Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
11 in-scope
*.ascio.comscope· critical*.enom.comscope· critical*.exacthosting.comscope· critical*.hover.comscope· critical*.opensrs.comscope· critical*.simplybits.comscope· critical*.ting.comscope· critical*.tingmobile.comscope· critical*.tucowsdomains.comscope· critical*.wavelo.comscope· criticalwww.tucows.com· criticalThird Party Credential ListingThird Party Support Sitesfirst indexed
91d ago · 11 in-scope assets
No reports yet. Be the first to share your triage timing for Tucows (VDP).
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/tucows_vdp",
"name": "Tucows (VDP)",
"handle": "tucows_vdp",
"targets": {
"in_scope": [
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.ascio.com",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.enom.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.exacthosting.com",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.hover.com",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.opensrs.com",
"eligible_for_bounty": false,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.simplybits.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.ting.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.tingmobile.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.tucowsdomains.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*.wavelo.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://www.tucows.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
}
],
"out_of_scope": [
{
"asset_type": "WILDCARD",
"instruction": "This asset is provided by a third-party SaaS and therefore not in scope.",
"max_severity": "none",
"asset_identifier": "*.partners.wavelo.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "Due to the history and background into the Tucows business, and it's past as a shareware downloads site and mirror listing, we have many legacy subdomains pointed at third parties. Our program exclusions therefore list that we do not accept reports related to subdomains due to the historical nature of these subdomains.",
"max_severity": "none",
"asset_identifier": "*.tucows.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "OTHER",
"instruction": "",
"max_severity": "none",
"asset_identifier": "Third Party Credential Listing",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "OTHER",
"instruction": "",
"max_severity": "none",
"asset_identifier": "Third Party Support Sites",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "SOURCE_CODE",
"instruction": "We do not take reports for repositories under github.com/tucows",
"max_severity": "none",
"asset_identifier": "github.com/tucows",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "This asset is provided by a third-party SaaS and therefore not in scope.",
"max_severity": "none",
"asset_identifier": "partners.wavelo.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
}
]
},
"website": "http://tucows.com",
"offers_swag": false,
"managed_program": true,
"offers_bounties": false,
"submission_state": "open",
"allows_bounty_splitting": false,
"average_time_to_bounty_awarded": null,
"response_efficiency_percentage": 98,
"average_time_to_report_resolved": 696,
"average_time_to_first_program_response": 1
}