What this record establishes
Scope capture
Published asset rows were captured. The full policy and eligibility were not individually reviewed.
Directory page 6 explicitly labels this Bug bounty program; full program policy not reviewed; no active/paused status shown.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
*.app.personio-dev.com | Wildcard | Tier 2 |
*.app.personio.com | Wildcard | Tier 2 |
*.personio-internal.de | Wildcard | Tier 2 |
*.personio.tools | Wildcard | Tier 2 |
api.personio-dev.comPublished location: http://api.personio-dev.com | URL | Tier 2 |
api.personio.comPublished location: http://api.personio.com | URL | Tier 2 |
https://*.personio.de | Wildcard | Tier 2 |
https://*.personiowhistleblowing.com | Wildcard | Tier 2 |
https://community.personio.com | URL | Tier 3 |
https://hug.personio.com | URL | Tier 2 |
https://sec-test-<intigriti handle>-<nn>.personio.de | URL | Tier 2 |
https://www.personio.com/free-trial/ | URL | Tier 3 |
https://www.personio.de/kostenlos-testen/ | URL | Tier 3 |
Other assets owned by PersonioPublished location: http://Other assets owned by Personio | URL | Tier 3 |
| Asset | Type | Group / eligibility |
|---|---|---|
www.personio.dePublished location: http:// www.personio.de | URL | |
personio.slack.comPublished location: http://personio.slack.com | URL | |
statuspage.personio.dePublished location: http://statuspage.personio.de | URL | |
support.personio.dePublished location: http://support.personio.de | URL | |
www.personio.comPublished location: http://www.personio.com | URL | |
www.personio.esPublished location: http://www.personio.es | URL |
Capture limits
- Only the published asset table was captured; program rules and eligibility still require individual review.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty. No identity match is inferred from a shared company name.