Featured on
Featured on
— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Vendasta.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": false,
"average_time_to_bounty_awarded": null,
"average_time_to_first_program_response": 1,
"average_time_to_report_resolved": 5352,
"handle": "vendasta",
"id": 0,
"managed_program": true,
"name": "Vendasta",
"offers_bounties": false,
"offers_swag": false,
"response_efficiency_percentage": 100,
"submission_state": "open",
"url": "https://hackerone.com/vendasta",
"website": "http://vendasta.com",
"targets": {
"in_scope": [
{
"asset_identifier": "*.apigateway.co",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "*.vendasta-internal.com",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "*.yesware.com",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Sign up to the platform via https://www.yesware.com/sign-up using a Google or Microsoft account. Please note, Wordpress (www.yesware.com) and Zendesk (help.yesware.com) assets are out of scope.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "customervoice.biz",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "To access this domain, activate the free-tier version of \"Customer Voice\" for a test account. For more information on activating products, visit: https://support.vendasta.com/hc/en-us/articles/4406958134807-Activate-Products",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "partners.vendasta.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Sign up for access to our platform using: https://signup.vendasta.com/?variant=hackerone",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "task-manager.biz",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "your-domain.pdqs.mobi",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "To access this domain, activate the free-tier version of \"Listing Builder\" for a test account. For more information on activating products, visit: https://support.vendasta.com/hc/en-us/articles/4406958134807-Activate-Products",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "your-domain.smblogin.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "To access this domain, create a test account in the Business > Accounts page within Partner Center. Select this test account and choose \"Business App\" from the \"Open In\" menu. See this support doc for more info: https://support.vendasta.com/hc/en-us/articles/4406958960023-Accessing-Business-App-as-a-Partner-Center-admin",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "your-domain.snapshotreport.biz",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "For activating and testing the Snapshot Report, see our support docs: https://support.vendasta.com/hc/en-us/articles/4406959860887-Create-Snapshot-Reports",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "your-domain.socialsmbs.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "To access this domain, activate the free-tier version of \"Social Marketing\" for a test account. For more information on activating products, visit: https://support.vendasta.com/hc/en-us/articles/4406958134807-Activate-Products",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "your-domain.steprep.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "To access this domain, activate the free-tier version of \"Reputation Manager\" for a test account. For more information on activating products, visit: https://support.vendasta.com/hc/en-us/articles/4406958134807-Activate-Products",
"integrity_requirement": null,
"max_severity": "critical"
}
],
"out_of_scope": [
{
"asset_identifier": "Spamming of forms and APIs with automated vulnerability scanners are strictly out of scope",
"asset_type": "OTHER",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "help.yesware.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "roadmap.vendasta.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "Uses a third-party content management system so it is ineligible for VDP.",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "t.yesware.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "This subdomain is used for generated email tracking links. **We do not accept open-redirect issues for this subdomain**.",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "www.vendasta.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "www.yesware.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
}
]
}
}Spamming of forms and APIs with au…ers are strictly out of scope