how we sort the index, not an estimate of what you’ll earn
Attack surface
3 in-scope
*.merck.comscope· critical*.msd.comscope· criticalAll other applications (web sites,… & Co., Inc., Rahway, NJ, USA· criticalnone listed
first indexed
92d ago · 3 in-scope assets
No reports yet. Be the first to share your triage timing for Merck & Co., Inc., Rahway, NJ, USA.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/msd",
"name": "Merck & Co., Inc., Rahway, NJ, USA",
"handle": "msd",
"targets": {
"in_scope": [
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.merck.com",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.msd.com",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "OTHER",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "All other applications (web sites, web applications, web services, and mobile applications) owned by Merck & Co., Inc., Rahway, NJ, USA",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
}
],
"out_of_scope": []
},
"website": "",
"offers_swag": false,
"managed_program": true,
"offers_bounties": false,
"submission_state": "open",
"allows_bounty_splitting": false,
"average_time_to_bounty_awarded": null,
"response_efficiency_percentage": 92,
"average_time_to_report_resolved": 812,
"average_time_to_first_program_response": 27
}