What this record establishes
Scope capture
Published asset rows were captured. The full policy and eligibility were not individually reviewed.
Directory page 6 explicitly labels this Bug bounty program; full program policy not reviewed; no active/paused status shown.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
Mobile Apps | Other | Tier 1 |
*.swisspass.ch | Wildcard | Tier 2 |
www.sbb.chPublished location: http://www.sbb.ch | URL | Tier 2 |
*.sbb.ch | Wildcard | Tier 3 |
Mobile Apps | Other | Tier 3 |
www.elvetino.chPublished location: http://www.elvetino.ch | URL | Tier 3 |
*elvetino.ch | Wildcard | Tier 3 |
www.sbbcargo.comPublished location: http://www.sbbcargo.com | URL | Tier 3 |
*sbbcargo.com | Wildcard | Tier 3 |
www.transsicura.chPublished location: http://www.transsicura.ch | URL | Tier 3 |
*transsicura.ch | Wildcard | Tier 3 |
All other Web and mobile APPs owned by SBB | Other | Tier 4 |
All other SBB owned IT assets | Other | No bounty |
| Asset | Type | Group / eligibility |
|---|---|---|
| No rows captured. This does not establish that the program has no assets or restrictions. | ||
Capture limits
- Only the published asset table was captured; program rules and eligibility still require individual review.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty. No identity match is inferred from a shared company name.