Featured on
Featured on
— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Plaid.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 316,
"average_time_to_first_program_response": 22,
"average_time_to_report_resolved": null,
"handle": "plaid",
"id": 0,
"managed_program": true,
"name": "Plaid",
"offers_bounties": true,
"offers_swag": false,
"response_efficiency_percentage": 87,
"submission_state": "open",
"url": "https://hackerone.com/plaid",
"website": "https://plaid.com",
"targets": {
"in_scope": [
{
"asset_identifier": "cdn.plaid.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "This is on Amazon CloudFront, so the scope here is limited to our content and configuration issues.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "dashboard.plaid.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Plaid's developer dashboard",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "demo.plaid.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Demo Plaid developer integration",
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "https://github.com/plaid/plaid-link-android",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Plaid's drop-in client-side module for authentication. Available for web, mobile web and iOS.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/plaid/plaid-link-ios",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Plaid's drop-in client-side module for authentication. Available for web, mobile web and iOS.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/plaid/plaid-ruby",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "The official Ruby bindings for the Plaid API. It's generated from our OpenAPI schema",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/plaid/react-native-plaid-link-sdk",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Plaid Link for React Native",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/plaid/react-plaid-link",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "React hooks and components for integrating with the Plaid Link drop module",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "my.plaid.com",
"asset_type": "URL",
"availability_requirement": "medium",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Portal for customers to access their information as seen by Plaid apps they have permissioned. https://my.plaid.com",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "plaid.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Plaid's marketing website, not full *.plaid.com",
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "production.plaid.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Plaid's developer API. Docs: https://plaid.com/docs",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "secure.plaid.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "This is an alias for cdn.plaid.com",
"integrity_requirement": null,
"max_severity": "critical"
}
],
"out_of_scope": [
{
"asset_identifier": "https://my.plaid.com/data-subject-request-form",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": null,
"max_severity": "none"
}
]
}
}