Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
3 in-scope
first indexed
92d ago · 3 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for GoodRx.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/goodrx",
"name": "GoodRx",
"handle": "goodrx",
"targets": {
"in_scope": [
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "Playstore Download: https://play.google.com/store/apps/details?id=com.goodrx",
"max_severity": "critical",
"asset_identifier": "com.goodrx",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "iOS Download: https://itunes.apple.com/app/id485357017",
"max_severity": "critical",
"asset_identifier": "com.goodrx.iphone",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "This our primary site. Our mobile site m.goodrx.com is also covered by this scope. Only issues regarding the frontend of https://www.goodrx.com/care will be considered in-scope. Any backend issue is belonging to a partner of ours.",
"max_severity": "critical",
"asset_identifier": "www.goodrx.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
}
],
"out_of_scope": [
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "iOS Download: https://itunes.apple.com/app/id1122105489",
"max_severity": "none",
"asset_identifier": "com.goodrx.doctors",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": false,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "Playstore Download: https://play.google.com/store/apps/details?id=com.goodrx.doctors",
"max_severity": "none",
"asset_identifier": "com.goodrx.doctors",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": false,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "iOS Download: https://itunes.apple.com/app/id1249717355",
"max_severity": "none",
"asset_identifier": "com.goodrx.gold",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": false,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "Playstore Download: https://play.google.com/store/apps/details?id=com.goodrx.gold\n\nGold workflow and features are being migrated into the primary GoodRx consumer app. Bounties for the Gold application must be replicated within the core GoodRx application to qualify for a bounty.",
"max_severity": "none",
"asset_identifier": "com.goodrx.gold",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": false,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "This subdomain is not managed by GoodRx.",
"max_severity": "none",
"asset_identifier": "investors.goodrx.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "This sub-domain is manged by Auth0. Bugs hosted on this domain would be covered by Auth0's bug bounty program and not GoodRx's.",
"max_severity": "none",
"asset_identifier": "sso.identity.goodrx.com",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": false,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "This subdomain is managed by Zendesk. Any issues on this page would be covered by Zendesk's bug bounty program.",
"max_severity": "none",
"asset_identifier": "support.goodrx.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
}
]
},
"website": "https://www.goodrx.com",
"offers_swag": false,
"managed_program": true,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": null,
"response_efficiency_percentage": 61,
"average_time_to_report_resolved": null,
"average_time_to_first_program_response": 4
}