Figma

{
  "allows_bounty_splitting": true,
  "average_time_to_bounty_awarded": 195,
  "average_time_to_first_program_response": 12,
  "average_time_to_report_resolved": 935,
  "handle": "figma",
  "id": 0,
  "managed_program": true,
  "name": "Figma",
  "offers_bounties": true,
  "offers_swag": false,
  "response_efficiency_percentage": 76,
  "submission_state": "open",
  "url": "https://hackerone.com/figma",
  "website": "https://figma.com",
  "targets": {
    "in_scope": [
      {
        "asset_identifier": "Figma Atlassian App",
        "asset_type": "OTHER",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "https://marketplace.atlassian.com/apps/1217865/figma-for-jira \n\nUnauthorized access via this app or the APIs that this app uses is also in scope. ",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "Figma Desktop App",
        "asset_type": "OTHER",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "Figma Slack App",
        "asset_type": "OTHER",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "https://figma.slack.com/apps/A01N2QYSA81-figma-and-figjam?tab=more_info",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "Figma Weave",
        "asset_type": "OTHER",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "Figma Weave (formerly Weavy) is an iframe within the Figma application which can be reached by clicking \"Weave\" in Figma (redirects to https://figma.com/weave/...) or directly at https://weavy.ai.",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "Figma for Microsoft Teams",
        "asset_type": "OTHER",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "https://appsource.microsoft.com/en-us/product/office/wa200004521?tab=overview",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "Figma iOS and Android apps",
        "asset_type": "OTHER",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "critical"
      },
      {
        "asset_identifier": "api.figma.com",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "www.figma.com",
        "asset_type": "URL",
        "availability_requirement": "low",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": true,
        "eligible_for_submission": true,
        "instruction": "We are primarily looking for high/critical vulnerabilities in the system.",
        "integrity_requirement": "high",
        "max_severity": "critical"
      }
    ],
    "out_of_scope": [
      {
        "asset_identifier": "www.designsystems.com",
        "asset_type": "URL",
        "availability_requirement": "low",
        "confidentiality_requirement": "none",
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": "",
        "integrity_requirement": "medium",
        "max_severity": "none"
      }
    ]
  }
}