bounty.index
/to search
Live data paused. Neon is grumpy. Programs still load from the upstream mirror; watchlists and alerts are taking a nap.
Featured on
Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates
programs/HackerOne/basecamp
Basecamp

HackerOne·17 in-scope · 3 out·updated 13m ago·RSS
Discord →open program
bountyswagopen
first response
—
no reports yet
scope
3 out
asset mix
other
7 other · 4 url · 3 source_code
last change
—
no history yet
In scope

017
wildcards01
+*.hey.com· critical
urls04
+app.basecamp.com· critical
Recent changes

— no diffs detected in snapshot history yet —
Community reports

0 reports
No reports yet — be the first to share your triage timing for Basecamp.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
Your notes

▸ raw source payload
{
  "allows_bounty_splitting": true,
  "average_time_to_bounty_awarded": 229,
  "average_time_to_first_program_response": 13,
  "average_time_to_report_resolved": 8175,
  "handle": "basecamp",
  "id": 0,
  "managed_program": false,
  "name": "Basecamp",
  "offers_bounties": true,
  "offers_swag": true,
  "response_efficiency_percentage": 100,
  "submission_state": "open",
  "url": "https://hackerone.com/basecamp",
  "website": "https://37signals.com/policies/security/response",
  "targets": {
    "in_scope": [
      {
        "asset_identifier": "*.hey.com",
        "asset_type": "WILDCARD",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "Basecamp.app",
        "asset_type": "DOWNLOADABLE_EXECUTABLES",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "Basecamp for Mac: https://basecamp.com/via#basecamp-for-your-mac-or-pc",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "HEY.app",
        "asset_type": "DOWNLOADABLE_EXECUTABLES",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "HEY for macOS: https://hey.com/apps/",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "HEY.exe",
        "asset_type": "WINDOWS_APP_STORE_APP_ID",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "HEY for Windows: https://www.microsoft.com/en-us/p/hey-mail/9pf08ljw7gw2",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "app.basecamp.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "Basecamp 5",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "app.fizzy.do",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "Full source code is available at https://github.com/basecamp/fizzy and https://github.com/basecamp/fizzy-saas",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "basecamp-setup.exe",
        "asset_type": "DOWNLOADABLE_EXECUTABLES",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "Basecamp for Windows: https://basecamp.com/via#basecamp-for-your-mac-or-pc",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "com.basecamp.bc3",
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "Basecamp for Android: https://basecamp.com/via#basecamp-for-ios-and-android-devices",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "com.basecamp.bc3-ios",
        "asset_type": "APPLE_STORE_APP_ID",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "Basecamp for iOS: https://basecamp.com/via#basecamp-for-ios-and-android-devices",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "com.basecamp.hey",
        "asset_type": "GOOGLE_PLAY_APP_ID",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "HEY for Android: https://play.google.com/store/apps/details?id=com.basecamp.hey",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "com.hey.app.ios",
        "asset_type": "APPLE_STORE_APP_ID",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "HEY for iOS: https://apps.apple.com/us/app/hey-email/id1506603805",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "hey-mail",
        "asset_type": "DOWNLOADABLE_EXECUTABLES",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "HEY for Linux: https://snapcraft.io/hey-mail/",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "https://github.com/basecamp/once-campfire",
        "asset_type": "SOURCE_CODE",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "[Campfire](https://once.com/campfire) is an installable, self-hosted group chat system designed, built, and backed by 37signals.\n\nhttps://once.com/campfire",
        "integrity_requirement": null,
        "max_severity": "high"
      },
      {
        "asset_identifier": "https://github.com/basecamp/trix",
        "asset_type": "SOURCE_CODE",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "[Trix](https://trix-editor.org/) is a rich text editor used in HEY. \n\nFindings in Trix that are reproducible in HEY are eligible for bounties, but other issues that are mitigated in HEY and only reproducible in standalone Trix or in a different app setting are not eligible for bounty. ",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "https://github.com/basecamp/writebook",
        "asset_type": "SOURCE_CODE",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "[Writebook](https://once.com/writebook) is an installable, self-hosted app to publish your own books on the web. \n\nhttps://once.com/writebook",
        "integrity_requirement": null,
        "max_severity": "high"
      },
      {
        "asset_identifier": "launchpad.37signals.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "Launchpad",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "world.hey.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      }
    ],
    "out_of_scope": [
      {
        "asset_identifier": "*.basecamphq.com",
        "asset_type": "WILDCARD",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": "Basecamp Classic",
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "*.highrisehq.com",
        "asset_type": "WILDCARD",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": "Highrise",
        "integrity_requirement": "high",
        "max_severity": "none"
      },
      {
        "asset_identifier": "basecamp.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": "Basecamp 2",
        "integrity_requirement": null,
        "max_severity": "none"
      }
    ]
  }
}