Featured on
Featured on
— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Bykea.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 18,
"average_time_to_first_program_response": 4,
"average_time_to_report_resolved": null,
"handle": "bykea",
"id": 0,
"managed_program": false,
"name": "Bykea",
"offers_bounties": true,
"offers_swag": false,
"response_efficiency_percentage": 100,
"submission_state": "open",
"url": "https://hackerone.com/bykea",
"website": "https://bykea.com",
"targets": {
"in_scope": [
{
"asset_identifier": "*.bykea.net",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "1351179184",
"asset_type": "APPLE_STORE_APP_ID",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "The customer iOS app enables users to book rides, deliveries, and manage payments, offering a seamless experience for various services.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "bykea.com",
"asset_type": "URL",
"availability_requirement": "not_defined",
"confidentiality_requirement": "not_defined",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "not_defined",
"max_severity": "critical"
},
{
"asset_identifier": "com.bykea.pk",
"asset_type": "GOOGLE_PLAY_APP_ID",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "The customer android app enables users to book rides, deliveries, and manage payments, offering a seamless experience for various services.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "com.bykea.pk.partner",
"asset_type": "GOOGLE_PLAY_APP_ID",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "The driver app offers core features such as wallet management, invoicing, booking visibility, and acceptance, supporting seamless driver operations on the platform.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://*test*.bykea.net",
"asset_type": "WILDCARD",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://api.bykea.net",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "This core microservice handles booking creation and facilitates communication between critical microservices, powering both the apps and overall business operations.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://geocode-beta.bykea.net",
"asset_type": "URL",
"availability_requirement": "not_defined",
"confidentiality_requirement": "not_defined",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "not_defined",
"max_severity": "critical"
},
{
"asset_identifier": "https://googleplace*.bykea.net",
"asset_type": "WILDCARD",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://kronos*.bykea.net",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "This API-based microservice manages invoicing functionalities, playing a vital role in our platform’s financial operations. ",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://leaflet-map.bykea.net",
"asset_type": "URL",
"availability_requirement": "not_defined",
"confidentiality_requirement": "not_defined",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": " ",
"integrity_requirement": "not_defined",
"max_severity": "critical"
},
{
"asset_identifier": "https://loadboard*.bykea.net/",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "This asset is an API-based microservice that allows drivers to view and accept customer bookings.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://maps.bykea.net",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://nominatim.bykea.net",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": " ",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://raptor*.bykea.net",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "This asset is an API-based microservice responsible for authentication processes.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "tomoe.bykea.net",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Kong API Gateway serving as the backend gateway for all mobile application traffic.\n",
"integrity_requirement": "high",
"max_severity": "critical"
}
],
"out_of_scope": [
{
"asset_identifier": "*.tellocast.com",
"asset_type": "WILDCARD",
"availability_requirement": "none",
"confidentiality_requirement": "none",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "Belongs to tilism tech services which is a third party service.",
"integrity_requirement": "none",
"max_severity": "none"
},
{
"asset_identifier": "www.tilismtechservices.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "This is a third-party service; therefore, issues related to this asset are out of scope for our program.",
"integrity_requirement": null,
"max_severity": "none"
}
]
}
}googleplace*.bykea.net1351179184· critical