how we sort the index, not an estimate of what you’ll earn
Attack surface
6 in-scope
emails.judge.meurl· criticalcache.judge.meurl· criticaljudge.me/reviewsurl· criticalinsights.judgeme.devurl· criticaljudge.meurl· criticalshop.judge.meurl· criticalnone listed
+ added 1 scope · emails.judge.me
− removed 2 scopes · bigcommerce-adapter.judge.me, woocommerce-adapter.judge.me
7h ago
first indexed
92d ago · 7 in-scope assets
No reports yet. Be the first to share your triage timing for Judge.me .
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/judgeme",
"name": "Judge.me ",
"handle": "judgeme",
"targets": {
"in_scope": [
{
"asset_type": "URL",
"instruction": "This is a simple NodeJS server, using Hapi framework. It's basically to store and cache our public widgets' HTML content, so that when end users want to fetch our widget content, they can fetch from this server directly, which is faster and more resilient to spikes in number of requests.\n\nPlease see our [help desk article](https://support.judge.me/support/solutions/articles/44001816387-how-to-make-requests-to-the-judge-me-cache-server) on how to enable and use this server.",
"max_severity": "critical",
"asset_identifier": "cache.judge.me",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "medium"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "emails.judge.me",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "This is our new product. It is user (reviewer) facing, unlike the other assets, which are merchant facing. Its entry point is https://judge.me/reviews, and its pages are prefixed with https://judge.me/reviews.",
"max_severity": "critical",
"asset_identifier": "https://judge.me/reviews",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "insights.judgeme.dev",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "This is the core part of our system. It hosts our main app [Judge.me Product Reviews](https://apps.shopify.com/judgeme) and is also the central point of communication for other assets.",
"max_severity": "critical",
"asset_identifier": "judge.me",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "This is lightweight, basically just to connect our other Shopify apps to our main asset https://judge.me/.\n\nIts entry point is https://shop.judge.me/login?app_key=ali_reviews or https://apps.shopify.com/aliexpress-review-importer",
"max_severity": "critical",
"asset_identifier": "shop.judge.me",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
}
],
"out_of_scope": []
},
"website": "https://judge.me",
"offers_swag": true,
"managed_program": true,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 731,
"response_efficiency_percentage": 75,
"average_time_to_report_resolved": 801,
"average_time_to_first_program_response": 0
}