Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
7 in-scope
*.ba.comscope· critical*.britishairways.comscope· criticalwww.britishairways.com/nx· criticalwww.britishairways.com· criticalcom.britishairways.BAFlights· criticalSecurity vulnerabilities that are …ways are considered in scope.· criticalcom.ba.mobile· criticalTesting is not permitted on intern…controlled by British Airwaysfirst indexed
92d ago · 7 in-scope assets
No reports yet. Be the first to share your triage timing for British Airways VDP.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/british_airways_vdp",
"name": "British Airways VDP",
"handle": "british_airways_vdp",
"targets": {
"in_scope": [
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.ba.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.britishairways.com",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "OTHER",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "Security vulnerabilities that are identified in digital properties owned, operated, or controlled by British Airways are considered in scope.",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "com.ba.mobile",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "com.britishairways.BAFlights",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "http://www.britishairways.com/nx",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "www.britishairways.com",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
}
],
"out_of_scope": [
{
"asset_type": "OTHER",
"instruction": "",
"max_severity": "none",
"asset_identifier": "Testing is not permitted on internal systems, employee portals, onboard aircraft systems, third-party services, or any assets using external networks or domains not directly owned or controlled by British Airways",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "none",
"asset_identifier": "accounts.britishairways.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "none",
"asset_identifier": "holiday.britishairways.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
}
]
},
"website": "http://britishairways.com",
"offers_swag": false,
"managed_program": true,
"offers_bounties": false,
"submission_state": "open",
"allows_bounty_splitting": false,
"average_time_to_bounty_awarded": 159,
"response_efficiency_percentage": 54,
"average_time_to_report_resolved": 1694,
"average_time_to_first_program_response": 72
}