Attack surface
5 in-scope
cloud.rocket.chat· criticalrocket.chat· critical— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Rocket.Chat.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
first indexed
2d ago · 5 in-scope assets
// only one snapshot on record — changes appear from the next ingest onward
{
"id": 0,
"url": "https://hackerone.com/rocket_chat",
"name": "Rocket.Chat",
"handle": "rocket_chat",
"targets": {
"in_scope": [
{
"asset_type": "URL",
"instruction": "This app is responsible for our customers SaaS management.",
"max_severity": "critical",
"asset_identifier": "cloud.rocket.chat",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "SOURCE_CODE",
"instruction": "Here is the document in how to install rocket.chat: https://www.rocket.chat/install",
"max_severity": "critical",
"asset_identifier": "https://github.com/RocketChat/Rocket.Chat",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "SOURCE_CODE",
"instruction": "You can build it or download from: https://www.rocket.chat/install#Apps",
"max_severity": "medium",
"asset_identifier": "https://github.com/RocketChat/Rocket.Chat.Electron",
"eligible_for_bounty": false,
"integrity_requirement": "low",
"eligible_for_submission": true,
"availability_requirement": "none",
"confidentiality_requirement": "low"
},
{
"asset_type": "SOURCE_CODE",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://github.com/RocketChat/Rocket.Chat.ReactNative",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "Today we're using a third-party company to host our rocket.chat static website but if you find anything that could compromise us based in our configuration, feel free to report.",
"max_severity": "critical",
"asset_identifier": "rocket.chat",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
}
],
"out_of_scope": []
},
"website": "https://rocket.chat",
"offers_swag": true,
"managed_program": false,
"offers_bounties": false,
"submission_state": "open",
"allows_bounty_splitting": false,
"average_time_to_bounty_awarded": null,
"response_efficiency_percentage": 74,
"average_time_to_report_resolved": 1356,
"average_time_to_first_program_response": 222
}github.com/RocketChat/Rocket.Chat· criticalgithub.com/RocketChat/Rocket.Chat.Electron· mediumgithub.com/RocketChat/Rocket.Chat.ReactNative· critical— none listed —