— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Tools for Humanity.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": false,
"average_time_to_bounty_awarded": 383,
"average_time_to_first_program_response": 5,
"average_time_to_report_resolved": 1235,
"handle": "toolsforhumanity",
"id": 0,
"managed_program": true,
"name": "Tools for Humanity",
"offers_bounties": true,
"offers_swag": false,
"response_efficiency_percentage": 91,
"submission_state": "open",
"url": "https://hackerone.com/toolsforhumanity",
"website": "https://toolsforhumanity.com",
"targets": {
"in_scope": [
{
"asset_identifier": "*.consumer.worldcoin.org",
"asset_type": "WILDCARD",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Secondary Asset**\n\nWorld App backend. TFH-owned asset",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "*.toolsforhumanity.com",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Secondary Asset**\n\nTFH-owned asset",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "*.worldcoin-distributors.com",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Secondary Asset**\n\nWorldcoin Foundation-owned asset",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "*.worldcoin.dev",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Secondary Asset**\n\nWorldcoin Foundation-owned asset",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "*.worldcoin.org",
"asset_type": "WILDCARD",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Secondary Asset**\n\nWorldcoin Foundation-owned asset",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "Primary Assets",
"asset_type": "OTHER",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "Secondary Assets",
"asset_type": "OTHER",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "developer.worldcoin.org",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Primary Asset**\n\nWorldcoin Foundation-owned asset",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://apps.apple.com/no/app/world-app-worldcoin-wallet/id1560859847",
"asset_type": "APPLE_STORE_APP_ID",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Primary Asset**\n\nTFH-owned asset",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://docs.world.org/world-chain/reference/address-book",
"asset_type": "SMART_CONTRACT",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Primary Asset**\n\nWorldcoin Foundation-owned asset.\n\nSmart contracts listed in this page are within scope for our program.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/worldcoin",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Secondary Asset**\n\nWorldcoin Foundation-owned asset",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/worldcoin/orb-core",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Primary Asset**",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/worldcoin/orb-firmware",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Primary Asset**",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/worldcoin/orb-messages",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Secondary Asset**",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/worldcoin/orb-relay-messages",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Secondary Asset**",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/worldcoin/orb-rustzone",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Primary Asset**",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/worldcoin/orb-secure-element",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Primary Asset**",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/worldcoin/orb-software",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Primary Asset**",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://play.google.com/store/apps/details?id=com.worldcoin",
"asset_type": "GOOGLE_PLAY_APP_ID",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Primary Asset**\n\nWorld App for Android. TFH-owned asset",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "toolsforhumanity.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Secondary Asset**\n\nTFH-owned asset",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "world.org",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Secondary Asset**\n\nWorld Foundation-owned asset",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "worldcoin.org",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "**Secondary Asset**\n\nWorldcoin Foundation-owned asset",
"integrity_requirement": null,
"max_severity": "critical"
}
],
"out_of_scope": [
{
"asset_identifier": "https://github.com/worldcoin/orb-hardware",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "support.world.org",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "support.worldcoin.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
}
]
}
}github.com/worldcoin· criticalgithub.com/worldcoin/orb-core· criticalgithub.com/worldcoin/orb-firmware· criticalgithub.com/worldcoin/orb-messages· criticalgithub.com/worldcoin/orb-relay-messages· criticalgithub.com/worldcoin/orb-rustzone· criticalgithub.com/worldcoin/orb-secure-element· criticalgithub.com/worldcoin/orb-software· criticalPrimary Assets· criticalSecondary Assets· criticalplay.google.com/store/apps/details?id=com.worldcoin· critical