bounty.index
/to search
Live data paused. Neon is grumpy. Programs still load from the upstream mirror; watchlists and alerts are taking a nap.
Featured on
Ship notes · new platforms · outagesFollow @TheV_Stack for bounty.index updates
programs/HackerOne/ro
Ro

HackerOne·17 in-scope · 10 out·updated 11m ago·RSS
Discord →open program
vdpmanagedopen
first response
—
no reports yet
scope
10 out
asset mix
wildcard
8 wildcard · 7 url · 2 ios
last change
—
no history yet
In scope

017
wildcards08
Recent changes

— no diffs detected in snapshot history yet —
Community reports

0 reports
No reports yet — be the first to share your triage timing for Ro.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
Your notes

▸ raw source payload
{
  "allows_bounty_splitting": false,
  "average_time_to_bounty_awarded": null,
  "average_time_to_first_program_response": null,
  "average_time_to_report_resolved": null,
  "handle": "ro",
  "id": 0,
  "managed_program": true,
  "name": "Ro",
  "offers_bounties": false,
  "offers_swag": false,
  "response_efficiency_percentage": 100,
  "submission_state": "open",
  "url": "https://hackerone.com/ro",
  "website": "https://ro.co",
  "targets": {
    "in_scope": [
      {
        "asset_identifier": "*.getroman.com",
        "asset_type": "WILDCARD",
        "availability_requirement": "low",
        "confidentiality_requirement": "low",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "low",
        "max_severity": "medium"
      },
      {
        "asset_identifier": "*.hellorory.com",
        "asset_type": "WILDCARD",
        "availability_requirement": "low",
        "confidentiality_requirement": "low",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "low",
        "max_severity": "medium"
      },
      {
        "asset_identifier": "*.kit.ro.co",
        "asset_type": "WILDCARD",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": null,
        "integrity_requirement": null,
        "max_severity": "medium"
      },
      {
        "asset_identifier": "*.modernfertility.com",
        "asset_type": "WILDCARD",
        "availability_requirement": "low",
        "confidentiality_requirement": "low",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "low",
        "max_severity": "medium"
      },
      {
        "asset_identifier": "*.myplenity.com",
        "asset_type": "WILDCARD",
        "availability_requirement": "low",
        "confidentiality_requirement": "none",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "none",
        "max_severity": "low"
      },
      {
        "asset_identifier": "*.ro.co",
        "asset_type": "WILDCARD",
        "availability_requirement": "low",
        "confidentiality_requirement": "low",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "\n",
        "integrity_requirement": "low",
        "max_severity": "medium"
      },
      {
        "asset_identifier": "*.ropharmacy.com",
        "asset_type": "WILDCARD",
        "availability_requirement": "low",
        "confidentiality_requirement": "low",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "low",
        "max_severity": "medium"
      },
      {
        "asset_identifier": "1514854156",
        "asset_type": "APPLE_STORE_APP_ID",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "The latest version of iOS app installed from the official store at:\nhttps://apps.apple.com/us/app/ro/id1514854156",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "1585858911",
        "asset_type": "APPLE_STORE_APP_ID",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "The latest version of iOS app installed from the official store at: \nhttps://apps.apple.com/us/app/ro/id1585858911",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "http://ro.co/derm",
        "asset_type": "URL",
        "availability_requirement": "low",
        "confidentiality_requirement": "low",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "low",
        "max_severity": "medium"
      },
      {
        "asset_identifier": "http://ro.co/mind",
        "asset_type": "URL",
        "availability_requirement": "low",
        "confidentiality_requirement": "low",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "low",
        "max_severity": "medium"
      },
      {
        "asset_identifier": "http://ro.co/pharmacy",
        "asset_type": "URL",
        "availability_requirement": "low",
        "confidentiality_requirement": "low",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "low",
        "max_severity": "medium"
      },
      {
        "asset_identifier": "http://ro.co/spermkit",
        "asset_type": "URL",
        "availability_requirement": "low",
        "confidentiality_requirement": "low",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "",
        "integrity_requirement": "low",
        "max_severity": "medium"
      },
      {
        "asset_identifier": "https://*.ro.co/svc/auth-verifications/start.public/phone",
        "asset_type": "WILDCARD",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": null,
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "login.ro.co",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "Our custom domain for SSO through Auth0",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "my.ro.co",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "Must have an account that is created through an Online Visit (OV). For example, through the online visit at https://www.getroman.com/",
        "integrity_requirement": "high",
        "max_severity": "critical"
      },
      {
        "asset_identifier": "start.ro.co",
        "asset_type": "URL",
        "availability_requirement": "high",
        "confidentiality_requirement": "high",
        "eligible_for_bounty": false,
        "eligible_for_submission": true,
        "instruction": "Online visits from any of our products (getroman.com, ro.co/mind, etc) will redirect to start.ro.co. Navigating directly to start.ro.co without beginning from an OV only redirects to ro.co",
        "integrity_requirement": "high",
        "max_severity": "critical"
      }
    ],
    "out_of_scope": [
      {
        "asset_identifier": "community.modernfertility.com",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": "",
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "https://*.ro.co/api/members",
        "asset_type": "WILDCARD",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "https://*.ro.co/svc/auth-verifications/*/phone/*",
        "asset_type": "WILDCARD",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "https://login.ro.co/authorize",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "https://ro.co/api/account-exists",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "https://ro.co/api/presigned-upload-url",
        "asset_type": "URL",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "https://ro.co/messages/*",
        "asset_type": "WILDCARD",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "https://ro.co/svc/auth-verifications/*/phone/*",
        "asset_type": "WILDCARD",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "https://ro.co/weight-loss/glp1-insurance-checker/*",
        "asset_type": "WILDCARD",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": null,
        "max_severity": "none"
      },
      {
        "asset_identifier": "https://ro.co/weight-loss/supply-tracker/*",
        "asset_type": "WILDCARD",
        "availability_requirement": null,
        "confidentiality_requirement": null,
        "eligible_for_bounty": false,
        "eligible_for_submission": false,
        "instruction": null,
        "integrity_requirement": null,
        "max_severity": "none"
      }
    ]
  }
}
Ro

In scope

Recent changes

Community reports

Your notes

Out of scope
