Sophos

{
  "name": "Sophos",
  "url": "https://bugcrowd.com/engagements/sophos",
  "allows_disclosure": true,
  "managed_by_bugcrowd": true,
  "safe_harbor": "full",
  "max_payout": 80000,
  "targets": {
    "in_scope": [
      {
        "type": "other",
        "target": "https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial ",
        "uri": "https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial ",
        "name": "Intercept X Endpoint (Windows) - Zero-click RCE",
        "ipAddress": null
      },
      {
        "type": "website",
        "target": "https://central.sophos.com/",
        "uri": "https://central.sophos.com/",
        "name": "Sophos Central (Production) - Special Target",
        "ipAddress": ""
      },
      {
        "type": "iot",
        "target": "Sophos Firewall (XG/XGS, SFOS) - Pre-auth RCE",
        "uri": null,
        "name": "Sophos Firewall (XG/XGS, SFOS) - Pre-auth RCE",
        "ipAddress": null
      },
      {
        "type": "website",
        "target": "https://central.sophos.com",
        "uri": "https://central.sophos.com",
        "name": "Sophos Central (Production)",
        "ipAddress": null
      },
      {
        "type": "iot",
        "target": "https://www.sophos.com/en-us/products/next-gen-firewall",
        "uri": "https://www.sophos.com/en-us/products/next-gen-firewall",
        "name": "Sophos Firewall (XG/XGS, SFOS)",
        "ipAddress": null
      },
      {
        "type": "other",
        "target": "https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial",
        "uri": "https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial",
        "name": "Intercept X Endpoint (Windows)",
        "ipAddress": null
      },
      {
        "type": "other",
        "target": "https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial",
        "uri": "https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial",
        "name": "Intercept X Endpoint (MacOS)",
        "ipAddress": null
      },
      {
        "type": "other",
        "target": "https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial",
        "uri": "https://www.sophos.com/en-us/products/endpoint-antivirus/free-trial",
        "name": "Intercept X Endpoint (Linux)",
        "ipAddress": ""
      },
      {
        "type": "ios",
        "target": "https://www.sophos.com/en-us/products/mobile-control/free-trial",
        "uri": "https://www.sophos.com/en-us/products/mobile-control/free-trial",
        "name": "Intercept X Mobile (iOS)",
        "ipAddress": ""
      },
      {
        "type": "android",
        "target": "https://www.sophos.com/en-us/products/mobile-control/free-trial",
        "uri": "https://www.sophos.com/en-us/products/mobile-control/free-trial",
        "name": "Intercept X Mobile (Android)",
        "ipAddress": ""
      },
      {
        "type": "iot",
        "target": "https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/ThreatAnalysisCenter/Integrations/Sophos/NDR/index.html",
        "uri": "https://docs.sophos.com/central/customer/help/en-us/ManageYourProducts/ThreatAnalysisCenter/Integrations/Sophos/NDR/index.html",
        "name": "Sophos NDR Appliances (NDR, Investigation Console)",
        "ipAddress": ""
      },
      {
        "type": "iot",
        "target": "https://www.sophos.com/en-us/products",
        "uri": "https://www.sophos.com/en-us/products",
        "name": "Other Sophos Appliances (RED, Switch, Access Points, ...)",
        "ipAddress": ""
      },
      {
        "type": "network",
        "target": "https://www.sophos.com/",
        "uri": "https://www.sophos.com/",
        "name": "Sophos-owned IT infrastructure (*.sophos.com)",
        "ipAddress": ""
      },
      {
        "type": "other",
        "target": "SOPHOS/Secureworks : Taegis",
        "uri": "",
        "name": "SOPHOS/Secureworks : Taegis",
        "ipAddress": ""
      },
      {
        "type": "other",
        "target": "SOPHOS/Secureworks : Redcloak",
        "uri": "",
        "name": "SOPHOS/Secureworks : Redcloak",
        "ipAddress": ""
      },
      {
        "type": "website",
        "target": "3rd party services hosted at *.sophos.com",
        "uri": "",
        "name": "3rd party services hosted at *.sophos.com",
        "ipAddress": ""
      },
      {
        "type": "other",
        "target": "Sophos IT Infrastructure (all other Sophos domains)",
        "uri": "",
        "name": "Sophos IT Infrastructure (all other Sophos domains)",
        "ipAddress": ""
      },
      {
        "type": "other",
        "target": "Any Other Sophos Product or Service",
        "uri": "",
        "name": "Any Other Sophos Product or Service",
        "ipAddress": null
      }
    ],
    "out_of_scope": [
      {
        "type": "website",
        "target": "community.sophos.com",
        "uri": "",
        "name": "community.sophos.com",
        "ipAddress": null
      },
      {
        "type": "other",
        "target": "Any Cyberoam Product or Service",
        "uri": "",
        "name": "Any Cyberoam Product or Service",
        "ipAddress": ""
      },
      {
        "type": "website",
        "target": "sophos.atlassian.net (Public service desk)",
        "uri": null,
        "name": "sophos.atlassian.net (Public service desk)",
        "ipAddress": null
      },
      {
        "type": "other",
        "target": "SPF/DKIM/DMARC issues",
        "uri": "",
        "name": "SPF/DKIM/DMARC issues",
        "ipAddress": null
      },
      {
        "type": "iot",
        "target": "Sophos Firewall (Early Access Program (EAP) versions)",
        "uri": "",
        "name": "Sophos Firewall (Early Access Program (EAP) versions)",
        "ipAddress": ""
      }
    ]
  }
}