Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
4 in-scope
All other domains or subdomains no…n the above list of 'Scopes'.otherexplore.alasco.comotherexplore.alasco.deotherwww.alasco.deotherwww.alasco.comotheralasco.deotheralasco.comotherlp.alasco.deotherlp.alasco.comothersupport.alasco.deothersupport.alasco.comotherPlease note that all non-authentic…ess is eligible for a reward.otherHowever, any vulnerability discove…de the scope of this program.otherAlasco will not provide access cre…lso not for issue validation.otherAttention: Third-party managed inf… regardless of the subdomain.otherfirst indexed
91d ago · 4 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Alasco GmbH - Bug Bounty Program.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "alasco-gmbh-bug-bounty-program",
"name": "Alasco GmbH - Bug Bounty Program",
"public": true,
"managed": null,
"targets": {
"in_scope": [
{
"type": "web-application",
"target": "app.alasco.de"
},
{
"type": "api",
"target": "api.alasco.de"
},
{
"type": "other",
"target": "*.alasco.de"
},
{
"type": "other",
"target": "*.alasco.rocks"
}
],
"out_of_scope": [
{
"type": "other",
"target": "All other domains or subdomains not listed in the above list of 'Scopes'."
},
{
"type": "other",
"target": "explore.alasco.com"
},
{
"type": "other",
"target": "explore.alasco.de"
},
{
"type": "other",
"target": "www.alasco.de"
},
{
"type": "other",
"target": "www.alasco.com"
},
{
"type": "other",
"target": "alasco.de"
},
{
"type": "other",
"target": "alasco.com"
},
{
"type": "other",
"target": "lp.alasco.de"
},
{
"type": "other",
"target": "lp.alasco.com"
},
{
"type": "other",
"target": "support.alasco.de"
},
{
"type": "other",
"target": "support.alasco.com"
},
{
"type": "other",
"target": "Please note that all non-authenticated areas of our systems are in scope for this program. This means that any vulnerability discovered in a system or service that does not require a login to access is eligible for a reward."
},
{
"type": "other",
"target": "However, any vulnerability discovered in a system or service that requires a login to access is outside the scope of this program."
},
{
"type": "other",
"target": "Alasco will not provide access credentials to any system, not for testing and also not for issue validation."
},
{
"type": "other",
"target": "Attention: Third-party managed infrastructure (e.g. HubSpot, Salesforce, or other SaaS platforms) where Alasco has no ability to remediate vulnerabilities at the infrastructure or platform level, regardless of the subdomain."
}
]
},
"disabled": false,
"max_bounty": 1000,
"min_bounty": 50
}