how we sort the index, not an estimate of what you’ll earn
Attack surface
8 in-scope
alfred.syfe.com· criticalapi-uat-bugbounty.nonprod.syfe.com· criticalapi.syfe.com· criticalmark8.syfe.com· criticaluat-bugbounty.nonprod.syfe.com· criticalwww.syfe.com· criticalcom.syfe· criticalnone listed
− removed 1 scope · alfred-uat-31.nonprod.syfe.com
36d ago
first indexed
92d ago · 9 in-scope assets
No reports yet. Be the first to share your triage timing for Syfe.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/syfe_bbp",
"name": "Syfe",
"handle": "syfe_bbp",
"targets": {
"in_scope": [
{
"asset_type": "URL",
"instruction": "Trading service APIs.",
"max_severity": "critical",
"asset_identifier": "alfred.syfe.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "API domain for the test environment.",
"max_severity": "critical",
"asset_identifier": "api-uat-bugbounty.nonprod.syfe.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "API domain for the user services.",
"max_severity": "critical",
"asset_identifier": "api.syfe.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "Syfe android application.",
"max_severity": "critical",
"asset_identifier": "com.syfe",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "high"
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "Syfe IOS application.",
"max_severity": "critical",
"asset_identifier": "https://apps.apple.com/sg/app/syfe-stay-invested/id1497156434",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Market data API service.",
"max_severity": "critical",
"asset_identifier": "mark8.syfe.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "The primary test environment for the research is provided. The credentials are only valid for this environment.\nNote: Findings on this environment should be applicable on production.",
"max_severity": "critical",
"asset_identifier": "uat-bugbounty.nonprod.syfe.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "Main domain for Syfe. \nPlease self sign-up for the accounts only using your ==@wearehackerone.com== address at [https://www.syfe.com/create-account?utm_source=bug_bounty&medium=bug_bounty](https://www.syfe.com/create-account?utm_source=bug_bounty&medium=bug_bounty) to perform any testing on production. \nRefer to non-qualifying bugs and disqualifiers in program guidelines.",
"max_severity": "critical",
"asset_identifier": "www.syfe.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
}
],
"out_of_scope": []
},
"website": "https://syfe.com",
"offers_swag": false,
"managed_program": true,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": null,
"response_efficiency_percentage": 80,
"average_time_to_report_resolved": 1181,
"average_time_to_first_program_response": 17
}