrand.com", "asset_type": "URL", "location": "http://billing.api.soundtrackyourbrand.com", "group": "Tier 1" }, { "name": "builds.soundtrackyourbrand.com", "asset_type": "URL", "location": "http://builds.soundtrackyourbrand.com", "group": "Tier 1" }, { "name": "business.soundtrackyourbrand.com", "asset_type": "URL", "location": "http://business.soundtrackyourbrand.com", "group": "Tier 1" }, { "name": "com.soundtrackyourbrand.soundtrack.player", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.soundtrackyourbrand.soundtrack.player", "group": "Tier 1" }, { "name": "https://auth.api.soundtrackyourbrand.com/", "asset_type": "URL", "location": "https://auth.api.soundtrackyourbrand.com/", "group": "Tier 1" }, { "name": "https://builds.soundtrackyourbrand.com/download/WIN32SOUNDTRACK/latest", "asset_type": "Other", "location": null, "group": "Tier 1" }, { "name": "https://radio.api.soundtrackyourbrand.com/", "asset_type": "URL", "location": "https://radio.api.soundtrackyourbrand.com/", "group": "Tier 1" }, { "name": "macOS app", "asset_type": "Other", "location": null, "group": "Tier 1" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-7d5ba7d6826b3b2d", "name": "Sqills", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/sqills/sqillscorporatewebsite", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:15Z", "scope_source_urls": [ "https://app.intigriti.com/programs/sqills/sqillscorporatewebsite/detail" ], "in_scope": [ { "name": "*.sqills.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.sqills.team", "asset_type": "Wildcard", "location": null, "group": "Tier 3" } ], "out_of_scope": [ { "name": "*.red.sqills.team", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "booking.*.cloud.sqills.com", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "booking.*.sqills.com", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "careers.sqills.com", "asset_type": "URL", "location": "http://careers.sqills.com", "group": null }, { "name": "welcome.sqills.com", "asset_type": "URL", "location": "http://welcome.sqills.com", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-2f33df335e66cf37", "name": "Superdrug", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/aswatson/superdrug", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:17Z", "scope_source_urls": [ "https://app.intigriti.com/programs/aswatson/superdrug/detail" ], "in_scope": [ { "name": "www.superdrug.com", "asset_type": "URL", "location": "http://www.superdrug.com", "group": "Tier 1" }, { "name": "Superdrug iOS", "asset_type": "iOS", "location": "https://apps.apple.com/gb/app/superdrug/id1267896687", "group": "Tier 1" }, { "name": "Superdrug Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=superdrug.com.beautycard", "group": "Tier 1" }, { "name": "api.superdrug.com", "asset_type": "URL", "location": "http://api.superdrug.com", "group": "Tier 1" }, { "name": "media.superdrug.com", "asset_type": "URL", "location": "http://media.superdrug.com", "group": "Tier 1" }, { "name": "app.superdrug.com", "asset_type": "URL", "location": "http://app.superdrug.com", "group": "Tier 1" }, { "name": "campaign.superdrug.com", "asset_type": "URL", "location": "http://campaign.superdrug.com", "group": "Tier 4" }, { "name": "community.superdrug.com", "asset_type": "URL", "location": "http://community.superdrug.com", "group": "Tier 4" }, { "name": "ecom-data.superdrug.com", "asset_type": "URL", "location": "http://ecom-data.superdrug.com", "group": "Tier 4" }, { "name": "videogp-api.superdrug.com", "asset_type": "URL", "location": "http://videogp-api.superdrug.com", "group": "Tier 4" }, { "name": "healthclinics.superdrug.com", "asset_type": "URL", "location": "http://healthclinics.superdrug.com", "group": "Tier 4" }, { "name": "innovation.superdrug.com", "asset_type": "URL", "location": "http://innovation.superdrug.com", "group": "Tier 4" }, { "name": "onlinedoctor.superdrug.com", "asset_type": "URL", "location": "http://onlinedoctor.superdrug.com", "group": "Tier 4" }, { "name": "onlinepharmacy.superdrug.com", "asset_type": "URL", "location": "http://onlinepharmacy.superdrug.com", "group": "Tier 4" }, { "name": "videogp.superdrug.com", "asset_type": "URL", "location": "http://videogp.superdrug.com", "group": "Tier 4" }, { "name": "app.pharmacy.superdrug.com", "asset_type": "URL", "location": "http://app.pharmacy.superdrug.com", "group": "Tier 4" }, { "name": "appt.healthclinics.superdrug.com", "asset_type": "URL", "location": "http://appt.healthclinics.superdrug.com", "group": "Tier 4" }, { "name": "www.superdrugmobile.com", "asset_type": "URL", "location": "http://www.superdrugmobile.com", "group": "Tier 4" }, { "name": "*.superdrug.com", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.savers.co.uk", "asset_type": "URL", "location": "http://www.savers.co.uk", "group": "Tier 1" }, { "name": "Savers iOS", "asset_type": "iOS", "location": "https://apps.apple.com/gb/app/savers/id6451311397", "group": "Tier 1" }, { "name": "Savers Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=uk.co.savers", "group": "Tier 1" }, { "name": "api.savers.co.uk", "asset_type": "URL", "location": "http://api.savers.co.uk", "group": "Tier 1" }, { "name": "media.savers.co.uk", "asset_type": "URL", "location": "http://media.savers.co.uk", "group": "Tier 1" }, { "name": "app.savers.co.uk", "asset_type": "URL", "location": "http://app.savers.co.uk", "group": "Tier 1" }, { "name": "campaign.savers.co.uk", "asset_type": "URL", "location": "http://campaign.savers.co.uk", "group": "Tier 4" }, { "name": "ecom-data.savers.co.uk", "asset_type": "URL", "location": "http://ecom-data.savers.co.uk", "group": "Tier 4" }, { "name": "*.savers.co.uk", "asset_type": "Wildcard", "location": null, "group": "Tier 5" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-4f3851c94514719c", "name": "Telenet - Base - Wyre - Tadaam", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/telenet/telenetgroup", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/telenet/telenetgroup/tac/detail", "http_status": 200, "result": "terms_login_gate", "note": "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "terms_only", "scope_captured_at": "2026-10-03T15:51:19Z", "scope_source_urls": [ "https://app.intigriti.com/programs/telenet/telenetgroup/tac/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." ], "review_flags": [] }, { "id": "intigriti-2f2afe2d9629a12c", "name": "The Perfume Shop", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/aswatson/theperfumeshop", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:21Z", "scope_source_urls": [ "https://app.intigriti.com/programs/aswatson/theperfumeshop/detail" ], "in_scope": [ { "name": "www.theperfumeshop.com", "asset_type": "URL", "location": "http://www.theperfumeshop.com", "group": "Tier 1" }, { "name": "app.theperfumeshop.com", "asset_type": "URL", "location": "http://app.theperfumeshop.com", "group": "Tier 1" }, { "name": "api.theperfumeshop.com", "asset_type": "URL", "location": "http://api.theperfumeshop.com", "group": "Tier 1" }, { "name": "media.theperfumeshop.com", "asset_type": "URL", "location": "http://media.theperfumeshop.com", "group": "Tier 1" }, { "name": "The Perfume Shop Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.theperfumeshop.customer", "group": "Tier 1" }, { "name": "The Perfume Shop iOS", "asset_type": "iOS", "location": "https://apps.apple.com/gb/app/the-perfume-shop/id1202206665", "group": "Tier 1" }, { "name": "campaign.theperfumeshop.com", "asset_type": "URL", "location": "http://campaign.theperfumeshop.com", "group": "Tier 4" }, { "name": "campaigns.theperfumeshop.com", "asset_type": "URL", "location": "http://campaigns.theperfumeshop.com", "group": "Tier 4" }, { "name": "ecom-data.theperfumeshop.com", "asset_type": "URL", "location": "http://ecom-data.theperfumeshop.com", "group": "Tier 4" }, { "name": "*.theperfumeshop.com", "asset_type": "Wildcard", "location": null, "group": "Tier 5" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-f065597c6124c877", "name": "Tomorrowland", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/tomorrowland/tomorrowland", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:22Z", "scope_source_urls": [ "https://app.intigriti.com/programs/tomorrowland/tomorrowland/detail" ], "in_scope": [ { "name": "cas.tomorrowland.com", "asset_type": "URL", "location": "http://cas.tomorrowland.com", "group": "Tier 2" }, { "name": "*.weareone.world", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "belgium.tomorrowland.com", "asset_type": "URL", "location": "http://belgium.tomorrowland.com", "group": "Tier 2" }, { "name": "brasil.tomorrowland.com", "asset_type": "URL", "location": "http://brasil.tomorrowland.com", "group": "Tier 2" }, { "name": "com.tomorrowland.oneworldradio", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.tomorrowland.oneworldradio", "group": "Tier 2" }, { "name": "globaljourney.tomorrowland.com", "asset_type": "URL", "location": "http://globaljourney.tomorrowland.com", "group": "Tier 2" }, { "name": "my.tomorrowland.com", "asset_type": "URL", "location": "http://my.tomorrowland.com", "group": "Tier 2" }, { "name": "one-world-radio-tomorrowland/id1485778856", "asset_type": "iOS", "location": "https://apps.apple.com/app/one-world-radio-tomorrowland/id1485778856", "group": "Tier 2" }, { "name": "sp1y1tpaf1.execute-api.eu-west-1.amazonaws.com", "asset_type": "URL", "location": "http://sp1y1tpaf1.execute-api.eu-west-1.amazonaws.com", "group": "Tier 2" }, { "name": "tlbe.prod.tomorrowland.com", "asset_type": "URL", "location": "http://tlbe.prod.tomorrowland.com", "group": "Tier 2" }, { "name": "tlbr.prod.tomorrowland.com", "asset_type": "URL", "location": "http://tlbr.prod.tomorrowland.com", "group": "Tier 2" }, { "name": "tlfr.prod.tomorrowland.com", "asset_type": "URL", "location": "http://tlfr.prod.tomorrowland.com", "group": "Tier 2" }, { "name": "winter.tomorrowland.com", "asset_type": "URL", "location": "http://winter.tomorrowland.com", "group": "Tier 2" }, { "name": "winterpackages.tomorrowland.com", "asset_type": "URL", "location": "http://winterpackages.tomorrowland.com", "group": "Tier 2" }, { "name": "www.tomorrowland.com", "asset_type": "URL", "location": "http://www.tomorrowland.com", "group": "Tier 2" }, { "name": "store.tomorrowland.com", "asset_type": "URL", "location": "http://store.tomorrowland.com", "group": "Tier 3" }, { "name": "brasil-store.tomorrowland.com", "asset_type": "URL", "location": "http://brasil-store.tomorrowland.com", "group": "Tier 3" }, { "name": "*.stag.tomorrowland.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.stag.weareone.world", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.tomorrowland.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "components.stag.tomorrowland.com", "asset_type": "URL", "location": "http://components.stag.tomorrowland.com", "group": "Tier 3" }, { "name": "components.tomorrowland.com", "asset_type": "URL", "location": "http://components.tomorrowland.com", "group": "Tier 3" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-aa94c0ecbba29b2b", "name": "Torfs", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/torfs/torfs", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:24Z", "scope_source_urls": [ "https://app.intigriti.com/programs/torfs/torfs/detail" ], "in_scope": [ { "name": "winkels.torfs.be", "asset_type": "URL", "location": "http://winkels.torfs.be", "group": "Tier 2" }, { "name": "www.schoenentorfs.be", "asset_type": "URL", "location": "http://www.schoenentorfs.be", "group": "Tier 2" }, { "name": "www.schoenentorfs.nl", "asset_type": "URL", "location": "http://www.schoenentorfs.nl ", "group": "Tier 2" }, { "name": "www.torfs.be", "asset_type": "URL", "location": "http://www.torfs.be", "group": "Tier 2" }, { "name": "www.torfs.nl", "asset_type": "URL", "location": "http://www.torfs.nl", "group": "Tier 2" }, { "name": "www.samenfittorfs.be", "asset_type": "URL", "location": "http://www.samenfittorfs.be", "group": "Tier 3" }, { "name": "Any related Torfs domain", "asset_type": "Other", "location": null, "group": "No bounty" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-8307183f06cec029", "name": "TrafficJunky Bug Bounty Program", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/aylo/trafficjunky-bbp", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/aylo/trafficjunky-bbp/tac/detail", "http_status": 200, "result": "terms_login_gate", "note": "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "terms_only", "scope_captured_at": "2026-10-03T15:51:26Z", "scope_source_urls": [ "https://app.intigriti.com/programs/aylo/trafficjunky-bbp/tac/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a terms page with a login or application gate. No public asset rows were visible; terms prose alone was not treated as an asset list." ], "review_flags": [] }, { "id": "intigriti-9112625a73815592", "name": "Trouw", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/dpgm/trouw", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:28Z", "scope_source_urls": [ "https://app.intigriti.com/programs/dpgm/trouw/detail" ], "in_scope": [ { "name": "myaccount.trouw.nl", "asset_type": "URL", "location": "http://myaccount.trouw.nl", "group": "Tier 2" }, { "name": "shop.trouw.nl", "asset_type": "URL", "location": "http://shop.trouw.nl", "group": "Tier 2" }, { "name": "webwinkel.trouw.nl", "asset_type": "URL", "location": "http://webwinkel.trouw.nl", "group": "Tier 2" }, { "name": "www.trouw.nl", "asset_type": "URL", "location": "http://www.trouw.nl", "group": "Tier 2" }, { "name": "www.trouw.nl/abonnementen", "asset_type": "URL", "location": "http://www.trouw.nl/abonnementen", "group": "Tier 2" }, { "name": "*.trouw.nl", "asset_type": "Wildcard", "location": null, "group": "Tier 3" } ], "out_of_scope": [ { "name": "trouw.nl/inloggen", "asset_type": "URL", "location": "http://trouw.nl/inloggen", "group": null }, { "name": "trouw.nl/login", "asset_type": "URL", "location": "http://trouw.nl/login", "group": null }, { "name": "trouw.nl/registreren", "asset_type": "URL", "location": "http://trouw.nl/registreren", "group": null }, { "name": "trouw.nl/service", "asset_type": "URL", "location": "http://trouw.nl/service", "group": null }, { "name": "abonnement.trouw.nl", "asset_type": "URL", "location": "http://abonnement.trouw.nl", "group": null }, { "name": "actie.trouw.nl", "asset_type": "URL", "location": "http://actie.trouw.nl", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-489c0446da1855be", "name": "TrueLayer", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/truelayer/truelayer", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:30Z", "scope_source_urls": [ "https://app.intigriti.com/programs/truelayer/truelayer/detail" ], "in_scope": [ { "name": "api.truelayer[-sandbox].com", "asset_type": "URL", "location": "http://api.truelayer[-sandbox].com", "group": "Tier 1" }, { "name": "api.mtls.truelayer[-sandbox].com", "asset_type": "URL", "location": "http://api.mtls.truelayer[-sandbox].com", "group": "Tier 1" }, { "name": "auth.truelayer[-sandbox].com", "asset_type": "URL", "location": "http://auth.truelayer[-sandbox].com", "group": "Tier 1" }, { "name": "auth.mtls.truelayer[-sandbox].com", "asset_type": "URL", "location": "http://auth.mtls.truelayer[-sandbox].com", "group": "Tier 1" }, { "name": "app.truelayer[-sandbox].com", "asset_type": "URL", "location": "http://app.truelayer[-sandbox].com", "group": "Tier 1" }, { "name": "login-api.truelayer[-sandbox].com", "asset_type": "URL", "location": "http://login-api.truelayer[-sandbox].com", "group": "Tier 1" }, { "name": "login.truelayer[-sandbox].com", "asset_type": "URL", "location": "http://login.truelayer[-sandbox].com", "group": "Tier 1" }, { "name": "onboarding-api.truelayer.com", "asset_type": "URL", "location": "http://onboarding-api.truelayer.com", "group": "Tier 1" }, { "name": "pay-api.truelayer[-sandbox].com", "asset_type": "URL", "location": "http://pay-api.truelayer[-sandbox].com", "group": "Tier 1" }, { "name": "pay.truelayer[-sandbox].com", "asset_type": "URL", "location": "http://pay.truelayer[-sandbox].com", "group": "Tier 1" }, { "name": "paydirect.truelayer[-sandbox].com", "asset_type": "URL", "location": "http://paydirect.truelayer[-sandbox].com", "group": "Tier 1" }, { "name": "payment.truelayer[-sandbox].com", "asset_type": "URL", "location": "http://payment.truelayer[-sandbox].com", "group": "Tier 1" }, { "name": "payments-experience-api.truelayer[-sandbox].com", "asset_type": "URL", "location": "http://payments-experience-api.truelayer[-sandbox].com", "group": "Tier 1" }, { "name": "user-authentication-api.truelayer[-sandbox].com", "asset_type": "URL", "location": "http://user-authentication-api.truelayer[-sandbox].com", "group": "Tier 1" }, { "name": "users-api.truelayer.com", "asset_type": "URL", "location": "http://users-api.truelayer.com", "group": "Tier 1" }, { "name": "C# SDK", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "console-backend.truelayer[-sandbox].com", "asset_type": "URL", "location": "http://console-backend.truelayer[-sandbox].com", "group": "Tier 2" }, { "name": "console.truelayer[-sandbox].com", "asset_type": "URL", "location": "http://console.truelayer[-sandbox].com", "group": "Tier 2" }, { "name": "sftp.reports.truelayer.com", "asset_type": "URL", "location": "http://sftp.reports.truelayer.com", "group": "Tier 2" }, { "name": "Java SDK", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "PHP SDK", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "TrueLayer for Magento (Magento plugin)", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "shopify-admin.truelayer.com", "asset_type": "URL", "location": "http://shopify-admin.truelayer.com", "group": "Tier 2" }, { "name": "shop-pay-app-api.truelayer.com", "asset_type": "URL", "location": "http://shop-pay-app-api.truelayer.com", "group": "Tier 2" }, { "name": "truelayer-signing", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "webhooks.truelayer[-sandbox].com", "asset_type": "URL", "location": "http://webhooks.truelayer[-sandbox].com", "group": "Tier 2" }, { "name": "*.truelayer.cloud", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.truelayer.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.truelayer.io", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "iOS SDK", "asset_type": "Other", "location": null, "group": "Tier 3" }, { "name": "React Native SDK", "asset_type": "Other", "location": null, "group": "Tier 3" }, { "name": "Web SDK", "asset_type": "Other", "location": null, "group": "Tier 3" }, { "name": "Rust SDK", "asset_type": "Other", "location": null, "group": "No bounty" } ], "out_of_scope": [ { "name": "trust.truelayer.com", "asset_type": "URL", "location": "http://trust.truelayer.com", "group": null }, { "name": "TrueLayer for WooCommerce (WordPress plugin)", "asset_type": "Other", "location": null, "group": null }, { "name": "banks.truelayer.com", "asset_type": "URL", "location": "http://banks.truelayer.com", "group": null }, { "name": "careers.truelayer.com", "asset_type": "URL", "location": "http://careers.truelayer.com", "group": null }, { "name": "docs.truelayer.com", "asset_type": "URL", "location": "http://docs.truelayer.com", "group": null }, { "name": "docs.houston.truelayer.com", "asset_type": "URL", "location": "http://docs.houston.truelayer.com", "group": null }, { "name": "https://truelayer.com/contact/", "asset_type": "URL", "location": "https://truelayer.com/contact/", "group": null }, { "name": "index.truelayer.com", "asset_type": "URL", "location": "http://index.truelayer.com", "group": null }, { "name": "info.truelayer.com", "asset_type": "URL", "location": "http://info.truelayer.com", "group": null }, { "name": "signin.truelayer.com", "asset_type": "URL", "location": "http://signin.truelayer.com", "group": null }, { "name": "support.truelayer.com", "asset_type": "URL", "location": "http://support.truelayer.com", "group": null }, { "name": "status.truelayer.com", "asset_type": "URL", "location": "http://status.truelayer.com", "group": null }, { "name": "truelayer.zendesk.com", "asset_type": "URL", "location": "http://truelayer.zendesk.com", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-7024f970275792fe", "name": "Trusted Firmware", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/arm/trustedfirmware", "bounty_classification": "verified_policy", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "verified_policy_record", "verified_policy_id": "trusted-firmware-bug-bounty", "scope_status": "captured", "scope_captured_at": "2026-10-03T14:56:26Z", "scope_source_urls": [ "https://app.intigriti.com/programs/arm/trustedfirmware/detail" ], "in_scope": [ { "name": "TrustedFirmware-A (TF-A)", "asset_type": "Other", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "TrustedFirmware-M (TF-M)", "asset_type": "Other", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "TF-PSA-Crypto", "asset_type": "Other", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] }, { "name": "OP-TEE", "asset_type": "Other", "location": null, "group": "Tier 2", "source_ids": [ "assets-scope-2026-10-03" ] } ], "out_of_scope": [], "limitations": [ "Published asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope." ], "review_flags": [] }, { "id": "intigriti-eec6a40c38d455c1", "name": "Tweakers", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/dpgm/tweakers", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:31Z", "scope_source_urls": [ "https://app.intigriti.com/programs/dpgm/tweakers/detail" ], "in_scope": [ { "name": "*.tweakblogs.net", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.tweakers.net", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.tweakimg.net", "asset_type": "Wildcard", "location": null, "group": "Tier 2" } ], "out_of_scope": [ { "name": "elect.tweakers.net", "asset_type": "URL", "location": "http://elect.tweakers.net", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-e80762bd94c58a62", "name": "Ubisoft Game Security BBP", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/ubisoft/ubisoftgamesecbbp", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/ubisoft/ubisoftgamesecbbp/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:51:33Z", "scope_source_urls": [ "https://app.intigriti.com/programs/ubisoft/ubisoftgamesecbbp/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-545a9316e98fac09", "name": "Uitgeverij Deviant Bug Bounty", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/uitgeverijdeviant/uitgeverijdeviant", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/uitgeverijdeviant/uitgeverijdeviant/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:51:35Z", "scope_source_urls": [ "https://app.intigriti.com/programs/uitgeverijdeviant/uitgeverijdeviant/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-069d131a65f4f903", "name": "UpCloud Bug Bounty", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/upcloud/upcloud", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/upcloud/upcloud/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:51:37Z", "scope_source_urls": [ "https://app.intigriti.com/programs/upcloud/upcloud/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-bb77675d6cfe285d", "name": "Uphold", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/Uphold/upholdcom", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:39Z", "scope_source_urls": [ "https://app.intigriti.com/programs/Uphold/upholdcom/detail" ], "in_scope": [ { "name": "Uphold: Buy BTC, ETH and 360+", "asset_type": "iOS", "location": "https://apps.apple.com/app/1101145849", "group": "Tier 1" }, { "name": "Uphold: Buy BTC, ETH and 300+", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.uphold.wallet", "group": "Tier 1" }, { "name": "docs.uphold.com", "asset_type": "URL", "location": "http://docs.uphold.com", "group": "Tier 3" }, { "name": "wallet-sandbox.uphold.com", "asset_type": "URL", "location": "http://wallet-sandbox.uphold.com", "group": "Tier 1" }, { "name": "api-sandbox.uphold.com", "asset_type": "URL", "location": "http://api-sandbox.uphold.com", "group": "Tier 1" }, { "name": "api-sandbox.uphold.com/graphql", "asset_type": "URL", "location": "http://api-sandbox.uphold.com/graphql", "group": "Tier 1" }, { "name": "portal.enterprise.uphold.com", "asset_type": "URL", "location": "http://portal.enterprise.uphold.com", "group": "Tier 1" }, { "name": "api.portal.enterprise.uphold.com", "asset_type": "URL", "location": "http://api.portal.enterprise.uphold.com ", "group": "Tier 1" }, { "name": "docs.api.enterprise.uphold.com", "asset_type": "URL", "location": "http://docs.api.enterprise.uphold.com", "group": "Tier 3" }, { "name": "app.sandbox.topperpay.com", "asset_type": "URL", "location": "http://app.sandbox.topperpay.com", "group": "Tier 2" }, { "name": "api.sandbox.topperpay.com", "asset_type": "URL", "location": "http://api.sandbox.topperpay.com", "group": "Tier 2" }, { "name": "graphql.sandbox.topperpay.com/graphql", "asset_type": "URL", "location": "http://graphql.sandbox.topperpay.com/graphql", "group": "Tier 2" }, { "name": "docs.topperpay.com", "asset_type": "URL", "location": "http://docs.topperpay.com", "group": "Tier 3" }, { "name": "uatcms.optimuscards.com", "asset_type": "URL", "location": "http://uatcms.optimuscards.com", "group": "Tier 2" }, { "name": "docs.optimuscards.com", "asset_type": "URL", "location": "http://docs.optimuscards.com", "group": "Tier 3" }, { "name": "*.optimuscards.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.topperpay.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.uphold.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "status.uphold.com", "asset_type": "URL", "location": "http://status.uphold.com", "group": "Tier 3" }, { "name": "www.uphold.com", "asset_type": "URL", "location": "http://www.uphold.com", "group": "Tier 3" }, { "name": "www.topperpay.com", "asset_type": "URL", "location": "http://www.topperpay.com", "group": "Tier 3" }, { "name": "www.optimuscards.com", "asset_type": "URL", "location": "http://www.optimuscards.com", "group": "Tier 3" }, { "name": "github.com/uphold/*", "asset_type": "Wildcard", "location": null, "group": "Tier 3" } ], "out_of_scope": [ { "name": "support-sandbox.uphold.com", "asset_type": "URL", "location": "http://support-sandbox.uphold.com", "group": null }, { "name": "support-staging.topperpay.com", "asset_type": "URL", "location": "http://support-staging.topperpay.com", "group": null }, { "name": "www.uphodl.com", "asset_type": "URL", "location": "http://www.uphodl.com", "group": null }, { "name": "*.uphodl.com", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "UpHODL", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.uphold.labs.uphodl.android", "group": null }, { "name": "UpHODL", "asset_type": "iOS", "location": "https://apps.apple.com/app/6444005221", "group": null }, { "name": "api.topperpay.com", "asset_type": "URL", "location": "http://api.topperpay.com", "group": null }, { "name": "api.uphold.com", "asset_type": "URL", "location": "http://api.uphold.com", "group": null }, { "name": "api.uphold.com/graphql", "asset_type": "URL", "location": "http://api.uphold.com/graphql", "group": null }, { "name": "app.topperpay.com", "asset_type": "URL", "location": "http://app.topperpay.com", "group": null }, { "name": "cms.optimuscards.com", "asset_type": "URL", "location": "http://cms.optimuscards.com", "group": null }, { "name": "graphql.topperpay.com/graphql", "asset_type": "URL", "location": "http://graphql.topperpay.com/graphql", "group": null }, { "name": "support.topperpay.com", "asset_type": "URL", "location": "http://support.topperpay.com", "group": null }, { "name": "support.uphold.com", "asset_type": "URL", "location": "http://support.uphold.com", "group": null }, { "name": "wallet.uphold.com", "asset_type": "URL", "location": "http://wallet.uphold.com", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-5b8c3132b79487a4", "name": "UZ Leuven", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/uz%20leuven/uzleuven", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:41Z", "scope_source_urls": [ "https://app.intigriti.com/programs/uz%20leuven/uzleuven/detail" ], "in_scope": [ { "name": "autodiscover.uzleuven.be", "asset_type": "URL", "location": "http://autodiscover.uzleuven.be", "group": "Tier 1" }, { "name": "ecrf.uzleuven.be", "asset_type": "URL", "location": "http://ecrf.uzleuven.be", "group": "Tier 1" }, { "name": "extranet-asa.uzleuven.be", "asset_type": "URL", "location": "http://extranet-asa.uzleuven.be", "group": "Tier 1" }, { "name": "extranet.uzleuven.be", "asset_type": "URL", "location": "http://extranet.uzleuven.be", "group": "Tier 1" }, { "name": "liquidfiles.uzleuven.be", "asset_type": "URL", "location": "http://liquidfiles.uzleuven.be", "group": "Tier 1" }, { "name": "mx1.uzleuven.be", "asset_type": "URL", "location": "http://mx1.uzleuven.be", "group": "Tier 1" }, { "name": "mx2.uzleuven.be", "asset_type": "URL", "location": "http://mx2.uzleuven.be", "group": "Tier 1" }, { "name": "pcrstudioruzb.uzleuven.be", "asset_type": "URL", "location": "http://pcrstudioruzb.uzleuven.be", "group": "Tier 1" }, { "name": "prddsplunkhf.uzleuven.be", "asset_type": "URL", "location": "http://prddsplunkhf.uzleuven.be", "group": "Tier 1" }, { "name": "sts.uzleuven.be", "asset_type": "URL", "location": "http://sts.uzleuven.be", "group": "Tier 1" }, { "name": "www.uzleuven.be", "asset_type": "URL", "location": "http://www.uzleuven.be", "group": "Tier 1" }, { "name": "193.58.149.121,193.58.149.98,193.58.149.82,193.58.149.101,193.58.149.107,193.58.149.108,193.58.149.111", "asset_type": "IP Range", "location": null, "group": "Tier 2" }, { "name": "wp5-truststroke.uzleuven.be", "asset_type": "URL", "location": "http://wp5-truststroke.uzleuven.be", "group": "Tier 2" }, { "name": "cardsonline.azdiest.be", "asset_type": "URL", "location": "http://cardsonline.azdiest.be", "group": "Tier 2" }, { "name": "liquidfilestest.uzleuven.be", "asset_type": "URL", "location": "http://liquidfilestest.uzleuven.be", "group": "Tier 2" }, { "name": "random.uzleuven.be/random/", "asset_type": "URL", "location": "http://random.uzleuven.be/random/", "group": "Tier 2" }, { "name": "teststs.uzleuven.be", "asset_type": "URL", "location": "http://teststs.uzleuven.be", "group": "Tier 2" }, { "name": "w1.uzleuven.be", "asset_type": "URL", "location": "http://w1.uzleuven.be", "group": "Tier 2" }, { "name": "cardsonlinetst.azdiest.be", "asset_type": "URL", "location": "http://cardsonlinetst.azdiest.be", "group": "Tier 3" }, { "name": "*.kwsdose.be", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.playuzleuven.be", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.uzleuven.*", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.contactallerg(y|ie).uzleuven.be", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "*.mir.uzleuven.be", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "*dev.uzleuven.be", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "*idp*.uzleuven.be", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "*stag*.uzleuven.be", "asset_type": "Wildcard", "location": null, "group": "No bounty" }, { "name": "files.uzleuven.be", "asset_type": "URL", "location": "http://files.uzleuven.be", "group": "No bounty" }, { "name": "kumulus.uzleuven.be", "asset_type": "URL", "location": "http://kumulus.uzleuven.be", "group": "No bounty" }, { "name": "mijnacc.uzleuven.be", "asset_type": "URL", "location": "http://mijnacc.uzleuven.be", "group": "No bounty" }, { "name": "mirc.uzleuven.be", "asset_type": "URL", "location": "http://mirc.uzleuven.be", "group": "No bounty" }, { "name": "prddnighting01.uzleuven.be", "asset_type": "URL", "location": "http://prddnighting01.uzleuven.be", "group": "No bounty" }, { "name": "w1.uzleuven.be/random", "asset_type": "URL", "location": "http://w1.uzleuven.be/random", "group": "No bounty" }, { "name": "ziekenhuisschool.be", "asset_type": "URL", "location": "http://ziekenhuisschool.be", "group": "No bounty" } ], "out_of_scope": [ { "name": "boekentoy.uzleuven.be", "asset_type": "URL", "location": "http://boekentoy.uzleuven.be", "group": null }, { "name": "uz-laboboeken.web.app", "asset_type": "URL", "location": "http://uz-laboboeken.web.app", "group": null }, { "name": "laboboeken.uzleuven.be", "asset_type": "URL", "location": "http://laboboeken.uzleuven.be", "group": null }, { "name": "boekentoy.firebaseio.com", "asset_type": "URL", "location": "http://boekentoy.firebaseio.com", "group": null }, { "name": "uz-laboboeken.firebaseio.com", "asset_type": "URL", "location": "http://uz-laboboeken.firebaseio.com", "group": null }, { "name": "jobs.uzleuven.be", "asset_type": "URL", "location": "http://jobs.uzleuven.be", "group": null }, { "name": "uzleuven.atlassian.net", "asset_type": "URL", "location": "http://uzleuven.atlassian.net", "group": null }, { "name": "vacatures.uzleuven.be", "asset_type": "URL", "location": "http://vacatures.uzleuven.be", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-3f2575fc1f1953c9", "name": "Venly", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/arkane/arkanenetwork", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:42Z", "scope_source_urls": [ "https://app.intigriti.com/programs/arkane/arkanenetwork/detail" ], "in_scope": [ { "name": "api-wallet.venly.io", "asset_type": "URL", "location": "http://api-wallet.venly.io", "group": "Tier 2" }, { "name": "api.arkane.network", "asset_type": "URL", "location": "http://api.arkane.network", "group": "Tier 2" }, { "name": "connect.arkane.network", "asset_type": "URL", "location": "http://connect.arkane.network ", "group": "Tier 2" }, { "name": "connect.venly.io", "asset_type": "URL", "location": "http://connect.venly.io", "group": "Tier 2" }, { "name": "login.arkane.network", "asset_type": "URL", "location": "http://login.arkane.network", "group": "Tier 2" }, { "name": "login.venly.io", "asset_type": "URL", "location": "http://login.venly.io", "group": "Tier 2" }, { "name": "wallet.venly.io", "asset_type": "URL", "location": "http://wallet.venly.io", "group": "Tier 2" }, { "name": "api-wallet-sandbox.venly.io", "asset_type": "URL", "location": "http://api-wallet-sandbox.venly.io", "group": "Tier 3" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-631624525009fdeb", "name": "Veriff Bug Bounty", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/veriff/veriffbugbounty", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:44Z", "scope_source_urls": [ "https://app.intigriti.com/programs/veriff/veriffbugbounty/detail" ], "in_scope": [ { "name": "1467907532", "asset_type": "iOS", "location": "https://apps.apple.com/app/1467907532", "group": "Tier 1" }, { "name": "alchemy.veriff.com", "asset_type": "URL", "location": "http://alchemy.veriff.com", "group": "Tier 1" }, { "name": "api.flamingo-eu.veriff.com", "asset_type": "URL", "location": "http://api.flamingo-eu.veriff.com", "group": "Tier 1" }, { "name": "api.us.veriff.me", "asset_type": "URL", "location": "http://api.us.veriff.me", "group": "Tier 1" }, { "name": "api.veriff.me", "asset_type": "URL", "location": "http://api.veriff.me", "group": "Tier 1" }, { "name": "com.veriff.demo", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.veriff.demo", "group": "Tier 1" }, { "name": "louvre.veriff.me", "asset_type": "URL", "location": "http://louvre.veriff.me", "group": "Tier 1" }, { "name": "magic.veriff.me", "asset_type": "URL", "location": "http://magic.veriff.me", "group": "Tier 1" }, { "name": "station.veriff.com", "asset_type": "URL", "location": "http://station.veriff.com", "group": "Tier 1" }, { "name": "stationapi.veriff.com", "asset_type": "URL", "location": "http://stationapi.veriff.com", "group": "Tier 1" }, { "name": "*.veriff.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "developers.veriff.me", "asset_type": "URL", "location": "http://developers.veriff.me", "group": "Tier 3" }, { "name": "www.veriff.com", "asset_type": "URL", "location": "http://www.veriff.com", "group": "Tier 3" } ], "out_of_scope": [ { "name": "https://station.veriff.com/config/", "asset_type": "URL", "location": "https://station.veriff.com/config/", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-12936eec3f8c8c8b", "name": "Visma", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/visma/visma", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:46Z", "scope_source_urls": [ "https://app.intigriti.com/programs/visma/visma/detail" ], "in_scope": [ { "name": "564141518", "asset_type": "iOS", "location": "https://apps.apple.com/app/564141518", "group": "Tier 2" }, { "name": "accountsettings.connect.identity.stagaws.visma.com", "asset_type": "URL", "location": "http://accountsettings.connect.identity.stagaws.visma.com", "group": "Tier 2" }, { "name": "admin.stage.vismaonline.com", "asset_type": "URL", "location": "http://admin.stage.vismaonline.com", "group": "Tier 2" }, { "name": "aiassistant.stage.vismaonline.com", "asset_type": "URL", "location": "http://aiassistant.stage.vismaonline.com", "group": "Tier 2" }, { "name": "api.workbox.dk", "asset_type": "URL", "location": "http://api.workbox.dk", "group": "Tier 2" }, { "name": "app.workbox.dk", "asset_type": "URL", "location": "http://app.workbox.dk", "group": "Tier 2" }, { "name": "authz.workbox.dk", "asset_type": "URL", "location": "http://authz.workbox.dk", "group": "Tier 2" }, { "name": "com.visma.blue", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.visma.blue", "group": "Tier 2" }, { "name": "connect.identity.stagaws.visma.com", "asset_type": "URL", "location": "http://connect.identity.stagaws.visma.com", "group": "Tier 2" }, { "name": "eaccounting.stage.vismaonline.com", "asset_type": "URL", "location": "http://eaccounting.stage.vismaonline.com", "group": "Tier 2" }, { "name": "eaccountingprinting.stage.vismaonline.com", "asset_type": "URL", "location": "http://eaccountingprinting.stage.vismaonline.com", "group": "Tier 2" }, { "name": "identity.stage.vismaonline.com", "asset_type": "URL", "location": "http://identity.stage.vismaonline.com", "group": "Tier 2" }, { "name": "myservices-api.stage.vismaonline.com", "asset_type": "URL", "location": "http://myservices-api.stage.vismaonline.com", "group": "Tier 2" }, { "name": "myservices.stage.vismaonline.com", "asset_type": "URL", "location": "http://myservices.stage.vismaonline.com", "group": "Tier 2" }, { "name": "oauth.developers.stagaws.visma.com", "asset_type": "URL", "location": "http://oauth.developers.stagaws.visma.com", "group": "Tier 2" }, { "name": "photoservice.stage.vismaonline.com", "asset_type": "URL", "location": "http://photoservice.stage.vismaonline.com", "group": "Tier 2" }, { "name": "ai-testing.maventa.com", "asset_type": "URL", "location": "http://ai-testing.maventa.com", "group": "Tier 2" }, { "name": "ax-stage.maventa.com", "asset_type": "URL", "location": "http://ax-stage.maventa.com", "group": "Tier 2" }, { "name": "autointerface.stag.visma.net", "asset_type": "URL", "location": "http://autointerface.stag.visma.net", "group": "Tier 2" }, { "name": "testing.maventa.com", "asset_type": "URL", "location": "http://testing.maventa.com", "group": "Tier 2" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-301c300de67f9961", "name": "Voi Scooters", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/voi/voiscooters", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:48Z", "scope_source_urls": [ "https://app.intigriti.com/programs/voi/voiscooters/detail" ], "in_scope": [ { "name": "Voi – e-scooters & e-bikes", "asset_type": "iOS", "location": "https://apps.apple.com/app/1395921017", "group": "Tier 1" }, { "name": "Voi – e-scooter & e-bike hire", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=io.voiapp.voi", "group": "Tier 1" }, { "name": "https://api.voiapp.io/", "asset_type": "URL", "location": "https://api.voiapp.io/", "group": "Tier 1" }, { "name": "mds.voiapp.io", "asset_type": "URL", "location": "http://mds.voiapp.io", "group": "Tier 1" }, { "name": "fm.voiapp.io", "asset_type": "URL", "location": "http://fm.voiapp.io", "group": "Tier 1" }, { "name": "https://repair.voiweb.net", "asset_type": "URL", "location": "https://repair.voiweb.net", "group": "Tier 3" }, { "name": "report.voi.com", "asset_type": "URL", "location": "http://report.voi.com", "group": "Tier 3" }, { "name": "voi.com", "asset_type": "URL", "location": "http://voi.com", "group": "Tier 3" }, { "name": "*.voi.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.voiscooters.com", "asset_type": "Wildcard", "location": null, "group": "Tier 3" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-c5efdb02e4f8b4e2", "name": "VRT", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/vrtnv/vrtnv", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:50Z", "scope_source_urls": [ "https://app.intigriti.com/programs/vrtnv/vrtnv/detail" ], "in_scope": [ { "name": "API's", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Sockets", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Mobile Applications", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "player.vrt.be", "asset_type": "URL", "location": "http://player.vrt.be", "group": "Tier 2" }, { "name": "profiel.vrt.be", "asset_type": "URL", "location": "http://profiel.vrt.be", "group": "Tier 2" }, { "name": "sporza.be", "asset_type": "URL", "location": "http://sporza.be", "group": "Tier 2" }, { "name": "vrt.be/interactie/121-chat/", "asset_type": "URL", "location": "http://vrt.be/interactie/121-chat/", "group": "Tier 2" }, { "name": "vrt.be/vrtmax", "asset_type": "URL", "location": "http://vrt.be/vrtmax", "group": "Tier 2" }, { "name": "vrt.be/vrtnws", "asset_type": "URL", "location": "http://vrt.be/vrtnws", "group": "Tier 2" }, { "name": "Brand Sites", "asset_type": "Other", "location": null, "group": "No bounty" } ], "out_of_scope": [ { "name": "cds.vrt.radio", "asset_type": "URL", "location": "http://cds.vrt.radio", "group": null }, { "name": "innovatie.vrt.be", "asset_type": "URL", "location": "http://innovatie.vrt.be", "group": null }, { "name": "shop.*.be", "asset_type": "Wildcard", "location": null, "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-07fe0cf3635a7152", "name": "VTM GO", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/dpgm/vtmgo", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:51Z", "scope_source_urls": [ "https://app.intigriti.com/programs/dpgm/vtmgo/detail" ], "in_scope": [ { "name": "myaccount.vtm.be", "asset_type": "URL", "location": "http://myaccount.vtm.be", "group": "Tier 2" }, { "name": "vtm.be/vtmgo", "asset_type": "URL", "location": "http://vtm.be/vtmgo", "group": "Tier 2" }, { "name": "vtmgo.be", "asset_type": "URL", "location": "http://vtmgo.be", "group": "Tier 2" }, { "name": "*.vtm.be", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.vtmgo.be", "asset_type": "Wildcard", "location": null, "group": "Tier 3" } ], "out_of_scope": [ { "name": "vtmgo.be/inloggen", "asset_type": "URL", "location": "http://vtmgo.be/inloggen", "group": null }, { "name": "vtmgo.be/login", "asset_type": "URL", "location": "http://vtmgo.be/login", "group": null }, { "name": "vtmgo.be/registreren", "asset_type": "URL", "location": "http://vtmgo.be/registreren", "group": null }, { "name": "vtmgo.be/service", "asset_type": "URL", "location": "http://vtmgo.be/service", "group": null }, { "name": "shop.vtm.be", "asset_type": "URL", "location": "http://shop.vtm.be", "group": null }, { "name": "customerservice.vtm.be", "asset_type": "URL", "location": "http://customerservice.vtm.be", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-2c18ef465c4e31be", "name": "Water-Link", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/waterlink/water-link", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:53Z", "scope_source_urls": [ "https://app.intigriti.com/programs/waterlink/water-link/detail" ], "in_scope": [ { "name": "https://desktop.water-link.be/", "asset_type": "URL", "location": "https://desktop.water-link.be/", "group": "Tier 2" }, { "name": "https://pit.water-link.be/", "asset_type": "URL", "location": "https://pit.water-link.be/", "group": "Tier 2" }, { "name": "*.water-link.be/", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "*.mijnwater-link.be", "asset_type": "Wildcard", "location": null, "group": "Tier 3" }, { "name": "https://www.water-link-jaarverslag.be", "asset_type": "URL", "location": "https://www.water-link-jaarverslag.be", "group": "Tier 3" }, { "name": "https://www.water-link.be", "asset_type": "URL", "location": "https://www.water-link.be", "group": "Tier 3" }, { "name": "https://www.waterstoring.be/", "asset_type": "URL", "location": "https://www.waterstoring.be/", "group": "Tier 3" } ], "out_of_scope": [ { "name": "aquawardsspatial.water-link.be", "asset_type": "URL", "location": "http://aquawardsspatial.water-link.be", "group": null }, { "name": "gisacc(*).water-link.be", "asset_type": "Wildcard", "location": null, "group": null }, { "name": "https://aquawardsoperate.water-link.be/", "asset_type": "URL", "location": "https://aquawardsoperate.water-link.be/", "group": null }, { "name": "https://aquawardsoperateacc.water-link.be", "asset_type": "URL", "location": "https://aquawardsoperateacc.water-link.be", "group": null }, { "name": "https://feedback.water-link.be", "asset_type": "URL", "location": "https://feedback.water-link.be", "group": null }, { "name": "https://gis.water-link.be", "asset_type": "URL", "location": "https://gis.water-link.be", "group": null }, { "name": "https://gis1.water-link.be", "asset_type": "URL", "location": "https://gis1.water-link.be", "group": null }, { "name": "https://gis2.water-link.be", "asset_type": "URL", "location": "https://gis2.water-link.be", "group": null }, { "name": "https://jobs.water-link.be", "asset_type": "URL", "location": "https://jobs.water-link.be", "group": null }, { "name": "storingvideo-t.water-link.be", "asset_type": "URL", "location": "http://storingvideo-t.water-link.be", "group": null }, { "name": "https://wl_acc.water-link.be/", "asset_type": "URL", "location": "https://wl_acc.water-link.be/", "group": null }, { "name": "https://wl_dev.water-link.be/", "asset_type": "URL", "location": "https://wl_dev.water-link.be/", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-a0e554654771f864", "name": "Watsons", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/aswatson/watsons", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:51:55Z", "scope_source_urls": [ "https://app.intigriti.com/programs/aswatson/watsons/detail" ], "in_scope": [ { "name": "www.watsons.com.hk", "asset_type": "URL", "location": "http://www.watsons.com.hk", "group": "Tier 1" }, { "name": "www10.watsons.com.hk", "asset_type": "URL", "location": "http://www10.watsons.com.hk", "group": "Tier 1" }, { "name": "Watsons Hong Kong Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.ndn.android.watsons", "group": "Tier 1" }, { "name": "Watsons Hong Kong iOS", "asset_type": "iOS", "location": "https://apps.apple.com/hk/app/%E5%B1%88%E8%87%A3%E6%B0%8F%E9%A6%99%E6%B8%AF/id479512803", "group": "Tier 1" }, { "name": "api.watsons.com.hk", "asset_type": "URL", "location": "http://api.watsons.com.hk", "group": "Tier 1" }, { "name": "medias.watsons.com.hk", "asset_type": "URL", "location": "http://medias.watsons.com.hk", "group": "Tier 4" }, { "name": "*.watsons.com.hk", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.watsons.co.th", "asset_type": "URL", "location": "http://www.watsons.co.th", "group": "Tier 1" }, { "name": "www10.watsons.co.th", "asset_type": "URL", "location": "http://www10.watsons.co.th", "group": "Tier 1" }, { "name": "www20.watsons.co.th", "asset_type": "URL", "location": "http://www20.watsons.co.th", "group": "Tier 1" }, { "name": "Watsons Thailand iOS", "asset_type": "iOS", "location": "https://apps.apple.com/hk/app/watsons-th/id619935224", "group": "Tier 1" }, { "name": "Watsons Thailand Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.mtelnet.watson.thailand", "group": "Tier 1" }, { "name": "api.watsons.co.th", "asset_type": "URL", "location": "http://api.watsons.co.th", "group": "Tier 1" }, { "name": "community.watsons.co.th", "asset_type": "URL", "location": "http://community.watsons.co.th", "group": "Tier 4" }, { "name": "medias.watsons.co.th", "asset_type": "URL", "location": "http://medias.watsons.co.th", "group": "Tier 4" }, { "name": "*.watsons.co.th", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.watsons.com.tw", "asset_type": "URL", "location": "http://www.watsons.com.tw", "group": "Tier 1" }, { "name": "www10.watsons.com.tw", "asset_type": "URL", "location": "http://www10.watsons.com.tw", "group": "Tier 1" }, { "name": "Watsons Taiwan Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=tw.com.watsons.app", "group": "Tier 1" }, { "name": "Watsons Taiwan iOS", "asset_type": "iOS", "location": "https://apps.apple.com/hk/app/%E5%B1%88%E8%87%A3%E6%B0%8F%E5%8F%B0%E7%81%A3/id477968775", "group": "Tier 1" }, { "name": "api.watsons.com.tw", "asset_type": "URL", "location": "http://api.watsons.com.tw", "group": "Tier 1" }, { "name": "member.watsons.com.tw", "asset_type": "URL", "location": "http://member.watsons.com.tw", "group": "Tier 4" }, { "name": "medias.watsons.com.tw", "asset_type": "URL", "location": "http://medias.watsons.com.tw", "group": "Tier 4" }, { "name": "*.watsons.com.tw", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.watsons.com.sg", "asset_type": "URL", "location": "http://www.watsons.com.sg", "group": "Tier 1" }, { "name": "www10.watsons.com.sg", "asset_type": "URL", "location": "http://www10.watsons.com.sg", "group": "Tier 1" }, { "name": "Watsons Singapore iOS", "asset_type": "iOS", "location": "https://apps.apple.com/hk/app/watsons-sg-the-official-app/id449412168", "group": "Tier 1" }, { "name": "Watsons Singapore Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.watsons.sg.android", "group": "Tier 1" }, { "name": "api.watsons.com.sg", "asset_type": "URL", "location": "http://api.watsons.com.sg", "group": "Tier 1" }, { "name": "medias.watsons.com.sg", "asset_type": "URL", "location": "http://medias.watsons.com.sg", "group": "Tier 4" }, { "name": "*.watsons.com.sg", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.watsons.com.ph", "asset_type": "URL", "location": "http://www.watsons.com.ph", "group": "Tier 1" }, { "name": "Watsons Philippines iOS", "asset_type": "iOS", "location": "https://apps.apple.com/hk/app/watsons-philippines/id1438203234", "group": "Tier 1" }, { "name": "Watsons Philippines Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.mtelnet.watson.ph", "group": "Tier 1" }, { "name": "api.watsons.com.ph", "asset_type": "URL", "location": "http://api.watsons.com.ph", "group": "Tier 1" }, { "name": "www10.watsons.com.ph", "asset_type": "URL", "location": "http://www10.watsons.com.ph", "group": "Tier 1" }, { "name": "community.watsons.com.ph", "asset_type": "URL", "location": "http://community.watsons.com.ph", "group": "Tier 4" }, { "name": "medias.watsons.com.ph", "asset_type": "URL", "location": "http://medias.watsons.com.ph", "group": "Tier 4" }, { "name": "*.watsons.com.ph", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.lookatme.com.ph", "asset_type": "URL", "location": "http://www.lookatme.com.ph", "group": "Tier 1" }, { "name": "LookAtMe Philippines Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.app.lookphilippines", "group": "Tier 1" }, { "name": "LookAtMe Philippines iOS", "asset_type": "iOS", "location": "https://apps.apple.com/ph/app/look-philippines/id1552856139", "group": "Tier 1" }, { "name": "api.lookatme.com.ph", "asset_type": "URL", "location": "http://api.lookatme.com.ph", "group": "Tier 1" }, { "name": "medias.lookatme.com.ph", "asset_type": "URL", "location": "http://medias.lookatme.com.ph", "group": "Tier 4" }, { "name": "*.lookatme.com.ph", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.watsons.com.my", "asset_type": "URL", "location": "http://www.watsons.com.my", "group": "Tier 1" }, { "name": "www10.watsons.com.my", "asset_type": "URL", "location": "http://www10.watsons.com.my", "group": "Tier 1" }, { "name": "Watsons Malaysia Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.watsons.mcommerce", "group": "Tier 1" }, { "name": "Watsons Malaysia iOS", "asset_type": "iOS", "location": "https://apps.apple.com/hk/app/watsons-my/id1112796292", "group": "Tier 1" }, { "name": "api.watsons.com.my", "asset_type": "URL", "location": "http://api.watsons.com.my", "group": "Tier 1" }, { "name": "community.watsons.com.my", "asset_type": "URL", "location": "http://community.watsons.com.my", "group": "Tier 4" }, { "name": "medias.watsons.com.my", "asset_type": "URL", "location": "http://medias.watsons.com.my", "group": "Tier 4" }, { "name": "*.watsons.com.my", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.watsons.co.id", "asset_type": "URL", "location": "http://www.watsons.co.id", "group": "Tier 1" }, { "name": "www10.watsons.co.id", "asset_type": "URL", "location": "http://www10.watsons.co.id", "group": "Tier 1" }, { "name": "Watsons Indonesia Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.watsons.id.android", "group": "Tier 1" }, { "name": "Watsons Indonesia iOS", "asset_type": "iOS", "location": "https://apps.apple.com/hk/app/watsons-id/id1184851346", "group": "Tier 1" }, { "name": "api.watsons.co.id", "asset_type": "URL", "location": "http://api.watsons.co.id", "group": "Tier 1" }, { "name": "medias.watsons.co.id", "asset_type": "URL", "location": "http://medias.watsons.co.id", "group": "Tier 4" }, { "name": "id-watsonsbesti.com", "asset_type": "URL", "location": "http://id-watsonsbesti.com", "group": "Tier 4" }, { "name": "*.watsons.co.id", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.watsons.vn", "asset_type": "URL", "location": "http://www.watsons.vn", "group": "Tier 1" }, { "name": "www10.watsons.vn", "asset_type": "URL", "location": "http://www10.watsons.vn", "group": "Tier 1" }, { "name": "Watsons Vietnam iOS", "asset_type": "iOS", "location": "https://apps.apple.com/in/app/watsons-vietnam/id1446869800", "group": "Tier 1" }, { "name": "Watsons Vietnam Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.watsons.vn.android", "group": "Tier 1" }, { "name": "api.watsons.vn", "asset_type": "URL", "location": "http://api.watsons.vn", "group": "Tier 1" }, { "name": "medias.watsons.vn", "asset_type": "URL", "location": "http://medias.watsons.vn", "group": "Tier 4" }, { "name": "*.watsons.vn", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.pns.hk", "asset_type": "URL", "location": "http://www.pns.hk", "group": "Tier 1" }, { "name": "www10.pns.hk", "asset_type": "URL", "location": "http://www10.pns.hk", "group": "Tier 1" }, { "name": "api.pns.hk", "asset_type": "URL", "location": "http://api.pns.hk", "group": "Tier 1" }, { "name": "PNS iOS", "asset_type": "iOS", "location": "https://apps.apple.com/hk/app/parknshop/id840837558", "group": "Tier 1" }, { "name": "PNS Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.parknshop.parknshopapp", "group": "Tier 1" }, { "name": "medias.pns.hk", "asset_type": "URL", "location": "http://medias.pns.hk", "group": "Tier 4" }, { "name": "*.pns.hk", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "*.parknshop.com", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.fortress.com.hk", "asset_type": "URL", "location": "http://www.fortress.com.hk", "group": "Tier 1" }, { "name": "www10.fortress.com.hk", "asset_type": "URL", "location": "http://www10.fortress.com.hk", "group": "Tier 1" }, { "name": "Fortress Hong Kong Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=fortress.fortressapp", "group": "Tier 1" }, { "name": "Fortress Hong Kong iOS", "asset_type": "iOS", "location": "https://apps.apple.com/hk/app/fortress/id1133110850", "group": "Tier 1" }, { "name": "api.fortress.com.hk", "asset_type": "URL", "location": "http://api.fortress.com.hk", "group": "Tier 1" }, { "name": "medias.fortress.com.hk", "asset_type": "URL", "location": "http://medias.fortress.com.hk", "group": "Tier 4" }, { "name": "*.fortress.com.hk", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.watsons.com.tr", "asset_type": "URL", "location": "http://www.watsons.com.tr", "group": "Tier 1" }, { "name": "Watsons Turkey Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.mobular.watsons", "group": "Tier 1" }, { "name": "Watsons Turkey iOS", "asset_type": "iOS", "location": "https://apps.apple.com/tr/app/watsons-kozmetik-ve-al%C4%B1%C5%9Fveri%C5%9F/id1507132907", "group": "Tier 1" }, { "name": "app.watsons.com.tr", "asset_type": "URL", "location": "http://app.watsons.com.tr", "group": "Tier 1" }, { "name": "api.watsons.com.tr", "asset_type": "URL", "location": "http://api.watsons.com.tr", "group": "Tier 1" }, { "name": "blog.watsons.com.tr", "asset_type": "URL", "location": "http://blog.watsons.com.tr", "group": "Tier 4" }, { "name": "campaign.watsons.com.tr", "asset_type": "URL", "location": "http://campaign.watsons.com.tr", "group": "Tier 4" }, { "name": "adayevrak.watsons.com.tr", "asset_type": "URL", "location": "http://adayevrak.watsons.com.tr", "group": "Tier 4" }, { "name": "katalog.watsons.com.tr", "asset_type": "URL", "location": "http://katalog.watsons.com.tr", "group": "Tier 4" }, { "name": "www.watsonsbeautystudio.com", "asset_type": "URL", "location": "http://www.watsonsbeautystudio.com", "group": "Tier 4" }, { "name": "ik.watsons.com.tr", "asset_type": "URL", "location": "http://ik.watsons.com.tr", "group": "Tier 4" }, { "name": "gc.watsons.com.tr", "asset_type": "URL", "location": "http://gc.watsons.com.tr", "group": "Tier 4" }, { "name": "odul.watsons.com.tr", "asset_type": "URL", "location": "http://odul.watsons.com.tr", "group": "Tier 4" }, { "name": "wasapi.watsons.com.tr", "asset_type": "URL", "location": "http://wasapi.watsons.com.tr", "group": "Tier 4" }, { "name": "media.watsons.com.tr", "asset_type": "URL", "location": "http://media.watsons.com.tr", "group": "Tier 4" }, { "name": "scp.watsons.com.tr", "asset_type": "URL", "location": "http://scp.watsons.com.tr", "group": "Tier 4" }, { "name": "scpapi.watsons.com.tr", "asset_type": "URL", "location": "http://scpapi.watsons.com.tr", "group": "Tier 4" }, { "name": "bulten.watsons.com.tr", "asset_type": "URL", "location": "http://bulten.watsons.com.tr", "group": "Tier 4" }, { "name": "*.watsons.com.tr", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.drogas.lt", "asset_type": "URL", "location": "http://www.drogas.lt", "group": "Tier 1" }, { "name": "www.drogas.lv", "asset_type": "URL", "location": "http://www.drogas.lv", "group": "Tier 1" }, { "name": "Drogas Latvia Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=lv.drogas.consumer", "group": "Tier 1" }, { "name": "Drogas Latvia iOS", "asset_type": "iOS", "location": "https://apps.apple.com/lv/app/drogas/id1564705644", "group": "Tier 1" }, { "name": "Drogas Lithuania Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=lt.drogas.consumer", "group": "Tier 1" }, { "name": "Drogas Lithuania iOS", "asset_type": "iOS", "location": "https://apps.apple.com/lt/app/drogas/id1571651832", "group": "Tier 1" }, { "name": "app.drogas.lt", "asset_type": "URL", "location": "http://app.drogas.lt", "group": "Tier 1" }, { "name": "api.drogas.lv", "asset_type": "URL", "location": "http://api.drogas.lv", "group": "Tier 1" }, { "name": "media.drogas.lt", "asset_type": "URL", "location": "http://media.drogas.lt", "group": "Tier 1" }, { "name": "app.drogas.lv", "asset_type": "URL", "location": "http://app.drogas.lv", "group": "Tier 1" }, { "name": "api.drogas.lt", "asset_type": "URL", "location": "http://api.drogas.lt", "group": "Tier 1" }, { "name": "media.drogas.lv", "asset_type": "URL", "location": "http://media.drogas.lv", "group": "Tier 1" }, { "name": "campaign.drogas.lt", "asset_type": "URL", "location": "http://campaign.drogas.lt", "group": "Tier 4" }, { "name": "campaign.drogas.lv", "asset_type": "URL", "location": "http://campaign.drogas.lv", "group": "Tier 4" }, { "name": "*.drogas.lt", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "*.drogas.lv", "asset_type": "Wildcard", "location": null, "group": "Tier 5" }, { "name": "www.moneyback.com.hk", "asset_type": "URL", "location": "http://www.moneyback.com.hk", "group": "Tier 2" }, { "name": "Moneyback Android", "asset_type": "Android", "location": "https://play.google.com/store/apps/details?id=com.asw.moneyback", "group": "Tier 2" }, { "name": "Moneyback iOS", "asset_type": "iOS", "location": "https://apps.apple.com/hk/app/moneyback/id1230818544", "group": "Tier 2" }, { "name": "mapi.moneyback.com.hk", "asset_type": "URL", "location": "http://mapi.moneyback.com.hk", "group": "Tier 2" }, { "name": "*.moneyback.com.hk", "asset_type": "Wildcard", "location": null, "group": "Tier 5" } ], "out_of_scope": [], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-c2c21827100d7db4", "name": "Webnode", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/combell/webnode", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/combell/webnode/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:51:57Z", "scope_source_urls": [ "https://app.intigriti.com/programs/combell/webnode/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-43c2b66cd2246ab7", "name": "Wireless Logic", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/wl/wirelesslogic", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": { "reviewed_at": "2026-10-03T17:12:14Z", "policy_url": "https://app.intigriti.com/programs/wl/wirelesslogic/preview/detail", "http_status": 200, "result": "preview_login_gate", "note": "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." }, "policy_review_state": "directory_listing_only", "verified_policy_id": null, "scope_status": "preview_only", "scope_captured_at": "2026-10-03T15:51:59Z", "scope_source_urls": [ "https://app.intigriti.com/programs/wl/wirelesslogic/preview/detail" ], "in_scope": [], "out_of_scope": [], "limitations": [ "Full program policy review remains outstanding.", "No complete public scope table is available in this capture; consult the live official program page.", "The official program detail redirected to a preview page with a login or application gate. No public asset rows were visible." ], "review_flags": [] }, { "id": "intigriti-e8a8e25cbf83374c", "name": "WP Engine Bug Bounty", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/wpengine/wpenginebugbounty", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:01Z", "scope_source_urls": [ "https://app.intigriti.com/programs/wpengine/wpenginebugbounty/detail" ], "in_scope": [ { "name": "https://app.getflywheel.com", "asset_type": "URL", "location": "https://app.getflywheel.com", "group": "Tier 1" }, { "name": "https://getflywheel.com", "asset_type": "URL", "location": "https://getflywheel.com", "group": "Tier 1" }, { "name": "https://my.wpengine.com", "asset_type": "URL", "location": "https://my.wpengine.com", "group": "Tier 1" }, { "name": "https://payments.wpengine.com", "asset_type": "URL", "location": "https://payments.wpengine.com", "group": "Tier 1" }, { "name": "https://wpengine.com", "asset_type": "URL", "location": "https://wpengine.com", "group": "Tier 1" }, { "name": "*. advancedcustomfields.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*. bettersearchreplace.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.deliciousbrains.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.localwp.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.nitropack.io", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.studiopress.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.wpengine.io", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*.wpesvc.net", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "WP Engine-developed WordPress Plugins and Themes", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "https://makeshift.film", "asset_type": "URL", "location": "https://makeshift.film", "group": "Tier 3" }, { "name": "https://studiopress.blog", "asset_type": "URL", "location": "https://studiopress.blog", "group": "Tier 3" }, { "name": "https://torquemag.io", "asset_type": "URL", "location": "https://torquemag.io", "group": "Tier 3" }, { "name": "https://velocitize.com", "asset_type": "URL", "location": "https://velocitize.com", "group": "No bounty" } ], "out_of_scope": [ { "name": "marketing.nitropack.io", "asset_type": "URL", "location": "http://marketing.nitropack.io", "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] }, { "id": "intigriti-cac050d725fa29b1", "name": "Yahoo Bug Bounty", "platform": "Intigriti", "program_url": "https://app.intigriti.com/programs/yahoo/yahoobugbounty", "bounty_classification": "official_directory_paid_listing", "directory_card": null, "scope_source_duplicate_rows": 0, "gap_review": null, "policy_review_state": "scope_table_only", "verified_policy_id": null, "scope_status": "captured", "scope_captured_at": "2026-10-03T15:52:04Z", "scope_source_urls": [ "https://app.intigriti.com/programs/yahoo/yahoobugbounty/detail" ], "in_scope": [ { "name": "*ensemble*.yahoo.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "*omega*.yahoo.com", "asset_type": "Wildcard", "location": null, "group": "Tier 2" }, { "name": "7 News", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "apis.mail.yahoo.com", "asset_type": "URL", "location": "http://apis.mail.yahoo.com", "group": "Tier 2" }, { "name": "data.mail.yahoo.com", "asset_type": "URL", "location": "http://data.mail.yahoo.com", "group": "Tier 2" }, { "name": "Gemini", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Low Cost Access", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Identity Services", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "onepush.query.yahoo.com", "asset_type": "URL", "location": "http://onepush.query.yahoo.com", "group": "Tier 2" }, { "name": "Other (Misc)", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "proddata.xobni.yahoo.com", "asset_type": "URL", "location": "http://proddata.xobni.yahoo.com", "group": "Tier 2" }, { "name": "Social Media Accounts", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "TW eCommerce: Auctions", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "TW eCommerce: Shopping", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "TW eCommerce: Used Car", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "TW Media: Front Page", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "TW Media: News", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "TW Media: Stock", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo Calendar", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo Finance", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo HK News", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo Mail", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo News", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo Open Source Projects", "asset_type": "Other", "location": null, "group": "Tier 3" }, { "name": "Yahoo Search", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo Sports: Best Ball", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo Sports: Daily Fantasy", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo Sports: Editorial", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo Sports: Fantasy Games", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo Sports: Fantasy Slate/PicknWin", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo Sports: Fantasy Sports", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo Sports: Fantasy Wallet", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo Sports: Mobile", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo Video", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo Weather", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "Yahoo! (Misc)", "asset_type": "Other", "location": null, "group": "Tier 2" }, { "name": "yimg.com", "asset_type": "URL", "location": "http://yimg.com", "group": "Tier 2" } ], "out_of_scope": [ { "name": "Flurry", "asset_type": "Other", "location": null, "group": null }, { "name": "TW eCommerce: Store", "asset_type": "Other", "location": null, "group": null } ], "limitations": [ "Only the published asset table was captured; program rules and eligibility still require individual review." ], "review_flags": [] } ] }