Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
6 in-scope
*.simpletax.cascope· critical*.wealthsimple.comscope· criticalcom.wealthsimple.predict· criticalcom.wealthsimple.wealthsimple· criticalcom.wealthsimple· criticalcom.wealthsimple.predict· criticalapp.wealthsimple.comurlgifts.wealthsimple.comurlgroove.wealthsimple.comurlhelp.wealthsimple.comurlnewsroom.wealthsimple.comurlschedule.wealthsimple.comurlshop.wealthsimple.comurlstart.wealthsimple.comurlstatus.wealthsimple.comurlsupport.wealthsimple.comurl+ added 2 scopes · com.wealthsimple.predict, com.wealthsimple.predict
65d ago
first indexed
92d ago · 4 in-scope assets
No reports yet. Be the first to share your triage timing for Wealthsimple.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/wealthsimple",
"name": "Wealthsimple",
"handle": "wealthsimple",
"targets": {
"in_scope": [
{
"asset_type": "WILDCARD",
"instruction": "Please avoid testing tax products during peak tax filing season from **beginning of February to end of April**",
"max_severity": "critical",
"asset_identifier": "*.simpletax.ca",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "Please avoid testing tax products during peak tax filing season from **beginning of February to end of April**",
"max_severity": "critical",
"asset_identifier": "*.wealthsimple.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "com.wealthsimple",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "Wealthsimple Predict is a separate app. If you are an existing Wealthsimple client, you can use the same credentials to log in. Please abide by all account identification and network request limits.",
"max_severity": "critical",
"asset_identifier": "com.wealthsimple.predict",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "Wealthsimple Predict is a separate app. If you are an existing Wealthsimple client, you can use the same credentials to log in. Please abide by all account identification and network request limits.",
"max_severity": "critical",
"asset_identifier": "com.wealthsimple.predict",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "com.wealthsimple.wealthsimple",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
}
],
"out_of_scope": [
{
"asset_type": "URL",
"instruction": "All Appsflyer assets are out of scope.",
"max_severity": "none",
"asset_identifier": "app.wealthsimple.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "All Giftagram assets are out of scope.",
"max_severity": "none",
"asset_identifier": "gifts.wealthsimple.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "All Groove assets are out of scope.",
"max_severity": "none",
"asset_identifier": "groove.wealthsimple.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "All Zendesk assets are out of scope.",
"max_severity": "none",
"asset_identifier": "help.wealthsimple.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "All Prezly assets are out of scope.",
"max_severity": "none",
"asset_identifier": "newsroom.wealthsimple.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "All ScheduleHero assets are out of scope.",
"max_severity": "none",
"asset_identifier": "schedule.wealthsimple.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "All Shopify assets are out of scope.",
"max_severity": "none",
"asset_identifier": "shop.wealthsimple.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "All Typeform assets are out of scope.",
"max_severity": "none",
"asset_identifier": "start.wealthsimple.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "All Atlassian assets are out of scope.",
"max_severity": "none",
"asset_identifier": "status.wealthsimple.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "support.wealthsimple.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "All Archivoh assets are out of scope.",
"max_severity": "none",
"asset_identifier": "tldr-archive.wealthsimple.com",
"eligible_for_bounty": false,
"integrity_requirement": "none",
"eligible_for_submission": false,
"availability_requirement": "none",
"confidentiality_requirement": "none"
},
{
"asset_type": "URL",
"instruction": "All Safebase assets are out of scope.",
"max_severity": "none",
"asset_identifier": "trust.wealthsimple.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "none",
"asset_identifier": "work.wealthsimple.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
}
]
},
"website": "https://www.wealthsimple.com",
"offers_swag": false,
"managed_program": true,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 116,
"response_efficiency_percentage": 89,
"average_time_to_report_resolved": 721,
"average_time_to_first_program_response": 9
}