— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for KOHO.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 49,
"average_time_to_first_program_response": 0,
"average_time_to_report_resolved": 4894,
"handle": "koho",
"id": 0,
"managed_program": false,
"name": "KOHO",
"offers_bounties": true,
"offers_swag": false,
"response_efficiency_percentage": 99,
"submission_state": "open",
"url": "https://hackerone.com/koho",
"website": "https://koho.ca",
"targets": {
"in_scope": [
{
"asset_identifier": "1091010942",
"asset_type": "APPLE_STORE_APP_ID",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "iOS Mobile app",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "app.koho.ca",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Our app API gateway.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "assets.koho.ca",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "none",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "low",
"max_severity": "low"
},
{
"asset_identifier": "ca.koho",
"asset_type": "GOOGLE_PLAY_APP_ID",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Android Mobile app",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "clicks.koho.ca",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "none",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "none",
"max_severity": "low"
},
{
"asset_identifier": "http://api.koho.ca/1.0",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Our main API gateway",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "http://api.koho.ca/partner",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Used for API calls to/for our partners",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "login.koho.ca",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "usercontent.koho.ca",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Used for our assets to be delivered to customers (i.e. logo, stylesheets, etc.).",
"integrity_requirement": null,
"max_severity": "medium"
},
{
"asset_identifier": "web.koho.ca",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Customer-facing Web application",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "www.koho.ca",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Marketing website",
"integrity_requirement": null,
"max_severity": "medium"
}
],
"out_of_scope": [
{
"asset_identifier": "*.koho.ca/cdn-cgi",
"asset_type": "WILDCARD",
"availability_requirement": "none",
"confidentiality_requirement": "none",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": "none",
"max_severity": "none"
},
{
"asset_identifier": "*.line-of-credit.koho.ca",
"asset_type": "WILDCARD",
"availability_requirement": "low",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "none"
}
]
}
}1091010942· critical*.koho.ca/cdn-cgiwildcard*.line-of-credit.koho.cawildcard