how we sort the index, not an estimate of what you’ll earn
Attack surface
9 in-scope
test*.redoxengine.com· critical10x.redoxengine.com· criticaldocs.redoxengine.com· mediumexplore.redoxengine.com· mediumfhir.redoxengine.com· mediumhelp.redoxengine.com· mediumtestapi.redoxengine.com· criticaltestapp.redoxengine.com· criticalwww.redoxengine.com· mediumfirst indexed
92d ago · 9 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Redox.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/redox_bbp",
"name": "Redox",
"handle": "redox_bbp",
"targets": {
"in_scope": [
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "10x.redoxengine.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "medium",
"asset_identifier": "docs.redoxengine.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "This is a marketing site with all public information. Findings here have lesser security implication than our application",
"max_severity": "medium",
"asset_identifier": "explore.redoxengine.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "medium",
"asset_identifier": "fhir.redoxengine.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "medium",
"asset_identifier": "help.redoxengine.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "test*.redoxengine.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "testapi.redoxengine.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "testapp.redoxengine.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "This is our wordpress marketing site. Findings here have lesser security implication than our application",
"max_severity": "medium",
"asset_identifier": "www.redoxengine.com",
"eligible_for_bounty": true,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "low"
}
],
"out_of_scope": [
{
"asset_type": "URL",
"instruction": "Please ensure all testing is performed against the staging instance at testapi.redoxengine.com",
"max_severity": "none",
"asset_identifier": "api.redoxengine.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Please ensure all testing is performed against the staging instance at testapp.redoxengine.com",
"max_severity": "none",
"asset_identifier": "candi.redoxengine.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Please ensure all testing is performed against the staging instance at 10x.redoxengine.com",
"max_severity": "none",
"asset_identifier": "dashboard.redoxengine.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Internal Jira is out of scope",
"max_severity": "none",
"asset_identifier": "https://redoxengine.atlassian.net",
"eligible_for_bounty": false,
"integrity_requirement": "none",
"eligible_for_submission": false,
"availability_requirement": "none",
"confidentiality_requirement": "none"
},
{
"asset_type": "URL",
"instruction": "Internal Slack is out of scope",
"max_severity": "none",
"asset_identifier": "redox.slack.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "sso.redoxengine.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
}
]
},
"website": "https://www.redoxengine.com",
"offers_swag": false,
"managed_program": true,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 26,
"response_efficiency_percentage": 92,
"average_time_to_report_resolved": null,
"average_time_to_first_program_response": 8
}