Keycloak

{
  "id": "keycloak-bug-bounty-program",
  "name": "Keycloak",
  "public": true,
  "managed": null,
  "targets": {
    "in_scope": [
      {
        "type": "open-source",
        "target": "Keycloak Server"
      },
      {
        "type": "open-source",
        "target": "Keycloak Operator"
      },
      {
        "type": "open-source",
        "target": "JavaScript Client Adapter"
      }
    ],
    "out_of_scope": [
      {
        "type": "other",
        "target": "Any asset that is not explicitly included in our program's scope"
      },
      {
        "type": "other",
        "target": "Any third parties’ or Community’s assets that are not explicitly included (e.g. forks, libraries or packages)"
      },
      {
        "type": "other",
        "target": "Any depreciated versions and other versions than the current stable/official version are considered out of scope except if specified otherwise in the program’s rules"
      },
      {
        "type": "other",
        "target": "Any local implementation of the project/implementation belonging to third parties"
      },
      {
        "type": "other",
        "target": "Experimental features"
      }
    ]
  },
  "disabled": false,
  "max_bounty": 5000,
  "min_bounty": 100
}