Featured on
Featured on
— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Instacart.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 551,
"average_time_to_first_program_response": 13,
"average_time_to_report_resolved": 7171,
"handle": "instacart",
"id": 0,
"managed_program": true,
"name": "Instacart",
"offers_bounties": true,
"offers_swag": false,
"response_efficiency_percentage": 81,
"submission_state": "open",
"url": "https://hackerone.com/instacart",
"website": "https://instacart.com",
"targets": {
"in_scope": [
{
"asset_identifier": "*.instacart.com",
"asset_type": "WILDCARD",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "*.instacart.tools",
"asset_type": "WILDCARD",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "545599256",
"asset_type": "APPLE_STORE_APP_ID",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Instacart’s iOS application for online grocery delivery.\npackage name: com.instacart",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "Android & iOS App for Instacart Shoppers",
"asset_type": "OTHER",
"availability_requirement": "medium",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "To download the shoppers app please visit https://shoppers.instacart.com/apps and enter your phone number to get the download link\nWhat it does?\nShoppers receive orders through the app on their smartphone and then they shop and deliver groceries to the customers\n",
"integrity_requirement": "medium",
"max_severity": "critical"
},
{
"asset_identifier": "admin.instacart.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "An admin page that lets our internal users access tools, reports. It is used by customer support for order refunds, redelivery. Internal corporate employees can use it for editing store configuration and warehouse availability.",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "api.instacart.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "A service that allows Instacart's retailers to connect to Instacart's API to do fulfillment through their apps/websites.",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "com.instacart.client",
"asset_type": "GOOGLE_PLAY_APP_ID",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Instacart’s Android application for online grocery delivery.",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "shoppers.instacart.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "A service that allows people to apply for the shoppers position at Instacart",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "template.uat.foodstorm.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "You can create your own test account in template.uat.foodstorm.com for testing",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "www.instacart.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Web application to provide online ordering of groceries for either delivery or in store pick up.",
"integrity_requirement": "high",
"max_severity": "critical"
}
],
"out_of_scope": [
{
"asset_identifier": "*.email.instacart.com",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "brand.instacart.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "careers.instacart.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "carrotstore.instacart.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "corporate.instacart.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "covidresponse.instacart.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "design.instacart.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "enterprise-status.instacart.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "Third-party system - [Atlassian Statuspage](https://www.atlassian.com/software/statuspage)",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "instacart.careers",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "life.instacart.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "news.instacart.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "tech.instacart.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
}
]
}
}admin.instacart.com· critical545599256· criticalAndroid & iOS App for Instacart Shoppers· criticalcom.instacart.client· critical