Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
5 in-scope
*.luminor.eescope· critical*.luminor.ltscope· critical*.luminor.lvscope· critical*.luminorgroup.comscope· criticalAny other Luminor System, Website, App, Domain and IP· criticalfirst indexed
92d ago · 5 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Luminor.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/luminor",
"name": "Luminor",
"handle": "luminor",
"targets": {
"in_scope": [
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.luminor.ee",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.luminor.lt",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.luminor.lv",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.luminorgroup.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "OTHER",
"instruction": "Luminor features an open scope. Any asset owned or operated by Luminor is in scope of this program.",
"max_severity": "critical",
"asset_identifier": "Any other Luminor System, Website, App, Domain and IP",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
}
],
"out_of_scope": [
{
"asset_type": "WILDCARD",
"instruction": "E.g. kyc.ondato.net or kyc.api.ondato.net - These are not Luminor owned assets, but third party. Do not test on those systems.",
"max_severity": "none",
"asset_identifier": "*.ondato.net",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "This is not an asset owned by Luminor. Do not conduct any testing on this asset.",
"max_severity": "none",
"asset_identifier": "luminor.nyc3.digitaloceanspaces.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
}
]
},
"website": "http://www.luminor.lv",
"offers_swag": true,
"managed_program": false,
"offers_bounties": false,
"submission_state": "open",
"allows_bounty_splitting": false,
"average_time_to_bounty_awarded": null,
"response_efficiency_percentage": 100,
"average_time_to_report_resolved": null,
"average_time_to_first_program_response": 16
}