Yoti

{
  "id": 0,
  "url": "https://hackerone.com/yoti",
  "name": "Yoti",
  "handle": "yoti",
  "targets": {
    "in_scope": [
      {
        "asset_type": "APPLE_STORE_APP_ID",
        "instruction": "https://itunes.apple.com/us/app/yoti/id983980808",
        "max_severity": "critical",
        "asset_identifier": "983980808",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "api.yoti.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "ccloud.yoti.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "code.yoti.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "instruction": "https://play.google.com/store/apps/details?id=com.yoti.mobile.android.live",
        "max_severity": "critical",
        "asset_identifier": "com.yoti.mobile.android.live",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "core.yoti.com",
        "eligible_for_bounty": true,
        "integrity_requirement": null,
        "eligible_for_submission": true,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "you must use \"[Hackerone] <whatever name here>\" when creating any organisation/application/service within Hub!",
        "max_severity": "critical",
        "asset_identifier": "hub.yoti.com",
        "eligible_for_bounty": true,
        "integrity_requirement": "medium",
        "eligible_for_submission": true,
        "availability_requirement": "low",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "URL",
        "instruction": "",
        "max_severity": "critical",
        "asset_identifier": "identity.yoti.com",
        "eligible_for_bounty": true,
        "integrity_requirement": "high",
        "eligible_for_submission": true,
        "availability_requirement": "low",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "URL",
        "instruction": "You must use \"[Hackerone] ORG_NAME\" when registering an organisation!",
        "max_severity": "critical",
        "asset_identifier": "www.yotisign.com",
        "eligible_for_bounty": true,
        "integrity_requirement": "high",
        "eligible_for_submission": true,
        "availability_requirement": "high",
        "confidentiality_requirement": "high"
      }
    ],
    "out_of_scope": [
      {
        "asset_type": "OTHER",
        "instruction": null,
        "max_severity": "none",
        "asset_identifier": "Yoti Password Manager browser extension",
        "eligible_for_bounty": false,
        "integrity_requirement": "high",
        "eligible_for_submission": false,
        "availability_requirement": "low",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "OTHER",
        "instruction": null,
        "max_severity": "none",
        "asset_identifier": "Yoti liveness detection campaign",
        "eligible_for_bounty": false,
        "integrity_requirement": "high",
        "eligible_for_submission": false,
        "availability_requirement": "none",
        "confidentiality_requirement": "high"
      },
      {
        "asset_type": "URL",
        "instruction": "Please DO NOT test this domain - it is a third party hosted documentation site for developers, and not of concern to us. The third-party service DO NOT want this site tested. Thank you!",
        "max_severity": "none",
        "asset_identifier": "developers.yoti.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      },
      {
        "asset_type": "URL",
        "instruction": "Please DO NOT report items from this website, unless you deem them to be critical in nature. WPSCAN findings will not be accepted.",
        "max_severity": "none",
        "asset_identifier": "www.yoti.com",
        "eligible_for_bounty": false,
        "integrity_requirement": null,
        "eligible_for_submission": false,
        "availability_requirement": null,
        "confidentiality_requirement": null
      }
    ]
  },
  "website": "http://www.yoti.com",
  "offers_swag": false,
  "managed_program": false,
  "offers_bounties": true,
  "submission_state": "open",
  "allows_bounty_splitting": true,
  "average_time_to_bounty_awarded": null,
  "response_efficiency_percentage": 9,
  "average_time_to_report_resolved": null,
  "average_time_to_first_program_response": 1619
}