Featured on
Featured on
— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Lowe's Companies VDP.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": false,
"average_time_to_bounty_awarded": null,
"average_time_to_first_program_response": 2,
"average_time_to_report_resolved": null,
"handle": "lowes",
"id": 0,
"managed_program": true,
"name": "Lowe's Companies VDP",
"offers_bounties": false,
"offers_swag": false,
"response_efficiency_percentage": 76,
"submission_state": "open",
"url": "https://hackerone.com/lowes",
"website": "http://lowes.com",
"targets": {
"in_scope": [
{
"asset_identifier": "com.LowesAndroid",
"asset_type": "GOOGLE_PLAY_APP_ID",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "This application is only accessible in the US. VPN use may be required for testing.\nGoogle Play Store Link: https://play.google.com/store/apps/details?id=com.lowes.android&hl=en_US&gl=US",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "com.lowes.LowesStore",
"asset_type": "APPLE_STORE_APP_ID",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "This application is only accessible in the US. VPN use may be required for testing.\nApple App Store Link: https://apps.apple.com/us/app/lowes-home-improvement/id457954781",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "com.lowes.LowesStoreTestFlight",
"asset_type": "TESTFLIGHT",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Public TestFlight Link: https://testflight.apple.com/join/nB0VMPeC",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://corporate.lowes.com/",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://talent.lowes.com/",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://uat.lpsdxp.com/",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://www.lowes.co.in/",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "lowes.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "This website uses self-registration for user accounts. Please create accounts responsibly and using your HackerOne designated email address.",
"integrity_requirement": null,
"max_severity": "critical"
}
],
"out_of_scope": [
{
"asset_identifier": "http://myfbm.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "www.lowesprosupply.com/",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "Please do not request a user account for this asset.\nTesting is to be performed as an unauthenticated user.",
"integrity_requirement": null,
"max_severity": "none"
}
]
}
}