Featured on
Featured on
— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for CLEAR.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 421,
"average_time_to_first_program_response": 12,
"average_time_to_report_resolved": 332,
"handle": "clear",
"id": 0,
"managed_program": true,
"name": "CLEAR",
"offers_bounties": true,
"offers_swag": false,
"response_efficiency_percentage": 86,
"submission_state": "open",
"url": "https://hackerone.com/clear",
"website": "https://www.clearme.com/",
"targets": {
"in_scope": [
{
"asset_identifier": "authentication.clearme.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "clearme.atlassian.net",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Clear Service Support Platform.\nRegistration & Login using arbitrary domains is out of scope. \nPlease only report misconfigurations that result in vulnerabilities. Any vulnerabilities in the Atlassian Platform itself should be reported to their [vulnerability disclosure program](https://www.atlassian.com/trust/security/report-a-vulnerability). ",
"integrity_requirement": null,
"max_severity": "high"
},
{
"asset_identifier": "clearme.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "medium",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "You can sign up for a free CLEAR account for 2 months by using the promo code “HACKER2020”.",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "com.clearme.Clear",
"asset_type": "OTHER_IPA",
"availability_requirement": "medium",
"confidentiality_requirement": "medium",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "You must install the app using [this link](https://clear.app.link/hackerone-mobile).\n\nYou can sign up for a free CLEAR account for 2 months by using the promo code “HACKER2020”. There are also free memberships offered when signing up for a [Sports](https://clearme.com/sports) membership.",
"integrity_requirement": "medium",
"max_severity": "critical"
},
{
"asset_identifier": "com.clearme.clearapp",
"asset_type": "OTHER_APK",
"availability_requirement": "medium",
"confidentiality_requirement": "medium",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "You must install the app using [this link](https://clear.app.link/hackerone-mobile).\n\nYou can sign up for a free CLEAR account for 2 months by using the promo code “HACKER2020”.",
"integrity_requirement": "medium",
"max_severity": "critical"
},
{
"asset_identifier": "concierge.clearme.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "enroll.clearme.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "http://verified.clearme.com/dashboard",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "identity.clearme.com",
"asset_type": "URL",
"availability_requirement": "medium",
"confidentiality_requirement": "medium",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "medium",
"max_severity": "critical"
},
{
"asset_identifier": "ir.clearme.com",
"asset_type": "URL",
"availability_requirement": "medium",
"confidentiality_requirement": "none",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Public Investor Relations Site",
"integrity_requirement": "medium",
"max_severity": "critical"
},
{
"asset_identifier": "mobile.clearme.com",
"asset_type": "URL",
"availability_requirement": "medium",
"confidentiality_requirement": "medium",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "This is the backend that supports our flagship iOS and Android apps. Please read the \"Mobile App\" section under our program's policy to see the best way to test as well as the eligibility requirements for testing. Please install the app via [this link](https://clear.app.link/hackerone-mobile).",
"integrity_requirement": "medium",
"max_severity": "critical"
},
{
"asset_identifier": "my.clearme.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Clear Member Portal",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "scan.clearme.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "none",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Must only referencing physical location parameter \"CLR\". Attempts to scan or attack other production locations ( Barclays Center, JFK, LAX, Madison Square Garden, SoFi Stadium, etc) is not authorized and may not be eligible for bounty.",
"integrity_requirement": "medium",
"max_severity": "critical"
},
{
"asset_identifier": "verified.clearme.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "verified.clearme.com/v1/verification_sessions",
"asset_type": "API",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Public facing API for starting a session in C1.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "web-edge.clearme.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "www.clearme.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Primary Marketing Site",
"integrity_requirement": "high",
"max_severity": "critical"
}
],
"out_of_scope": [
{
"asset_identifier": "docs.clearme.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "none",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "none"
},
{
"asset_identifier": "fieldsupport.clearme.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "hub.clearme.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "none"
},
{
"asset_identifier": "legal.clearme.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "none"
}
]
}
}clearme.com