Featured on
Featured on
— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Semrush.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 167,
"average_time_to_first_program_response": 8,
"average_time_to_report_resolved": 677,
"handle": "semrush",
"id": 0,
"managed_program": false,
"name": "Semrush",
"offers_bounties": true,
"offers_swag": true,
"response_efficiency_percentage": 99,
"submission_state": "open",
"url": "https://hackerone.com/semrush",
"website": "https://www.semrush.com/",
"targets": {
"in_scope": [
{
"asset_identifier": "*.berush.com",
"asset_type": "WILDCARD",
"availability_requirement": "low",
"confidentiality_requirement": "medium",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Registration is stopped at the moment. ",
"integrity_requirement": "low",
"max_severity": "high"
},
{
"asset_identifier": "*.myinsights.io",
"asset_type": "WILDCARD",
"availability_requirement": "low",
"confidentiality_requirement": "medium",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "low",
"max_severity": "high"
},
{
"asset_identifier": "*.prowly.com",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "*.scatec.io",
"asset_type": "WILDCARD",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "medium",
"max_severity": "high"
},
{
"asset_identifier": "*.sellzone.com",
"asset_type": "WILDCARD",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "*.semrush.com",
"asset_type": "WILDCARD",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "*.semrush.net",
"asset_type": "WILDCARD",
"availability_requirement": "low",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "low",
"max_severity": "critical"
},
{
"asset_identifier": "*.seoab.io",
"asset_type": "WILDCARD",
"availability_requirement": "low",
"confidentiality_requirement": "medium",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "low",
"max_severity": "high"
},
{
"asset_identifier": "*.seoquake.com",
"asset_type": "WILDCARD",
"availability_requirement": "medium",
"confidentiality_requirement": "low",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "low",
"max_severity": "high"
},
{
"asset_identifier": "Leaked/Сompromised Employee accounts",
"asset_type": "OTHER",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Please review the program policy on this scope before submitting your report. ",
"integrity_requirement": null,
"max_severity": "medium"
},
{
"asset_identifier": "Other Semrush Related Asset",
"asset_type": "OTHER",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Please use this Asset tag for any High and Critical report that does not relate directly to another Semrush asset listed in scope, and is also NOT listed under the \"Out of Scope\" section.\nPlease note, that Semrush will only accept and review valid high and critical severity reports.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "investors.semrush.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "workflows.semrush.com",
"asset_type": "URL",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "www.semrush.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "high",
"max_severity": "critical"
}
],
"out_of_scope": [
{
"asset_identifier": "advocates.semrush.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "email.semrush.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
}
]
}
}Leaked/Сompromised Employee accounts· mediumOther Semrush Related Asset· critical